{"report_id":"fb4cfda7-9654-4c3a-9d4f-54c22c86714a","version":6,"status":"done","tags":[],"date":"2026-05-03T08:45:37Z","url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"title":"(1) New Message!","dom":{"size":7855,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3638)","md5":"c40f7419bbc67d5fd9670f2525bbdc60","sha1":"63833a2619ee18addaeab69d6080e8961c8a951b","sha256":"1615f57c4a3d100657606d56486c032b12830aa401aa1b8e74eaaf79a50fe702","sha512":"bcd0a19caf4da5667088c60e4a7a0056790f4686f53e7a19556ef987f55df61f5fd6b1d337f6e5b3dd263ff568c8e06751845c652dd6ce1e42cf9d5e0b2a4fd8","ssdeep":"192:WcgU1aiujJhbaPS8XkpgjYt86aYUom8z4iujJhbaPS8XkpgjYt86aYUovSV3VCkC:NQ0a3iy8ez+0a3iy8/l2","tlshash":"9cf11cbbbd7911349868a5f9b0dff69a3e10ad076500cf40fc6d0989a7703650c789ec","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"2026-05-03T08:45:43.42971Z","last_seen":"2026-05-03T08:45:43.42971Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T08:45:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":17}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-03T08:45:16Z","timestamp":1777797916,"ip_dst":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44306,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-03T08:45:16.074636+0000\",\"flow_id\":151024121478796,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":44306,\"dest_ip\":\"172.66.44.89\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"roblox-custom-name-filter-script.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-03T08:45:16.065164+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"links.mtevor.com","ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":0,"first_seen":"2026-03-10T23:35:42.996415Z","last_seen":"2026-04-30T20:02:02.018788Z","alert_count":0,"request_count":1,"received_data":740,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adxpy.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-12-08T23:25:40.439519Z","last_seen":"2026-04-27T10:27:55.96716Z","alert_count":0,"request_count":4,"received_data":13697,"sent_data":1846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-05-01T11:00:58.799244Z","alert_count":10,"request_count":5,"received_data":20193,"sent_data":6403,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"roblox-custom-name-filter-script.pages.dev","ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-03T08:45:39.475949Z","last_seen":"2026-05-03T08:45:39.475949Z","alert_count":0,"request_count":4,"received_data":61675,"sent_data":2059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"immigrationacre.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-30T08:57:45.831225Z","last_seen":"2026-05-03T03:57:43.096954Z","alert_count":12,"request_count":4,"received_data":294960,"sent_data":1912,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.nightdestruct.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-30T18:41:21.656654Z","last_seen":"2026-04-27T21:04:33.759813Z","alert_count":0,"request_count":9,"received_data":387207,"sent_data":4553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-04-30T00:28:48.277101Z","alert_count":0,"request_count":1,"received_data":43549,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-05-01T00:53:34.616312Z","alert_count":0,"request_count":3,"received_data":206442,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-04-30T12:49:09.989707Z","alert_count":64,"request_count":16,"received_data":25485,"sent_data":15527,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"mtevor.com","ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":3995008,"first_seen":"2019-11-04T00:42:52Z","last_seen":"2026-04-27T10:27:56.081875Z","alert_count":0,"request_count":1,"received_data":7824,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-29T21:12:11.35333Z","alert_count":0,"request_count":2,"received_data":1444,"sent_data":1000,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":4,"received_data":175884,"sent_data":2308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-30T10:40:07.827721Z","alert_count":6,"request_count":3,"received_data":257868,"sent_data":1320,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-04-30T11:37:55.11212Z","alert_count":6,"request_count":2,"received_data":4211,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-04-26T15:03:11.062041Z","alert_count":15,"request_count":5,"received_data":211003,"sent_data":6701,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T09:09:41.118343Z","times_seen":20091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b285e64a14382eb523dc37585f47a431","sha1":"8593508c84de4e0b400c34d2d8b7f6087c767dc4","sha256":"d9c7a3b91b995ce683feffceec5fbba421274f60fbb7c223a7ab7076f06c34da","sha512":"5adf8ee8067d6d05c3447ff44974f5449144ffcdbe6690ddf44357228faf77bbd5ee676e48fcefffba3dfe2c8e382a29f06a23d5f31bba14decc6898fee12e78","ssdeep":"","tlshash":"e2c02b2818e01915243040bcf12fd8783c4ec480c049d18c9c9c3c00d1c6e81c000cdc","size":130,"data":"","first_seen":"2026-05-03T08:45:43.486995Z","last_seen":"2026-05-03T08:45:43.486995Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","size":671,"data":"","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-08T20:52:52.62635Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d2eae780579b688f8af48b5cd2a061","sha1":"671820c0c980a80c496e39110d4c479415a4d5d8","sha256":"75b099ba5ba2a53575deed1fd0a5c56bfd4886e05301761eed89b1ce91eb4366","sha512":"fbe5bbc7458bb09b6d575220cede4933d76da2b3b824156765ef1389686316407e3b6c089ed85b9f6bb1fbe796632eba903ab8666a75e9ab15832fedfefe89aa","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjw31PTz5Ysk5qMUP+04b:2dSAkrdQJoYlLwlBFkLt","tlshash":"3c93c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","size":92490,"data":"","first_seen":"2026-05-03T08:44:19.137958Z","last_seen":"2026-05-03T08:45:43.447595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb73c9c1f5ecb08f9a0205a14e2841e0","sha1":"dd5807b9d4c32d9dff08f8f14c726804f49bfd5e","sha256":"63578fe671a2d9eeff56bb7df57695eb7728b49bfb50db91bf2cf74430df93c9","sha512":"b18875be5353ae7972e16617a0eadc0adbe806c68cd098cd54f462b4308c7dff48e7ce73da68968f66d9dcc00ac1cc891e8d1b1312298a75990eeecdbc8187ca","ssdeep":"","tlshash":"7fc08cf68004b21820e7caf02028c0c0a324ec20300a383166e0081082ac50d0cb2bb8","size":146,"data":"","first_seen":"2025-12-16T03:50:13.724775Z","last_seen":"2026-08-08T20:52:52.66726Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c412bbcba09e7104a844f068dc420c15","sha1":"018b5536d9a1031897575f979209fc396b023d21","sha256":"a6f4ed2a396dfc8127825ce667596a86db2b4c9e9714a6776aedc332ce3119a9","sha512":"306e128c1e339074e03c05f6820e3492dd0b8ad058c6cf56d0a70fa1cf081a9cc97db4f24c15bb36676b8c673887c08e306ee193cf45324b079e3938ca39092a","ssdeep":"96:LhNOuozWBCFujJmQavYaPSTgqwDbk/Rg1pF6t4Rm/dgYUw1jDSV3VCfMEDaH:L8z4iujJhbaPS8XkpgjYt86aYUovSV3t","tlshash":"8c910aba7db51134946961fd60aff65a3e20a907a900cf41fc6d8a85ab703640cb8dec","size":4207,"data":"","first_seen":"2026-05-03T08:45:43.489537Z","last_seen":"2026-05-03T08:45:43.489537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f04c41f8acbe1896a04adf683a5f50","sha1":"c43780b476488b7b723c6e463397263d268c0612","sha256":"d7c38975e1b16aa76895318026d67c2ca83a41ae43b9419041a898facd34720b","sha512":"f477f31fc8d52891075cc8889855386d8705476038e9d646ca0b6001cefab5bd0f438c72c4fd0d9654bf25092223c7a4dd7d25ff9419f97744adecec35990616","ssdeep":"","tlshash":"58d05b340d00021604721dec6c959fb47e367c41b3742160f9bcd91591d1947c162feb","size":258,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-08T20:52:52.639112Z","times_seen":1678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","size":4034,"data":"","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-08T20:52:52.610665Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27232549abd814635dde5a338cbc9e","sha1":"90b24ec16b789453aec40bcd9b3b620ac4721335","sha256":"2f136d970baa2f3c28b182172051502e723fd8ce872321a266be73da9cf97afa","sha512":"7575109e4beefb0aadde26992f1016198461e154e0a5b94d05dc718373963f73de511184d1e072acf5bbb6ccb4feef0184d2d26e61497c22f18e2abda1285bc4","ssdeep":"","tlshash":"cfc04cad5044b54830b2cdf42979c644e120cdd4354abc3526e2541155cc64e9c7677d","size":147,"data":"","first_seen":"2025-12-18T23:27:07.103769Z","last_seen":"2026-08-08T20:52:52.663413Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","size":7180,"data":"","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-08T20:52:52.626959Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73f73772a980d0b71c8097aeb93ba73","sha1":"dbd8ebdebe2e0f452407bb38a76deec742b80027","sha256":"496ed8b94f856087f1a4384dc7fa33b769c1c9439932825b506455b5bf4930b7","sha512":"a00b2f097b0624952e4c5ca29ba1c6fddd0187080cadb301185692695abe516a7d3c38d3a4d2d8f1357c0f6ffd80fb61519dbe59f028ee25fba80f30d19720c9","ssdeep":"","tlshash":"b9019eff24004c7448de19eeb2a8778ae8b6005b7d19142424194c7576a4b7603d2fb6","size":668,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-08T20:52:52.64058Z","times_seen":1650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3043924babea44e8e94b0aa19f11d89d","sha1":"c6ccf78fba768952994a37ad33a8309fe9454b5f","sha256":"5f96af838dd14f1b76712ba6f84df12026e8c0431a381c5e062361d390970d36","sha512":"9c78e351a02bfcc7181420b6ec071906e24734f3421c5d1b8e4a92a9973fd5125242fb6b22d6cfa53dea13a2aa99685055b52bcc8cc4a2fe88c8e0742621b6c5","ssdeep":"","tlshash":"7dd02bb1d12c0332029da14a7423c394713434daf3423080a01f87f950c4f96d41fcbd","size":273,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-08T20:52:52.641223Z","times_seen":1699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be1ad33be7d41ba348835875f817cd01","sha1":"9295dc65f4187d9969df88fb3be46050a8b67f4e","sha256":"330a8db2d86efd3ab3843200ce8495c35de0b744ed0d529c310d20fd75ab4f22","sha512":"b37eb7a08b301e816ccab8cb02bdeeab3e75bb5f51dd7ba23dcce2600730e962cc67552c02e5682b47528394933c38bc8313f26d5eb41ecb21edea09c65b5618","ssdeep":"","tlshash":"0af07d15e36523f4c177a764af7f73461a23060cc1c8421e20ec37e72c7750a42d2c65","size":601,"data":"","first_seen":"2026-01-08T23:26:01.715567Z","last_seen":"2026-08-08T20:52:52.660428Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"226c782d65137ec8ae370c3f15a7ed90","sha1":"2774ce51888638643ab2c46986a1f14cc0e9611c","sha256":"038bf48400657e80d98f345be270dea92de219ab52e10db20ee064182e788a92","sha512":"71e19c2a7b7b1c62a65e5e919f4ed15cfcc93184e2025f90c105601f7a7183469477ac7976ef3cc281d0a2a4b48be64281be6465887329f11cab54f609889b9c","ssdeep":"","tlshash":"2031bafea1b62515d9bcf5b5244f735a7e9540461b0902d3c5d66f006c942d41c6ee4c","size":1528,"data":"","first_seen":"2026-05-03T08:45:43.49482Z","last_seen":"2026-05-03T08:45:43.49482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb9d9f348fa0a0990998b66b89c4ec2","sha1":"8481e9b564ff4e2fa90683619d91eda81e1aed13","sha256":"9f5ec1e50a5d95990fe2387d7f3d364febb0cca8ff70b58cc3f3e9b78c342a8e","sha512":"0ae6b7bddc57879c8eeea09d7d37c35a0b60315cee9f6d604b1d01929e13a006bfc06a878f2a7e28ff839d5c336da46000fa0e9a4346c8bb00d48b582d1ef0eb","ssdeep":"","tlshash":"9821bb6b276543f1766af137b10a5bcbd5211a8ab485520f392cc18e0ee237533f9792","size":1276,"data":"","first_seen":"2026-01-05T23:26:03.820576Z","last_seen":"2026-07-18T05:45:03.63046Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a206e7286684b98050ad6527ac35ddf0","sha1":"a81c4a9bf9cc816eee3f2e91b2daac95bc5064d0","sha256":"11351c9db4227df20425c0e0fb9da2a261fc089266422cf09094576be0b34427","sha512":"65c5b3f6318b68470109ce3acdcff4e1e4eefd9e7bea007cdf3501943c2c90309085e78a6f1cff2cb65624ddd1fc9eccb0a0cbca1864c2107dc072ba5956e508","ssdeep":"","tlshash":"7321957b712612adca68c1d8e9bf32536b136c37ec424a458467080ae6a220409552fc","size":1272,"data":"","first_seen":"2026-05-03T08:45:43.497095Z","last_seen":"2026-05-03T08:45:43.497095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-08T20:52:52.635733Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a73d26dd421e931fcd8e269f07769d64","sha1":"1a82dcc6914fcd0bde9ad067afe327f864f417ef","sha256":"dbec47c6cca1b7f4d56e8ceb1d4cfa69d78067c7480a8c04bd9b96afe74e0af9","sha512":"f02e979135efca3b320a922788bfa4647013506e61a50d0e000b576eb984bca5f399213ee9ea56ba4a33825ab8c3aaf4c212ab233d340107df27759b16a5347e","ssdeep":"","tlshash":"107000080a0ae0a8080a0a023822c00c02800082000ae0a200000a0020000088820220","size":18,"data":"","first_seen":"2025-01-05T08:04:41.550371Z","last_seen":"2026-08-08T20:52:52.635733Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","size":5146,"data":"","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a529894d3286d527219ac471e1cd5a47","sha1":"4ac04d024d5e097b20a2ec99493a5b40a07def7f","sha256":"de7f25c63f8aee85b80dc11ecb1878e4487e52e537205d76023746f9786aea27","sha512":"c0ac07fabc2441e29f9db33a992c001edce654c4d7341f71a75ea85824d38231a304d8463bca7c03cfaf9341c0e3104e9d73c634267a94ba30ce855ef9a6b9a2","ssdeep":"","tlshash":"e0c08ca4eb04087071ac3ebd330aa3e2e8e876123030088296948090e2b92330420c80","size":145,"data":"","first_seen":"2025-12-16T03:50:13.718611Z","last_seen":"2026-08-08T20:52:52.661097Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cba4982a7ef7437b7a7ca87c3894cdb","sha1":"29332b8dfed947592127bc3483923a7209ce7bac","sha256":"ceac1fa1e0d68487855a2cbdca49923996c14d251cb68211688e066c81e26ae6","sha512":"07d31c600c04827b58b7c5dc832a328314db2c7228776ae10b214250d86639c01854e0241f78a8b56b4ce5dad6d7cf1bd07f5236919a4c3a451ee3a464e96512","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hkxx8cY:vIeZB0mdc5pSgqm","tlshash":"2693e8c8bf81f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","size":96858,"data":"","first_seen":"2026-05-03T08:45:43.474065Z","last_seen":"2026-05-03T08:45:43.474065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62108555dcf166b82c2583133cbd3c01","sha1":"32a764290e42608d68aa5e41c4a924f96ea5e184","sha256":"4363d47daba8106c8ae8dc68f3fc717ed521184586025f1a221d36376de40bd2","sha512":"fb7da7a7db62ad4ff8695e1e4ae9e2a5c3b1e08c3dbb6380caf66fc4e2e1bf69bae794f6225443d8b612aec3c1719f5e2c455cd16ea65fdba044883d2169af29","ssdeep":"768:Uj71XeuGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:aXeuGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6933078c7fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","size":51138,"data":"","first_seen":"2026-04-30T22:05:07.870978Z","last_seen":"2026-05-03T08:46:24.348858Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a485019b912d6aa1b59d138759f496","sha1":"c3eac62d8d836eb7fd3c5b52a8cd724844493900","sha256":"bd3048e5f3f6ad0d6c7ea2b3cd3e1ff83b9bf960298e4a708d2e545da130911b","sha512":"47bb7a6a6b9d6d4be5a6ee834d512bc068414c0cfcd6168f7debc36ad5e9a203a22d7d40c82f6370db35d669be6c555423785a5af4a825f01e43f51ad4df1b4a","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6pBBJ7o:cBQ8u91v7Hl1cQt7MrHysuq","tlshash":"58a3c68cbf50f55852f62432222f940af0e90c5641dcd198fa52f8ea7f7cf48e9769a4","size":103339,"data":"","first_seen":"2026-05-03T08:45:43.46178Z","last_seen":"2026-05-03T08:45:43.46178Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c61116072a3aed150693303749f3a3","sha1":"5ffb5b5427225efd2d592d1bf4bf3613027e69e8","sha256":"7f098ee0db613906e057c8814237ba1a33c352d04c1fd2b72ab5235d24082287","sha512":"f3498eb18f02a60e53e802581e42658f2d0b280610791645ebcd50374bc951aeab13f30e244c6167f3bfd1c1c38eb3aa52ec2f0aba865742abeadf817bffc8d8","ssdeep":"","tlshash":"0dc09b8c9f00185575327cdd7b261384fcd542dbb836dd555297c04265cd36bf04157c","size":145,"data":"","first_seen":"2025-12-18T23:27:07.113909Z","last_seen":"2026-08-08T20:52:52.666745Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16757a148f4933d36326d4e489c9e224","sha1":"3f34b359f127a0dfd04c65c7fd177783c9c0a325","sha256":"57878320d4c0fb91c24d616e51c0babfab2f3e66e2915121f6516ece6cdf87aa","sha512":"1fdfc686df08b608d5ea4603e89e97e476a850da959c6377b9e5eb8fc5ab9f1dbb255c4b03251f161df7598e50bb914274bd7642d978f5c586e1159a37c4dcba","ssdeep":"768:Uu73Lx6hMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:rLx6hMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"da3307887fb1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","size":51093,"data":"","first_seen":"2026-04-30T20:02:05.069642Z","last_seen":"2026-05-03T08:45:43.481261Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"349edacf65d0ff272bf6fd11233c1ead","sha1":"34b1fdbc95156d9d6b499a739a7ce1f8b57926b4","sha256":"82eb474cb30703539541a5d27d13890cc5d5af5633f642fb4d24666b4ff98848","sha512":"c474a12003f50e2206febb6e7d8fd2ca37e5dfee3b949c9fdbf5288207c1932bcfb5b78ed46706ea8675c34ed493dca4c05e3886a5685a6826f82307630581a3","ssdeep":"","tlshash":"2ed0c23a1d110b7104c619ea38d8a6987a3d384577293450e47ed900a0a4a898063ff7","size":276,"data":"","first_seen":"2023-03-09T05:07:28Z","last_seen":"2026-08-08T20:52:52.645653Z","times_seen":1639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0926f4acc68415f56e307eea6dceee29","sha1":"901d1938c05241db521a720b8b6c4f7121658692","sha256":"1021e999d0fbb16d4ab520a45f99dd8c53c51bee809f86375e0cbac2faef0ed8","sha512":"9d5d6802447688480086852debee1c38e9e4bd7e971a7b125232cebcac052e5006853bfdb3a13232632c47af4cd4306256d4b4a5f954e733b73bcb83cb3efc46","ssdeep":"96:eNVeozb2jv3XdSKJCfHzF3ork/RwI16YiPwx/1jDUCfMEDaH:2z6h6h4rkpls4LvUCkCaH","tlshash":"d881092dacd656387876e4fe243b625dfe50c00b1605dc42f98dda017f98ba01cadea8","size":4179,"data":"","first_seen":"2026-05-03T08:45:43.502036Z","last_seen":"2026-05-03T08:45:43.502036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"226e1cf348c70c9385ad8d161ba3aa67","sha1":"a9e456e82209df778946edf9565aea7025c51950","sha256":"7c3441e48c994ffde256a23c4f813e434646c4a7add7a7271dc383f3eccb084e","sha512":"f5b45f3bf019b130f98cd594e127f0854ec9b9f44d3035093d7193bee778e6c44d2cc1bfa825c22660af9dd5df6ef8fe742a645851d40a4cb160650e6c792662","ssdeep":"","tlshash":"3c21b43690cfaa6e26a2c89a502465afcf85cc7b6052e800f1290801b99fc322a924b0","size":1258,"data":"","first_seen":"2026-05-03T08:45:43.504059Z","last_seen":"2026-05-03T08:45:43.504059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ccc3895c83381d92f9785dac4d828e3","sha1":"7642605b9320acf7c24fa4b7adb133410fed8448","sha256":"5f705efec5796d7cb58621716b5d147f77209e3d1c7ec99003d1f81a46b3688d","sha512":"fc1dad08f7dafa427e2faf62b5c86a8c52a79855d763892e3604e2c21be2ef2100f7de88b96732253b574a2e418d73fc7b775fa51d1d86b7cf361bfff62053b7","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjwF1PTz5Ysk5qMUPKZ4N:2dSAkrdQJoYlLwfBFkhg","tlshash":"b493c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ae6c","size":92473,"data":"","first_seen":"2026-05-03T08:45:43.463255Z","last_seen":"2026-05-03T08:45:43.463255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"273f60d4b10a4f55ba85bb807bde2e92","sha1":"dc938218cedbc3017335c36555706ad690939f00","sha256":"5546c7e43df471fa4cd2e0d506cc90bfbed1d61dcacd0361655364cc98b9a699","sha512":"2f31d0143c1974daffef1061321c25a8671dd66110be74f5af98a5ce1384049901461fe4d136dc3ca2e655277ab2c1f678e28e15bb529b7acd40cb2569518656","ssdeep":"","tlshash":"873175be356e391188a9a6b660cebb9a3d549f02945587809c324ed965202ae4078cce","size":1542,"data":"","first_seen":"2026-05-03T08:45:43.505743Z","last_seen":"2026-05-03T08:45:43.505743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"558c3779ce5aac4481c86687cd8f15c3","sha1":"474fa56198ee722ebad4041dce2dcfc716fd923d","sha256":"7b2515a2c400be25e6daa78e4c6f35f43d67d244acb76818f1599f815b1995a8","sha512":"280f5da312b232e8638235a1b6094abc4abf38d94b8c327c668a848d830d0fe94d2b2830fb53be53076a724286b3c5b3f290f0e240267a71a57bddf00c8cd6e2","ssdeep":"","tlshash":"e1019c3d326407bb22ee0e3b23779e5476732844b40210b05e2d9da86410df112afabe","size":797,"data":"","first_seen":"2023-10-28T10:41:14Z","last_seen":"2026-08-08T20:52:52.649786Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"adxpy.pages.dev/adx-mainstream.json","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /adx-mainstream.json HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Db1h5d%2BF3XFyvsfsavyCfRB0RvJi8gOrr6D0pyzlL0dGDThA8sPQMv2jyMPWVMUL%2BjVk8PCbSU1%2F%2FqFdbuPNixWYuVXfpC2s%2Fd0M7zf8%2BWEf3W5LS%2FrAwLz%2Fu8dcBL9tDb4%3D\"}]}\r\netag: W/\"7b49849f40013f93e7f062a5ea9f812c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd153842723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1453,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ffbb69834723feb9c7113271b1c2ea2","sha1":"8bfa604b64d94fad6bbeaf5c580175e4001d4dc5","sha256":"46498f749be8fd2b102eb3563d490c7890b94ed1d0b5b133e2cc3c444ed048c2","sha512":"7b15f328c00533c83fa7c65fff45e5fff27b012955d49affd579a7c7eb14a66839822b50b7947d609d53e08419128bef2773fcb5bc6f95b77731662acf7cb001","ssdeep":"","tlshash":"f9319e999f1cf29410b24ad23c33e0bef598be063908dc9551dc9c6ac2a43e04d57666","first_seen":"2026-01-30T08:57:52.033645Z","last_seen":"2026-08-08T20:52:52.609519Z","times_seen":295,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/other/adzilla/notif/1/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:18.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/notif/1/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:51:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6KVvhejEo%2FL9iXrnSF8TjopVnGfHncGNn6lzMRu2Jm0unNJJzKff%2Bo4RpnIUYS4LmRiJl3NPSRW5XH4Rv82o1fdU6Y34N59KEPlD8Ybpo4SN6OV79ZoI1vF71%2FutvDZm88%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd1f8c7b0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d6f1bdbf46bab72e423a202efc952202","sha1":"e8454f6403459796773e712172439e8b8ac51128","sha256":"8da36e4696e5db14b336f4da63e4fa2bec7620165db79e3b1977295270b54f4c","sha512":"29926cce74529bfb3263d76a89de40217db3ddac508c97bb46e456c8f7a66a40ee3ae644b031f0b114528af6cee5105d74356b0b3c2feafb5449bfb7e92cd8d4","ssdeep":"","tlshash":"df216a4a1ef980b310c3a193b7302f6bddc2e14b884b25007bbd0d618f96da1ce43587","first_seen":"2025-10-02T18:50:45.79178Z","last_seen":"2026-05-09T20:48:40.198375Z","times_seen":167,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":468,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSO48bVRi942wXEOLZgabYgkjYe-fh8QwpIiIC4pFdIEEpKNB9zGwuHs9M5s7YjtNsCIQOBSQkoBofe3cpVhH8A2TTrUBiOhfZhooaEUSH7LUUcorvMecU55t77o7LE9JCyRbvXU5HKo7ZVrtFzZevqUSmA21uXzUt2qLnzWsq8dzz5nBZ8v6rluO26DnzzVB00y2bWpRa1DLfUHkYpcOtFQuVHQVWK6At125ZbRfD_PFdlw1o1oDsn5BnoGT91B_RR1BihqT34-uh7hZp9sqlXhmzIs3Rl4cfJt0kHSToPRqj3ECUHK7VSHVNyLcNpMnh-gKk_enyAnBVk8YLD8CTw7VN8P7-qVMeI0zA5VkM-jOE8QyKzSDSO1DydwIIie0dJL2D7TQfsJunLFuyNdl4-BfUoCYbD55D0rt_MVZD80oal4VKE41hVEENZ1C7M2TlHMWoATWYQxSfQsnfyNbDd5H0pjs6TqHkYtMVkef5HdHkntNuuo60m9zmQTPs-JRbjkMFp6tfpKIZmG6g1AZKZaCMDJSZgZ5cmC71XWExx4sCKTrUZa4rQ04D36aUBaKDUtyGkvcg8s-nZSL02Pohk9eLbt8OpkVehgfLj3Ywto7Kj7PY9tq-7XassXVwqlppkOV76Kqva2I8f7km5O9b0LIBXdTEeH8PfVnty1jbujqQsS65te72ujvVJC12x2w_LXbDhIDl95DLaqqyG_oORHFmMoq0nKTLwnhRTRiX1UTJgiC_sdikViBDSZ1mx_OiZkd6XjOgHmuKtuVHvOMwGbBppIuyGmcn5OnlSxn3v3wS3XBhsshuS-Y7vhVSLqkbuJy51PJFx_MDn9nQqoLSDTBtYKRq8k50DpmqyUt3_wRnc-h4DqEMsPJFsEEFdr3CKDmKVCL7SoQtkfYg0wpZsYHipjGOT8izkw-uXvx5FZjX_v0GoTi-sPhuie8h8gpZXuET9QvBbnz7p52sUD01YssEXSlYEZ4BUzUxbv0KoWryxNuXVmHefOsLiGwPOju-MHdWgE4JeGYgVgRxeEzWAOMV9P92_mge68-wmxvgsTHhcW5MeZzHX53a1GphRk5oC0r9jmc5fhRajitF1PbdQHqMOk6IQtfqn7PmfwEAAP__f3bsU0oEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSO48bVRi942wXEOLZgabYgkjYe-fh8QwpIiIC4pFdIEEpKNB9zGwuHs9M5s7YjtNsCIQOBSQkoBofe3cpVhH8A2TTrUBiOhfZhooaEUSH7LUUcorvMecU55t77o7LE9JCyRbvXU5HKo7ZVrtFzZevqUSmA21uXzUt2qLnzWsq8dzz5nBZ8v6rluO26DnzzVB00y2bWpRa1DLfUHkYpcOtFQuVHQVWK6At125ZbRfD_PFdlw1o1oDsn5BnoGT91B_RR1BihqT34-uh7hZp9sqlXhmzIs3Rl4cfJt0kHSToPRqj3ECUHK7VSHVNyLcNpMnh-gKk_enyAnBVk8YLD8CTw7VN8P7-qVMeI0zA5VkM-jOE8QyKzSDSO1DydwIIie0dJL2D7TQfsJunLFuyNdl4-BfUoCYbD55D0rt_MVZD80oal4VKE41hVEENZ1C7M2TlHMWoATWYQxSfQsnfyNbDd5H0pjs6TqHkYtMVkef5HdHkntNuuo60m9zmQTPs-JRbjkMFp6tfpKIZmG6g1AZKZaCMDJSZgZ5cmC71XWExx4sCKTrUZa4rQ04D36aUBaKDUtyGkvcg8s-nZSL02Pohk9eLbt8OpkVehgfLj3Ywto7Kj7PY9tq-7XassXVwqlppkOV76Kqva2I8f7km5O9b0LIBXdTEeH8PfVnty1jbujqQsS65te72ujvVJC12x2w_LXbDhIDl95DLaqqyG_oORHFmMoq0nKTLwnhRTRiX1UTJgiC_sdikViBDSZ1mx_OiZkd6XjOgHmuKtuVHvOMwGbBppIuyGmcn5OnlSxn3v3wS3XBhsshuS-Y7vhVSLqkbuJy51PJFx_MDn9nQqoLSDTBtYKRq8k50DpmqyUt3_wRnc-h4DqEMsPJFsEEFdr3CKDmKVCL7SoQtkfYg0wpZsYHipjGOT8izkw-uXvx5FZjX_v0GoTi-sPhuie8h8gpZXuET9QvBbnz7p52sUD01YssEXSlYEZ4BUzUxbv0KoWryxNuXVmHefOsLiGwPOju-MHdWgE4JeGYgVgRxeEzWAOMV9P92_mge68-wmxvgsTHhcW5MeZzHX53a1GphRk5oC0r9jmc5fhRajitF1PbdQHqMOk6IQtfqn7PmfwEAAP__f3bsU0oEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform\r\nset-cookie: iprc_l+7ad01758c38479a2a203eba77e13f5c5=4323733; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\niprc_l:4323733=1; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 134d56bd6e549e451e47ac5798aa33a7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.851912077876.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=UYfnwkJ-Owq8KkoUT54x76rutzkEwogOhnNe8sVpLoU\u0026fstu=019ded03-7f84-7b00-ac01-247f11b2b771\u0026st1=9582a52b2275063f946c60ffc98e7928\u0026ps1=1777797922","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /watch.851912077876.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=UYfnwkJ-Owq8KkoUT54x76rutzkEwogOhnNe8sVpLoU\u0026fstu=019ded03-7f84-7b00-ac01-247f11b2b771\u0026st1=9582a52b2275063f946c60ffc98e7928\u0026ps1=1777797922 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.YEIcJQ5Dc-wJ51rS43EEYBHjSAzsTjhBHKK53T4IPgA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 3017\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Mobile,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; expires=Sun, 10 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\nu_pl26582436=1; expires=Mon, 04 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1c621d9fd08df714ba7090e0cec8c80b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4239,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3363)","md5":"0561e2bb51762ada7844ace51ddfb30d","sha1":"0d1ba1f9df3e96dc7770a3a13972b4f6a56a291d","sha256":"adfe24844d02f5a6ec5891b848ddd62f9199cd1923e06772ee281bfb26bb7e01","sha512":"ae3c5bad156574a8c9b4a2015621ef793d8103739c3dd8e10264c82fd58f880e3a698fd87a6bdfb538597385a34202c2d0956aaf8d87336bd96013b62d053627","ssdeep":"96:QhNOuozWBCFujJmQavYaPSTgqwDbk/Rg1pF6t4Rm/dgYUw1ZDSV3VCfMEDaH:Q8z4iujJhbaPS8XkpgjYt86aYUoVSV3t","tlshash":"df911bbb7eb51178946961fd70aff6593e20a9076500cf41fc5d8995ab303640cb8dec","first_seen":"2026-05-03T08:45:43.440058Z","last_seen":"2026-05-03T08:45:43.440058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-name-filter-script.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 20:26:02 GMT","end":"Thu, 23 Jul 2026 20:26:01 GMT"},"fingerprint":{"sha1":"FE:ED:5F:E4:22:C6:7A:AE:59:62:E5:7D:F1:28:E6:C4:8D:EA:E3:78","sha256":"B7:D3:64:3F:0B:70:AC:32:8E:9C:79:5F:FF:4F:24:95:50:08:81:77:61:3D:E0:A4:7D:24:7C:17:03:75:82:97"}}},"request":{"raw":"GET /assets/css/stylesheet.a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074.css HTTP/1.1\r\nHost: roblox-custom-name-filter-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUapq7NdgoUo3QR6GRo%2BQzU7ItTQEEp1hI0ciwN8op5MTIMsaQTXVp%2FhCMoVJCD9YFGEsumY%2B347JrOgbCTR6kTddaK846nTTHJQD4vK84dwgRJhcjgC%2Bwz0z%2B6AYPVU1gl8r0RDu%2BIEzYNMg%2BP9PhwvCe2oHthzRgcxruY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53e05fd175c1632d3f6826cdf1c8006d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd124bed0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17469), with CRLF line terminators","md5":"189fdafdfba1b07922505146944ac218","sha1":"e593713c0ec16032efdad79024e07b769cf999d7","sha256":"a482bf00fa5c046040ef7973ad5fdf5657890cacb596c93f1382f664ca542074","sha512":"78e5dfa85fe07a10600f8e1f0060db0b5aff6482bcd25850bdae13ff5579b248d15119e5fa200b836f5f0abc2fe0b9cb5bff43ee26bca7e40a9d96494bdf6a82","ssdeep":"192:pgLxsLb4X3I1fG2pmOTq7zSeyf5rTZFsGR57Vpvj82p7Y97F+QNBARfWiVWo6yyT:KyLb4eEbzSDBP9R5lKmRD723FRdZ","tlshash":"7e82757e9220263cfb33cc026689755d3614f963da5247f9fa99a3a885c2ff71171a0c","first_seen":"2025-10-29T04:02:15.901982Z","last_seen":"2026-08-08T20:52:52.614236Z","times_seen":408,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/favicon-96x96.png","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-name-filter-script.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 20:26:02 GMT","end":"Thu, 23 Jul 2026 20:26:01 GMT"},"fingerprint":{"sha1":"FE:ED:5F:E4:22:C6:7A:AE:59:62:E5:7D:F1:28:E6:C4:8D:EA:E3:78","sha256":"B7:D3:64:3F:0B:70:AC:32:8E:9C:79:5F:FF:4F:24:95:50:08:81:77:61:3D:E0:A4:7D:24:7C:17:03:75:82:97"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: roblox-custom-name-filter-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207249c5b01c104202965011f95037dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWbKjqg0r6GnRkICNfs4iKDBHO7Cp2TDIe57WGi8JenkS43%2F7T9tUAOQdfEfgFhB3wLiXXV9he9ZBR0CBkqzOCoE3Xs3aN1wr7gRfZnPwalDRcZlS5hqlEmDiZqnE17Q82vbTxO9yQ6SWvXqrtK8m%2F09bT61El59PWwzkrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5dfd13ed400afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"18432ea15c0c7b7ef50ee1b42b9b29e3","sha1":"2b656e7a76d7a8d11ff020bd8bac15c6780c39ec","sha256":"27a2d2727b2c93679c945f8107ce5bd270d8dfc426c7abca1e975e46ac0d78e9","sha512":"0d9dfdd5af753545acac4819105170d4358fa8a619ee99f9754eaec45b48cbc8875409744d35d10676843b635bf1b065c0129e1ffdac68d921a39bd7e4632f87","ssdeep":"","tlshash":"0d615be0818b9c3abc969201820ac603fb35a0ce0e5a1a7e54f717c87f133bbb52c157","first_seen":"2025-10-29T04:02:15.906591Z","last_seen":"2026-08-08T20:52:52.615382Z","times_seen":407,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/magic.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /magic.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEKk7KjpAVZUoaOrfZHnzANtpREh%2BuO93tVJu66TIJsAKT%2BbyfS2kHmHX9x97Pe%2FESuxMn7ZiLTh8KMf5oEuktM1oBTA12Nyj%2FqSkLK8YA0SMCbKOiaVnDoqRkV6L5Yq3rE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c49d59185af245830cb91e4818c56238\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd15da85b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9bcbb02a6bf94ae8762ddcda5d1c80d3","sha1":"fade830681bb5b7b138db5482e7a495c1c9b296a","sha256":"b26277e44f2fe29283a55a632166f8a45dd1407a0970c13e08287406f94a0772","sha512":"54914b0f4d7625f4e40e13b11bb2bfd47c87dc6a14714c427c48c75e955980826d6605abbac7b3ca6c043356f1b91618b6f16abaf6be339be38d8ffa825e71e5","ssdeep":"","tlshash":"c101fe6e229200a84d7a509803a3fa0cfda832577160c0e1bacedb602f35f20419e4d8","first_seen":"2025-12-08T23:25:47.209165Z","last_seen":"2026-08-08T20:52:52.62635Z","times_seen":392,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c2/07/ec/c207ec84c2456af201cc563cadc36c46.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c2/07/ec/c207ec84c2456af201cc563cadc36c46.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34785\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Device-Stock-UA,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 4\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 90078dca4f48d2a58824aa4463dac426\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77d2eae780579b688f8af48b5cd2a061","sha1":"671820c0c980a80c496e39110d4c479415a4d5d8","sha256":"75b099ba5ba2a53575deed1fd0a5c56bfd4886e05301761eed89b1ce91eb4366","sha512":"fbe5bbc7458bb09b6d575220cede4933d76da2b3b824156765ef1389686316407e3b6c089ed85b9f6bb1fbe796632eba903ab8666a75e9ab15832fedfefe89aa","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjw31PTz5Ysk5qMUP+04b:2dSAkrdQJoYlLwlBFkLt","tlshash":"3c93c78c7f92f0f5039a24b3232fac16f2ab1d5124fce444d903a9e5ae25319d57ad6c","first_seen":"2026-05-03T08:44:19.137958Z","last_seen":"2026-05-03T08:45:43.447595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":297,"dns":1,"connect":94,"send":0,"wait":102,"receive":95,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 2902850\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54Bci%2FlCO5jwpirnnKv2QXjnExnC8slb7%2BMYsPPIZD3updsbK11b5NZnCjEn9pgAWcbxamX8f%2B5ebTFbbvAXqmSp3vQQi54zLOjFCeVRRG42xHzykeJ%2BhnUsBklw0j47fmCu2RA1hM0%3D\"}]}\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd301c71b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T09:09:41.118343Z","times_seen":20091,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtevor.com/hg/pages-dev.js","fqdn":"mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"172.67.199.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /hg/pages-dev.js HTTP/1.1\r\nHost: mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 466689\r\nlast-modified: Tue, 28 Apr 2026 05:33:37 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSqNO8u%2BGoHurhxZqzOXABsa0k0oq12uLa2jfJedn2pritoE8ut4Sd%2BUPBYvs5IoOtI%2FnyUvXw0vGrjQCEhQl9Hw%2FhRPUV9%2B1mvvgZUVvQB%2BYgA4NNOq1iZEyeES\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd126ea10b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"63f71502fe125358818a0825aae4ee16","sha1":"98934593ae75876db5a51fbb4a0d6f990576a2c9","sha256":"5dedd670c8604a3b077f14aac976a0b91441afe370ecc449c9e3df2cf077027b","sha512":"d426126273d42b38f24bd9b8d1780346cc1b6cee83468b887e0eaeecaff19e4a89a0636620ab41efc977e6c2b559e88e55b670f3dfd5b7c7205f848a55e2ebdc","ssdeep":"192:c4Mpsto0LV8YteZbDVj/poiPqpyj4ZYzwIxpsQkhHC:/++j8YteZfJ/ptPqcj46zNxpsQ8C","tlshash":"0ee1d6a9bc8f89390bf2f758d6358519fd3cc0221602505af0c8525b8a69f1e471ffd8","first_seen":"2026-03-10T23:35:48.093011Z","last_seen":"2026-08-08T20:52:52.626959Z","times_seen":135,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/other/adzilla/notif/1/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/notif/1/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:51:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c014ad-cfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5FX6TAXhEz7pS4q9z3RbvmgztT%2FI48M9ITq32JUKWrGVonFLJPJz%2BII%2BnBXpqa2ufqGoG2BMs7rJ2sNP7mmuCM%2FsQGrqTisq0sOSStX1FI6QDNm7uBKBR5AMGbPt0wn8YfTJ%2B%2BFc7g%3D\"}]}\r\ncf-ray: 9f5dfd22ddea1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3326,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a4127de9c034679983566ff5d4a74896","sha1":"b2fd5876e2e9e6e24238d25cce01b7d1d04db820","sha256":"8a403d7b8345df72fdc20340343273880b00020977f2ae817f92a006c20a4707","sha512":"fbbee978c8b757fafe91a1b874f6c03d29d7ce8db0f93e9d100d39d6a9014c9d95a033b337ec8225a9e02a905a8d10116524e8b8033d59c6df92fe4d214848e3","ssdeep":"","tlshash":"606130e51b7a2604b41bd49739112b5b17254003af4fdd247fda240c9fc66da82a37df","first_seen":"2025-10-02T18:50:45.843541Z","last_seen":"2026-05-09T20:48:40.239491Z","times_seen":159,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":452,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/other/adzilla/notif/1/img/sale3.gif","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/notif/1/img/sale3.gif HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 129539\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:51:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c014b0-1fa03\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2011812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhrd8vIZjoh%2FdZNEQoLTRcyEBpQnUxVitrEUUeeDCWb9XHyAI%2FsKHnktoRf6%2F%2B51hB8%2BsUiohi3UuOBG5kWyHAmleZspJPUXuKVMESF%2FGJJeFKVlQFircURnZRENDXsN%2BvJZX7ZuTHw%3D\"}]}\r\ncf-ray: 9f5dfd235e421ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129539,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 246 x 246","md5":"106de0653ed51edc4167120115111d9b","sha1":"c43261c03650a9f96bf027b430b2d8795f530a36","sha256":"91fdaefcf85f4c4b17a53f56ef617101bdc4adabc3b2581c57563a2aa655d49f","sha512":"2ced2b3bcc6ad0894233d407c178c2a8f04cb8b110aefc2b67d966c94ebd8f293a323b67016a11ad31f5be44be02a101610fd0e13c75cb311fccd32c9d533583","ssdeep":"3072:pQouAzFqAlJcrFK+tCexONbreedxeiNJbyNAt71zn:pQ7nSJcr0+AL1F1NJbcOpzn","tlshash":"e6c3126fe24d0c9b128fcf91436e0b6e1d751931aeeb9dd6ca9cf98c20f1c8461b05a0","first_seen":"2025-10-02T18:50:45.817001Z","last_seen":"2026-05-09T20:48:40.125735Z","times_seen":158,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fcss%2Fstyle.css\u0026l=3326\u0026fd=490","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fcss%2Fstyle.css\u0026l=3326\u0026fd=490 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Platform-Version, Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, User-Agent\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2902851\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xleapsW8rxtjJcSGFpbEBnUabKUgfBBNF761H2lFQ9ER2Or%2BaSEYg2cJIzCCkxH0RYnxvs0DhbaFI0VDZhtHUQMhWe0qV6kdpnANJPUBm8Wxgqk0YpuEBshq3scB8JT6tQDMms9ie4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f5dfd301c62b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-08-08T04:08:50.860413Z","times_seen":6404,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/arrow-up.gif","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /arrow-up.gif HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"abc38753b71c3201854a4e8b3ffdce52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0O2tzgWoY0OHgZAjXM5n844tFi%2FT74kzktlcuP7knMEpMfNQUhjhVkPR8MFDWE32TRSONMtiN3w4%2BwGErA1SvbTDegDichqWDEU163ezQhuUHKPB6cd9rTewBTlWJZ5MhE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5dfd15da84b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 28 x 150","md5":"8b78a541eaa521c8bd946b84a46feb92","sha1":"31a6411c7051332a4aff0d338cf721f513bd1f8b","sha256":"8794063dced5ec3d5035d4fd6e7cce885671224284469fe85e7b392a0fabf0a8","sha512":"ca4f07b46c061bcc141b763e32da638e835f207106f8d5ea90dfab473487114081fbd3e12768cfe3d374c0eecba53e2a085fd0af4cb068f4efed559fbd9fa26d","ssdeep":"96:kRXW9wwXp9lM6jb7xLD3hFG2G/3dtGSQp60NfzpAMK:kVW9Jp9JjbBDRFG2G/3mjrpAMK","tlshash":"c791e7121a798d4cf0335934c9a8ac5f332a5da2811183db29d4329ee93c4bd596e67c","first_seen":"2025-05-30T17:14:42.053302Z","last_seen":"2026-08-08T20:52:52.610107Z","times_seen":499,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; expires=Wed, 30 Apr 2036 08:45:17 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d4e7c19d9d98ab0738cce4c36f3397c3","sha1":"fff93b3af0015eb0d05d067f4cc79aac2a47374f","sha256":"3009e8cb8e66ca74e83c894a0c2d8ad911a00b33b3187e00351a85019d82e4e8","sha512":"8baf79e9fbe0e2c5d182c480db949aab9d00eced10b948bb73b7d94658952400ecbbcb6ed13aca9e34ed93aa233c09686c79f7970b11a339259a93b6e94103e1","ssdeep":"","tlshash":"ed900441701c17d477400d50510f0cf5d73105c14005311c7f03c31551c1c1c0dd1044","first_seen":"2026-05-03T08:45:43.45464Z","last_seen":"2026-05-03T08:45:43.45464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":257,"dns":6,"connect":23,"send":0,"wait":22,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.195.43.118","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; expires=Wed, 30 Apr 2036 08:45:17 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"fe5c08cc4f0d58fe5491d66a3c631fcb","sha1":"94324a4b741459d0161b47baf7ee66fa63e7ad32","sha256":"5fc5509c75fe61cbeb49a398a40d0376642904d149e660fdd2db437fb5b1efa3","sha512":"69aa07be7beec1960de4f41fbebbf95ad9750625a83eb85ac8b534b946fa1b695411916869309eabc8f0f525706e7ec8c81dff1d4852c8d95168ea6d71152c9d","ssdeep":"","tlshash":"439004f37170347c43dc5531ff455151c135c07ccf3ddc0001c051043015055c005003","first_seen":"2026-05-03T08:45:43.456266Z","last_seen":"2026-05-03T08:45:43.456266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":279,"dns":9,"connect":22,"send":0,"wait":22,"receive":0,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /sbar.json?key=af25da8381e0bd0494ba4018c76898a2\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3357\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; expires=Sun, 10 May 2026 08:45:20 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Mon, 04 May 2026 08:45:20 GMT; path=/; secure; SameSite=None\nuncs29=2; expires=Mon, 04 May 2026 08:45:20 GMT; path=/; secure; SameSite=None\nu_pl28216845=1; expires=Mon, 04 May 2026 08:45:20 GMT; path=/; secure; SameSite=None\nslecaf25da8381e0bd0494ba4018c76898a2=[4323733]; expires=Sun, 03 May 2026 08:45:25 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 212\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5b552a8884d79cc0119727a3e48d92f2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"daecaf20d9bb1aa92ca9197b4982fbd1","sha1":"152f39325671c5e74fab86d916f5ebcc4af61482","sha256":"4d7bba30fdd208100b26ff9e47ce07597a2ca6005e120a7a078888516f780b7e","sha512":"f341c1f1c6027fa99efff29c23bfb63a6799990db01e0c3caf23178d8e26b93476dab0bfb26e1bbeb0b73a2f60354d43cb47860e658994936e346d6305714eb4","ssdeep":"96:9zpUbeQGR7Xc/Tq7+BYsX+ZYu+fd+cUbeXGnVxp3Mlpmj6cZBYJ+ZYu+fdFnqny2:9zOar9Xcrq8Jui3fdIa2Lp3Mlwd7Vi38","tlshash":"c1c14aae5b6535ce1a5751e826893fb48c0f760e01c44b4da1d1e77f863b60a5746e02","first_seen":"2026-05-03T08:45:43.457503Z","last_seen":"2026-05-03T08:45:43.457503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 00:48:28 GMT","end":"Fri, 03 Jul 2026 01:44:30 GMT"},"fingerprint":{"sha1":"21:8F:F6:2A:0C:60:8F:CF:6C:90:BD:69:DB:F8:82:BF:D5:02:9E:2A","sha256":"20:0D:6D:8F:30:A5:C6:F8:45:FA:9B:D0:D8:76:12:30:CC:08:8F:44:47:0D:A2:CA:80:14:E3:AA:E1:AF:EA:5F"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15TugCD7ywrEOjutu1NKfqSEE66%2FdlhgpOE6W4WfIS17Ep6FDIRGLwQfJeVuKrnEpjJIhqv6mBHYw0gSHkNrUxnLLMsh2Olup%2BmWBMwj3JHg7tCrJWH8tJ89wPMCv1mrYDk%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd2c0ebd0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-08-08T04:08:50.855521Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":294,"dns":1,"connect":95,"send":0,"wait":98,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295490\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T09:46:49.602972Z","times_seen":257980,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adxpy.pages.dev/ads.js","fqdn":"adxpy.pages.dev","domain":"adxpy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adxpy.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 00:44:54 GMT","end":"Sat, 04 Jul 2026 01:43:34 GMT"},"fingerprint":{"sha1":"B9:0E:27:18:36:32:2C:B8:F2:E5:2F:50:96:88:4F:CF:54:4C:10:3C","sha256":"ED:9F:40:13:F5:DC:3F:FE:75:A2:AF:61:F4:2D:D7:17:14:E2:C8:D4:C5:19:DB:9E:88:D1:73:59:BF:13:F7:D1"}}},"request":{"raw":"GET /ads.js HTTP/1.1\r\nHost: adxpy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmJtuqxQn6VZWtLhvJ1GbfbfrVoSn4AnFTvTRIRO%2BYyE6H1Q63DGaOybMuOHSgaPyZBnEd6gqlP5hws4s0rW12BDvLnXuhTK5KItPbuavZeJUeeB8K7A75MkbyuofdrZtE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bc4a8b41519c6fae69917cf3ea9f576\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd160adfb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"28a8ee5b231d6993efeaeb288506fba6","sha1":"185e282511210752916a8d4fcc28642f02e4dc5e","sha256":"81496c62f33c7090e09cd8ea1d016980fc4432fb6ca00450ccea59b926daa7e1","sha512":"b1cf24abc589692314ada61a5a266b280ce2ad1297f5be58b94ececb90e2d718021795ca3998cb142e5937cff260d4aaeaffe5759bb8e67dff20e76bec939658","ssdeep":"","tlshash":"cb81011920a100651eb7236a7be3625dfba43053b81281a4bdccdb185fb9d1091f7fed","first_seen":"2025-10-25T03:17:17.993778Z","last_seen":"2026-08-08T20:52:52.610665Z","times_seen":412,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 864b9947468d43d205dd0371ff920417\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":98,"dns":1,"connect":19,"send":0,"wait":21,"receive":18,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /d0/89/ea/d089ea049f0f7b1eacfa2b5bb99d3bdc.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37599\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 35bc8476828c5127df98991e355029d3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103339,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"63a485019b912d6aa1b59d138759f496","sha1":"c3eac62d8d836eb7fd3c5b52a8cd724844493900","sha256":"bd3048e5f3f6ad0d6c7ea2b3cd3e1ff83b9bf960298e4a708d2e545da130911b","sha512":"47bb7a6a6b9d6d4be5a6ee834d512bc068414c0cfcd6168f7debc36ad5e9a203a22d7d40c82f6370db35d669be6c555423785a5af4a825f01e43f51ad4df1b4a","ssdeep":"1536:kHLBN82ttARd5zkYcWZ+u9DJvDWaBBl2qcQt7MrHYeCz6Q3d3icPS6pBBJ7o:cBQ8u91v7Hl1cQt7MrHysuq","tlshash":"58a3c68cbf50f55852f62432222f940af0e90c5641dcd198fa52f8ea7f7cf48e9769a4","first_seen":"2026-05-03T08:45:43.46178Z","last_seen":"2026-05-03T08:45:43.46178Z","times_seen":1,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":302,"dns":3,"connect":98,"send":0,"wait":102,"receive":96,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/af/25/da/af25da8381e0bd0494ba4018c76898a2.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /af/25/da/af25da8381e0bd0494ba4018c76898a2.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34772\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fe01202e386e2792a95efe3af76dcece\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0ccc3895c83381d92f9785dac4d828e3","sha1":"7642605b9320acf7c24fa4b7adb133410fed8448","sha256":"5f705efec5796d7cb58621716b5d147f77209e3d1c7ec99003d1f81a46b3688d","sha512":"fc1dad08f7dafa427e2faf62b5c86a8c52a79855d763892e3604e2c21be2ef2100f7de88b96732253b574a2e418d73fc7b775fa51d1d86b7cf361bfff62053b7","ssdeep":"1536:2l2eABAdWrl7QJWX8jlvjwF1PTz5Ysk5qMUPKZ4N:2dSAkrdQJoYlLwfBFkhg","tlshash":"b493c78c7f92f0f5039a24b3232f9c16f2ab1d5124fce444d903a9e5ae25319d57ae6c","first_seen":"2026-05-03T08:45:43.463255Z","last_seen":"2026-05-03T08:45:43.463255Z","times_seen":1,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":296,"dns":3,"connect":94,"send":0,"wait":100,"receive":96,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295490\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T09:46:49.602972Z","times_seen":257980,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2574\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,X-Device-User-Agent,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c4db505d063927b78f3f6def147db76b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5146), with no line terminators","md5":"a141d4cc0ea62b7e58f726a49c7b649e","sha1":"ca9a28b3d7e06f192f20989c96c710bd243d512e","sha256":"42554c0284cc374e33e51ba1c2980fad64bd7600955788facf38b137a1668c80","sha512":"148f99f86db9534dc360f8b266d2d648f7554e616703ff93c369a32f2540eb4d3fad86b449b34e9c19e0805d1aa38dd2cf00412d5569df4fb92a018f70fbbfe4","ssdeep":"96:ctGAdiByQnKauwtTMpX8TxnOgV27JBrHVtH41:c4fycnsgUDpl41","tlshash":"8db1858c3f81f2d407b270af2f2f1509f16d5c20ba89d498d01b95d03e5862adaa7f71","first_seen":"2026-04-30T15:37:40.418293Z","last_seen":"2026-05-04T13:42:54.864213Z","times_seen":154,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/14/72/9e/14729e87630432d1cf169df22bca8c79/1755792787.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/14/72/9e/14729e87630432d1cf169df22bca8c79/1755792787.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43187\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 21 Aug 2025 16:13:07 GMT\r\netag: \"68a74593-a8b3\"\r\nexpires: Tue, 05 May 2026 08:45:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43187,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:03:14 14:25:33], baseline, precision 8, 320x50, components 3","md5":"2a8a8eff617f579b060b96ade7e60c27","sha1":"b568098b17f409389bbb0621f5e32384eb855e72","sha256":"65369069a29d6f80358020a56449c43c1cbfff6a1f2db3c76fc9e1234de0e02d","sha512":"f2c250c8d1b7cc3969f496ffcbf7359ef5ef9d3c60f7970ed132ac4a93d0735a8acc35397aadf1f5b754873477d0f8a50adac3e261d0decd58a5677123a199ed","ssdeep":"768:3UiGnCMI1ebkY4P5t9LNFLs/XHf/IXkxo0drvRfsEdox4A5e:3mnCf8T4RLjLsP/AXkxo6jOE","tlshash":"a6138c297b56ad11e5c938bd80fcd656d3e30ed96c23205e7bcdac40bfa095a4cd818b","first_seen":"2024-08-20T13:49:48.597574Z","last_seen":"2026-05-19T22:11:13.038163Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1992,"timings":{"blocked":823,"dns":1,"connect":19,"send":0,"wait":339,"receive":5,"ssl":801},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=488","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=488 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f9eda38a85fd1f687e5fe9adef0b8598\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":113,"dns":0,"connect":17,"send":0,"wait":20,"receive":18,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/watch.1000770050317.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22making%22%2C%22your%22%2C%22own%22%2C%22roblox%22%2C%22custom%22%2C%22name%22%2C%22filter%22%2C%22script%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=h07-huswWlwjQNV2i0ayQsgdybtGxeSNFLusc5YoorU\u0026fstu=019ded03-73a3-7a50-a666-aec990f1e733\u0026st1=92af1399f38bd977c2fb66d485eb6e40\u0026ps1=1777797919","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /watch.1000770050317.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22making%22%2C%22your%22%2C%22own%22%2C%22roblox%22%2C%22custom%22%2C%22name%22%2C%22filter%22%2C%22script%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=h07-huswWlwjQNV2i0ayQsgdybtGxeSNFLusc5YoorU\u0026fstu=019ded03-73a3-7a50-a666-aec990f1e733\u0026st1=92af1399f38bd977c2fb66d485eb6e40\u0026ps1=1777797919 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.kebWVpCVILviAJIY4nesjX-AnLsYx1zbISGt1Buvthc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 3049\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; expires=Sun, 10 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Mon, 04 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Mon, 04 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\nu_pl26582443=1; expires=Mon, 04 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 853ff262b57164d537aaa86d5ba6e5e6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4212,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3336)","md5":"eca322767b932a95bb5846f58728bbb0","sha1":"7ed73bb569aa3ef9ab1389e933d2a7ee20ced986","sha256":"9319a1a278dc51559961e7fc3bb55fa417074c086a76a48d68930dc8f43286d6","sha512":"078463cd17d8aa4bbc13fe406440402908caf80112c721e259685e43d784c289f011168fb7d642cbe9bcb6acdb6731497252b5c36e657aa5abed6964dc3f4ae1","ssdeep":"96:RNVeozb2jv3XdSKJCfHzF3ork/RwI16YiPwx/1ZDUCfMEDaH:Nz6h6h4rkpls4LVUCkCaH","tlshash":"3c91082dadd656387876e4fe243b625dbe50c00b1605dc42f98dda017f98ba01cadea8","first_seen":"2026-05-03T08:45:43.467292Z","last_seen":"2026-05-03T08:45:43.467292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSvY8bxRuevZx-xS8FggM6oi1SEAn7Zj-89pIu4qOAu0MkKAUS0nzsmMHrnc3Oru2Y5kJQCqqAhESDtH7syzURgv8A-ZAokJCynYtcQ0WJEKFFvrN0MMX7Mc9o9LzP-zyYVaekjYqt3tszU52mbLfTpu6rt3Umzdi6-7dcj7bpdfe2zqLwujtZh2L0uheEbXrNfTsRA7PrU49Sj3ruW7pIlJnsnqHQ-ePYa8e0HfptrxNiUvy3t5UDyxzI0Sl5AVo2z_2mPoQWS2TD799I7KA0-WtvDquUlabASB5_kA0yM84wvChV4UBlx5vXMLYh5JstmOx4MwHMaLGeAFw3ZOvlp-DZ8YYm-OjonClPkWTg8jLGoyWSdAnNlhDmPrR8QgAhsX-AbPho3xRjdvccZWu0IdvP_oQeN2T76YvIht_dSPXEvWnSqtQms5ioGnqyhO4vkVcnKKdb0OMTiPIzaPkr2X32LrLh4sCmBlquroZCRVGvK1o8CjqtMJB-i_s8biXdHuVeEFDB6ZlEWi3B7BYq66DSDirloModDOXKDWkvFB4LIhVL0aUhC0OZcBr3fEpZLLqoxD1o-RCiOEReHGKgv2qI89JeQ8hfn8JKB7YkGMn6SKbWt_UjmdqKe5vsb3JQz03Zn7EjU_aTjIAVD1HIeqHzO_Y-RHlpPlVWzs06MF7Wc8ZlPdeyJCjurK5SL5aJpEErUmGn1VURbfFYRS0RJZTSrvS6MV0oW1b1LD8lz6_Fdr7-9mcMkpUrfNpNRC8UftiJmPKpJ0QnCgSTIohEGMHqGtpugVkHU92Qd9Q15LohVx78Ds5OYNMTCO2AVa-AjWuwj2tMs8dKZ3KkRdIWZghpauTlNsq7ziw9JTvz92_d-PFs5x_tlEjEL2RzIIoaeVHjE_0TQT-998NBXuqhnrK1CW6WrEz-B6Yb8v8_voDQDdl5cunMj529GUR-CJtf_GUNAc8dpJogTS7uGa9h_9Xzi3pmP0e_cMBTZ87TwlnwtEi_PKdp9cpVQeILSnvdyAt6KvGCUArV6YWxjBgNggSlbfTfl6_8EwAA__9zZfstDQQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvY8bxRuevZx-xS8FggM6oi1SEAn7Zj-89pIu4qOAu0MkKAUS0nzsmMHrnc3Oru2Y5kJQCqqAhESDtH7syzURgv8A-ZAokJCynYtcQ0WJEKFFvrN0MMX7Mc9o9LzP-zyYVaekjYqt3tszU52mbLfTpu6rt3Umzdi6-7dcj7bpdfe2zqLwujtZh2L0uheEbXrNfTsRA7PrU49Sj3ruW7pIlJnsnqHQ-ePYa8e0HfptrxNiUvy3t5UDyxzI0Sl5AVo2z_2mPoQWS2TD799I7KA0-WtvDquUlabASB5_kA0yM84wvChV4UBlx5vXMLYh5JstmOx4MwHMaLGeAFw3ZOvlp-DZ8YYm-OjonClPkWTg8jLGoyWSdAnNlhDmPrR8QgAhsX-AbPho3xRjdvccZWu0IdvP_oQeN2T76YvIht_dSPXEvWnSqtQms5ioGnqyhO4vkVcnKKdb0OMTiPIzaPkr2X32LrLh4sCmBlquroZCRVGvK1o8CjqtMJB-i_s8biXdHuVeEFDB6ZlEWi3B7BYq66DSDirloModDOXKDWkvFB4LIhVL0aUhC0OZcBr3fEpZLLqoxD1o-RCiOEReHGKgv2qI89JeQ8hfn8JKB7YkGMn6SKbWt_UjmdqKe5vsb3JQz03Zn7EjU_aTjIAVD1HIeqHzO_Y-RHlpPlVWzs06MF7Wc8ZlPdeyJCjurK5SL5aJpEErUmGn1VURbfFYRS0RJZTSrvS6MV0oW1b1LD8lz6_Fdr7-9mcMkpUrfNpNRC8UftiJmPKpJ0QnCgSTIohEGMHqGtpugVkHU92Qd9Q15LohVx78Ds5OYNMTCO2AVa-AjWuwj2tMs8dKZ3KkRdIWZghpauTlNsq7ziw9JTvz92_d-PFs5x_tlEjEL2RzIIoaeVHjE_0TQT-998NBXuqhnrK1CW6WrEz-B6Yb8v8_voDQDdl5cunMj529GUR-CJtf_GUNAc8dpJogTS7uGa9h_9Xzi3pmP0e_cMBTZ87TwlnwtEi_PKdp9cpVQeILSnvdyAt6KvGCUArV6YWxjBgNggSlbfTfl6_8EwAA__9zZfstDQQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e853849a50d5210acf8dff3909448982\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Model, X-Device-User-Agent, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Device-Stock-UA, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/other/adzilla/notif/1/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/notif/1/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:51:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6hQQFFaybyJU3E5SuXnzNCobuJlhp0u%2Fb4PrapZbeIZrp%2FKJhMy1YoceVDezVUjoFOoG00l4uOaWD1YZ3vd3G9wjBZs9zmnGQIe2ii6kQyF2mHeK2WwE28Kv2BjCMqknnfaH1yQi%2BU%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68c014b2-182\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd22ddf91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"5ca8c1679ba9453cfa512e01d6fec9c5","sha1":"45628341eb20e4acee5e812d3b2dfc8f23962daf","sha256":"520a0196a18cbe656f7382a02ec828125e68bdac511b9ebe2bf27f31e262d037","sha512":"842e878cb264f7362266570b9a8e4b50187e8bedf2a499c0b8fe5e9fa2c563fa7577427039f58540b103c4da5197287373efc5f031ebd7ce17e5b34bbb8d11f7","ssdeep":"","tlshash":"86e02b386158513487f7d1a2619f27df2730469ed00a025e702c474f0ce1fa622c1d9b","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-08-09T09:13:32.27052Z","times_seen":3462,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":17,"dns":3,"connect":2,"send":0,"wait":549,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:45:19 GMT\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-09T09:46:24.667622Z","times_seen":10465,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":137,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=4cf6687c-b635-43d2-b2b9-e780b1330cb0%3A2%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:18.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /sbar.json?key=c207ec84c2456af201cc563cadc36c46\u0026uuid=4cf6687c-b635-43d2-b2b9-e780b1330cb0%3A2%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:18 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 5061\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; expires=Sun, 10 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Mon, 04 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Mon, 04 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Mon, 04 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Mon, 04 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\nu_pl26582471=1; expires=Mon, 04 May 2026 08:45:18 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 21\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 34a8eab6f94c1a52caa4fbbc63a99905\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5036,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"bcf84a05a82fbae8e9101a7a6b085c23","sha1":"a68e9d36753c9f56ac777fc0b836f76e54796f59","sha256":"e8e172bd21216b7692ac15f48eaf6ec09b8e3e32730f0d76e17971839c38aa12","sha512":"588b06eff7c50270fb967c653ee95a577976a3bb40e7f583a6a0c41cfac302bff8e237f8906cf5528e6fe6f28064cc18a18b6798b4b55b3d05780c58c1b2529c","ssdeep":"96:9zLu0rtgHa2rNhD0gPRNtXelwyAfk9+OdRY0mdR5f:9zS0+62BHDX3W+OdR3wPf","tlshash":"97a16daf040a568d4de30c6d4ec868fb2c824d3bb4786595dc1fbbcf3e37092540652a","first_seen":"2026-05-03T08:45:43.47006Z","last_seen":"2026-05-03T08:45:43.47006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":291,"dns":0,"connect":95,"send":0,"wait":123,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fjs%2Fscript.js\u0026l=386\u0026fd=583","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fjs%2Fscript.js\u0026l=386\u0026fd=583 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, Sec-CH-UA-Model, Device-Stock-UA, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/impr.gif?sid=H4sIAAAAAAAC_1RSv4_cxB8d393326RAJEAJlogEkfDe2OO116SL-FFA7hAJSoEoxjOeYzivx_HYu5uluRCUhuaEhESD5Ht7lyuIEPwHaI8OCSnutsg1VNSIIFGhvax0YYrPj3kfjT7vzbt_0JySHhq--OC6meo855v9HnVfv6ULacbW3brp-rRHr7q3dBGFV93JMlSjN30W9ugV991M7JrNgPqU-tR339FVpsxk8wyFLh8mfi-hvTDo-f0Qk-q_vW0cWO5Ajk7JRWjZPfe7-hhazFEMf3wrs7u1Kd94e9jkvDYVRvL4o2K3MOMCw_NSVQ5UcbyahrEdId-uwRTHKwYwo8MlA6S6I2svPUZaHK_WRDo6erppmiMrkMoLGI_myPITaD6HMPeg5SMCCImtbRTDB1umGvM7T1G-RDuy8eRP6HFHNh6_gGL4w7VcT9wbJm9qbQqLiWqhJ3PonTnK5gT1dA16fAJRfwEtfyObT95HMTzctrmBlovLUSRlXyWJ10-U8MIg8L1BHDEvzkTgs4BTP0zOJNJqDm7X0VgHjXbQKAdN6WAoF25IB6HwOYtUIkVMQx6GMktpMggo5YmI0Yi70HIfotpDWe1hV3_dEefF6x0hf30OKx3YmmAk2yOZ28C2D2Rum9Rf5WCVWTsz9c4BPzL1TlYQ8GoflWwPdXnb3oOo12dTZeXMLANP63bGU9nOtKwJqtuLy9RPZCYp8-IwyLyYC-ElKRt4YRCpJEzjJBwkh8rWzbOjjDMv5n3q8SiKPJ6JJKHKz2LGDspT8vzyR5xvvvseu9nCXUqZMRlzwWLJWNrnqRjEA5-qiItYMVjdQts1cOtgqjvynrqCUnfk5ft_IOUnsPkJhF4Hb_4HPp4xSsE_nQV9imnxUOlCjrTIesIMIU2Lst5Afcc5yE_JpdmHN6_9fGaPT756DZn4lawORNWirFp8pn8h2Mnv_rRd1nqop3zplxs1r7P_g-tHrwYQuiOXjmdnxg3_uQhR7sGW5y9ZQ5CWBLkmyLPze562sM_06Xl9YL_ETuUgzZ1ZmlfkMM2rfB9WL1zFskBQOogjnw1U5rNQCtUfhImMOGUsQ207_feFV_4NAAD__9ZYfsYxBAAA","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSv4_cxB8d393326RAJEAJlogEkfDe2OO116SL-FFA7hAJSoEoxjOeYzivx_HYu5uluRCUhuaEhESD5Ht7lyuIEPwHaI8OCSnutsg1VNSIIFGhvax0YYrPj3kfjT7vzbt_0JySHhq--OC6meo855v9HnVfv6ULacbW3brp-rRHr7q3dBGFV93JMlSjN30W9ugV991M7JrNgPqU-tR339FVpsxk8wyFLh8mfi-hvTDo-f0Qk-q_vW0cWO5Ajk7JRWjZPfe7-hhazFEMf3wrs7u1Kd94e9jkvDYVRvL4o2K3MOMCw_NSVQ5UcbyahrEdId-uwRTHKwYwo8MlA6S6I2svPUZaHK_WRDo6erppmiMrkMoLGI_myPITaD6HMPeg5SMCCImtbRTDB1umGvM7T1G-RDuy8eRP6HFHNh6_gGL4w7VcT9wbJm9qbQqLiWqhJ3PonTnK5gT1dA16fAJRfwEtfyObT95HMTzctrmBlovLUSRlXyWJ10-U8MIg8L1BHDEvzkTgs4BTP0zOJNJqDm7X0VgHjXbQKAdN6WAoF25IB6HwOYtUIkVMQx6GMktpMggo5YmI0Yi70HIfotpDWe1hV3_dEefF6x0hf30OKx3YmmAk2yOZ28C2D2Rum9Rf5WCVWTsz9c4BPzL1TlYQ8GoflWwPdXnb3oOo12dTZeXMLANP63bGU9nOtKwJqtuLy9RPZCYp8-IwyLyYC-ElKRt4YRCpJEzjJBwkh8rWzbOjjDMv5n3q8SiKPJ6JJKHKz2LGDspT8vzyR5xvvvseu9nCXUqZMRlzwWLJWNrnqRjEA5-qiItYMVjdQts1cOtgqjvynrqCUnfk5ft_IOUnsPkJhF4Hb_4HPp4xSsE_nQV9imnxUOlCjrTIesIMIU2Lst5Afcc5yE_JpdmHN6_9fGaPT756DZn4lawORNWirFp8pn8h2Mnv_rRd1nqop3zplxs1r7P_g-tHrwYQuiOXjmdnxg3_uQhR7sGW5y9ZQ5CWBLkmyLPze562sM_06Xl9YL_ETuUgzZ1ZmlfkMM2rfB9WL1zFskBQOogjnw1U5rNQCtUfhImMOGUsQ207_feFV_4NAAD__9ZYfsYxBAAA HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.kebWVpCVILviAJIY4nesjX-AnLsYx1zbISGt1Buvthc; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl26582443=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f33aeaf13777e00d4c0708c7fa33740a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1594\u0026rd=1594\u0026fd=490\u0026bv=2026.4.2\u0026tmpl=70","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1594\u0026rd=1594\u0026fd=490\u0026bv=2026.4.2\u0026tmpl=70 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":300,"dns":0,"connect":99,"send":0,"wait":98,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=603","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=603 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-OperaMini-Phone-UA, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Device-Stock-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":293,"dns":1,"connect":94,"send":0,"wait":98,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=450","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=450 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:21 GMT\r\nContent-Length: 0\r\nConnection: close\r\nAccept-Ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?q=roblox%20custom%20name%20filter%20script\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 16 Apr 2026 05:53:02 GMT","end":"Tue, 13 Oct 2026 05:53:02 GMT"},"fingerprint":{"sha1":"24:F3:B1:CE:29:AF:66:D1:5D:3B:14:70:5D:E2:07:95:7C:41:70:E7","sha256":"F8:C7:F0:64:A9:0F:66:DB:B5:45:C8:CA:A8:72:A1:0A:8A:68:92:9D:6F:46:02:47:A2:2D:24:45:61:F5:C8:2E"}}},"request":{"raw":"GET /th?q=roblox%20custom%20name%20filter%20script\u0026w=720\u0026h=405\u0026c=5\u0026rs=1\u0026p=0 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=5184000\r\ncontent-length: 42590\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\nx-resolved-thumbnail-id: OIP.BGCpIL6YVWhxPwrRZLtxXAHaEK\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 027147FB76F149FFBC9456B2832BADC2 Ref B: OSL231050215036 Ref C: 2026-05-03T08:45:16Z\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x405, components 3","md5":"d352b4ea19d81fdfb8a3071b4256e33f","sha1":"7d4b5ea7fa9d648252321311cdf7f3a8ba4482a2","sha256":"a16fdd27ef24087fda9ad4b37a8a9fede3a21e69908e7146303cf6af6ac5f500","sha512":"0d3bc980e72e7eafbfe60c52caf3b86f688a0279c6b99b2a4f80c8d0220fbdc9e72440c5aa3db7b7a8bbfad8b2bbf0a2b433ce5478b952581cffb37b70ca925d","ssdeep":"768:hqvCUuJk/WvGqnr419Tk+O3Ql1K1sFTkBVJcV7US2fq0UAJmgvH2zl1qGlD0EGRs:hXPCkGqr4w+O3QW16WoUSYUhgPil0e+s","tlshash":"db130257e33611a545dae2bef1bc4053511ea933f489c3049af63ea3d450bc73386798","first_seen":"2026-05-03T08:45:43.471233Z","last_seen":"2026-05-03T08:45:43.471233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":38,"dns":24,"connect":3,"send":0,"wait":47,"receive":4,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 01:34:17 GMT","end":"Mon, 27 Jul 2026 01:34:16 GMT"},"fingerprint":{"sha1":"95:86:03:59:0E:03:98:91:87:F0:07:36:44:10:95:8E:67:97:47:D8","sha256":"51:F3:91:79:18:08:9A:FD:A7:80:AD:AA:80:FB:C8:8B:AE:27:FD:79:25:B6:37:2F:1B:C5:60:67:25:A8:A7:02"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 98fc0966cdf23b2f4df9e7054551d2f6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-09T09:46:24.700007Z","times_seen":26128,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fO25KOxFodwLrXxGiw35nabLgWH8588jQzc2Idy0Sg3LAOBqBSDP3mHpMaF%2FAj6OlBe%2BSjz38q2vsf3jO6fMChq4igU21YyqGObznG3oEW1HVcmzg0TVCmS6kf6H6p5ydhsvxEcwnzM%3D\"}]}\r\ncf-ray: 9f5dfd2f6fae1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-09T10:13:27.426303Z","times_seen":13238,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RSv4_cxB8dX6Jvk-IrCKFEFqQgCO_N2N61TbqIHwUkByQoBaIYz3iO4bwex2PvbhYhXQhKQ3MSQqJB8r3dyzURgv8A7dEhIZ27LXINFTUiSFRoLytdmOLzY95Ho_fm8x7sNyekh4Yv379upjrP-Wa_R91Xb-tCmrF1b9xyGe3Rq-5tXQzCq-5kFarRGywIe_SK-04mdsymTxmljDL3bV1lykw2T1Ho8lHCegnthX6P9UNMqv_2tnFguQM5OiHPQ8vu_7-rj6HFAsXwxzczu1Ob8vW3hk3Oa1NhJA8_KnYKMy4wPCtV5UAVh-tpGNsR8t0GTHG4VgAzmq8UINUd2XjxMdLicE0T6ejgKdM0R1YglRcwHi2Q5UfQfAFh7kPLYwIIiRtbKIYPb5hqzO8-RfkK7cj5J39Cjzty_vELKIY_XMv1xL1p8qbWprCYqBZ6soDeXqBsjlBPN6DHRxD1l9DyN7L55D0Uw_mWzQ20XF4eDKTsqyTx-okSXuj7zIujQeBFmfBZ4HPKwuT0i7RagNtzaKyDRjtolIOmdDCUSzekcSgYDwYqkSKiIQ9DmaU0iX1KeSIiNOIetNyDqHZRVrvY0d8c96cdcS5d7wj563NYuQFbd8T54AuMZHsgc-vb9qHMbZOydfbXOWhnpt7e5wem3s4KAl7toZLtXJd37H2I-txsqqycmVXgad3OeCrbmZY1QXVneZmyRGaSBl5MaexFMQ09zin3RCiVz6JYBDKaK1s3z4xGKg69KKXU44Iyzw8jxVjqp1HE9ssT8txqMc6338-xky3dvq985qeCJ_0gCngmo4zLwA-SmIWBTCNY3ULbDXDrYKo78q66glJ35KUHfyDlR7D5EYR2wBsXfDwLfAr-KfoU0-KR0oUcaZH1hBlCmhZlfR71XWc_PyEXZx_euvbzqUk--fo1ZOJXsj4QVYuyavGZ_oVgO7_301ZZ66Ge8pVrbta8zv4Hro9f8SF0Ry4ezk7tG_5zCaLchS3PXrKGIC0Jck2QZ2f3PG1hn-nTs3rffoXtykGaO7M0r8g8zat8D1YvXRVkvqA0jgYsiFXGglAK1Y_DRA44DYIMte303xde_jcAAP__tjNhnzcEAAA=","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSv4_cxB8dX6Jvk-IrCKFEFqQgCO_N2N61TbqIHwUkByQoBaIYz3iO4bwex2PvbhYhXQhKQ3MSQqJB8r3dyzURgv8A7dEhIZ27LXINFTUiSFRoLytdmOLzY95Ho_fm8x7sNyekh4Yv379upjrP-Wa_R91Xb-tCmrF1b9xyGe3Rq-5tXQzCq-5kFarRGywIe_SK-04mdsymTxmljDL3bV1lykw2T1Ho8lHCegnthX6P9UNMqv_2tnFguQM5OiHPQ8vu_7-rj6HFAsXwxzczu1Ob8vW3hk3Oa1NhJA8_KnYKMy4wPCtV5UAVh-tpGNsR8t0GTHG4VgAzmq8UINUd2XjxMdLicE0T6ejgKdM0R1YglRcwHi2Q5UfQfAFh7kPLYwIIiRtbKIYPb5hqzO8-RfkK7cj5J39Cjzty_vELKIY_XMv1xL1p8qbWprCYqBZ6soDeXqBsjlBPN6DHRxD1l9DyN7L55D0Uw_mWzQ20XF4eDKTsqyTx-okSXuj7zIujQeBFmfBZ4HPKwuT0i7RagNtzaKyDRjtolIOmdDCUSzekcSgYDwYqkSKiIQ9DmaU0iX1KeSIiNOIetNyDqHZRVrvY0d8c96cdcS5d7wj563NYuQFbd8T54AuMZHsgc-vb9qHMbZOydfbXOWhnpt7e5wem3s4KAl7toZLtXJd37H2I-txsqqycmVXgad3OeCrbmZY1QXVneZmyRGaSBl5MaexFMQ09zin3RCiVz6JYBDKaK1s3z4xGKg69KKXU44Iyzw8jxVjqp1HE9ssT8txqMc6338-xky3dvq985qeCJ_0gCngmo4zLwA-SmIWBTCNY3ULbDXDrYKo78q66glJ35KUHfyDlR7D5EYR2wBsXfDwLfAr-KfoU0-KR0oUcaZH1hBlCmhZlfR71XWc_PyEXZx_euvbzqUk--fo1ZOJXsj4QVYuyavGZ_oVgO7_301ZZ66Ge8pVrbta8zv4Hro9f8SF0Ry4ezk7tG_5zCaLchS3PXrKGIC0Jck2QZ2f3PG1hn-nTs3rffoXtykGaO7M0r8g8zat8D1YvXRVkvqA0jgYsiFXGglAK1Y_DRA44DYIMte303xde_jcAAP__tjNhnzcEAAA= HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.YEIcJQ5Dc-wJ51rS43EEYBHjSAzsTjhBHKK53T4IPgA; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl26582436=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: User-Agent,Sec-CH-UA-Platform-Version,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA\r\nx-envoy-upstream-service-time: 14\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 61556fff74e9b3fd9cd51121657f018e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/notifications/other/adzilla/notif/1/css/animate.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/notif/1/css/animate.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:51:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c014ae-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGPOork2yuOP9L6Z7STVAZ3DYXLYSJ%2BI4evmajAqiX%2BUw0GIkzppYEmSHsrBjSSI8aSAGcoy5VnS4UyXCrwT7904Vrl2KC741DvLgxg7n%2BHT2jnCkoq8XmPDn9siBT%2F98vDoESqTm3g%3D\"}]}\r\ncf-ray: 9f5dfd22cde31ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-09T10:13:27.426303Z","times_seen":13238,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":570,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /6dd5e3d7ac37d33b5abc87810f6ac7f3/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20212\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version\r\nx-envoy-upstream-service-time: 2\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fd75ff0ef9fb819ea434fdd6c9ef9a61\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":51138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51138), with no line terminators","md5":"62108555dcf166b82c2583133cbd3c01","sha1":"32a764290e42608d68aa5e41c4a924f96ea5e184","sha256":"4363d47daba8106c8ae8dc68f3fc717ed521184586025f1a221d36376de40bd2","sha512":"fb7da7a7db62ad4ff8695e1e4ae9e2a5c3b1e08c3dbb6380caf66fc4e2e1bf69bae794f6225443d8b612aec3c1719f5e2c455cd16ea65fdba044883d2169af29","ssdeep":"768:Uj71XeuGWHp9GAuNWlpBCHpDBRKO8doFtXj9H6sgT:aXeuGWHp9AA7BCHpDBcV+fz9H6sS","tlshash":"6933078c7fa1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-04-30T22:05:07.870978Z","last_seen":"2026-05-03T08:46:24.348858Z","times_seen":4,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"E9:E5:B7:DA:0A:AE:59:02:EA:10:61:71:9B:52:3A:08:42:A0:67:A5","sha256":"F6:1D:CE:31:AA:9C:7B:58:1D:1D:14:96:99:B6:58:CC:FB:AE:D5:3C:F8:FB:40:E3:45:2D:4A:54:11:B4:E2:F3"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 03 May 2026 08:45:21 GMT\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-08-09T09:46:24.667622Z","times_seen":10465,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295488\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T09:46:49.602972Z","times_seen":257980,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":59,"dns":0,"connect":21,"send":0,"wait":18,"receive":8,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=531","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=531 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Model\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:17.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /c6/4a/a1/c64aa11db612c16c65959b87a44dac81.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34787\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,X-Device-User-Agent\r\nx-envoy-upstream-service-time: 2\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0f59b623de60ad417c866630049dde01\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6cba4982a7ef7437b7a7ca87c3894cdb","sha1":"29332b8dfed947592127bc3483923a7209ce7bac","sha256":"ceac1fa1e0d68487855a2cbdca49923996c14d251cb68211688e066c81e26ae6","sha512":"07d31c600c04827b58b7c5dc832a328314db2c7228776ae10b214250d86639c01854e0241f78a8b56b4ce5dad6d7cf1bd07f5236919a4c3a451ee3a464e96512","ssdeep":"1536:8G6g/qn/325q6EWa8oN39IRnG1VDpN6CwkMDCF9q+hkxx8cY:vIeZB0mdc5pSgqm","tlshash":"2693e8c8bf81f16443f26836222f501ff0a90c5552dcd18de9a2b8af7fb9b48e635594","first_seen":"2026-05-03T08:45:43.474065Z","last_seen":"2026-05-03T08:45:43.474065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":294,"dns":0,"connect":92,"send":0,"wait":98,"receive":93,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T08:45:16.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-name-filter-script.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 20:26:02 GMT","end":"Thu, 23 Jul 2026 20:26:01 GMT"},"fingerprint":{"sha1":"FE:ED:5F:E4:22:C6:7A:AE:59:62:E5:7D:F1:28:E6:C4:8D:EA:E3:78","sha256":"B7:D3:64:3F:0B:70:AC:32:8E:9C:79:5F:FF:4F:24:95:50:08:81:77:61:3D:E0:A4:7D:24:7C:17:03:75:82:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblox-custom-name-filter-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2SfHjcioTqqGZrp5tg4v1KQy30YGrAhoMR0Io6FYox5cbuzCOF%2FJ8sAKmN9b9ZrENOevB5iWttz6JrB0RXnTi%2BEEbeY%2Fd1XPL9iTzmaocn2McFcWMTiS18wJ%2B%2F6mTOx8TD%2BuG%2FwrWCSf9ASDh6daVSjlUr0GVZwuN8Sr0A%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd0f8a48b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36389,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19385)","md5":"fa566c1552e111fd5bdedd40c36132aa","sha1":"6bacc22d35e3e1ea9415bc66e830e9c3c65befe8","sha256":"d73a2a01a226d2954697f6eee6e801b393369131e10f5a81960704609480a66c","sha512":"3a7eaf0647c65a400bdc3e9a68a451ebf9e1303be4012ac80bbcf0fa11d6ed2b446bffd2e32c673e3b330dfcc3df70fa704bbd0cd101a5f513c8e407d6cc1059","ssdeep":"768:yE3OYAOyBBE4nTau0OQ30BrYBBDGoKDTxpKp8IXxXLRFQ+zdz3JE/QbbrI:PUOyzE4TazOmG8BBKVDtsHhpoQs","tlshash":"0ef21b6fda608339119106bcf31f7aacab1b80694755e0a4fc5da92c60d7fd99033ce9","first_seen":"2026-05-03T08:45:43.476293Z","last_seen":"2026-05-03T08:45:43.476293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":25,"dns":11,"connect":1,"send":0,"wait":243,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSvY8bRRyddU4UpEBwQEe0RQoiYd_sp72ki_go4O4QCUqBhDQfu2bwemezs2s7prkQlIIqICHRIK2ffbkmQvAfIB8SBRJStnORa6goEeJoke8sHZni9zFvNHq_93sPZtUJ6aBiqw929VSlKdsJOtR-_bbKpB4be--W7dAOvW7fVlnoX7cn61CM3nQ8v0Ov2e_GYqB3XOpQ6lDHfkcVcaInO2coVP44cjoR7fhuxwl8TIpne1NZMMyCHJ2Ql6Bk88IfycdQYols-ONbsRmUOn_j7WGVslIXGMmjj7JBpscZhhdlUlhIsqPNa2jTEPJdCzo72kwAPVqsJwBXDWm9-hQ8O9rQBB8dnjPlKeIMXF7GeLREnC6h2BJC34eSTwggJPb2kQ0f7elizO6eo2yNNmTr9G-ocUO2nr6MbPjDjVRN7Js6rUqlM4NJUkNNllD9JfLqGOW0BTU-hii_gJK_k53T95ENF_sm1VByddUXSRj2uqLNQy9o-55029zlUTvu9ih3PI8KTs8kUskSzLRQGQuVslAlFqrcwlCubJ_2fOEwL0wiKbrUZ74vY06jnkspi0QXlbgHJR9CFAfIiwMM1DcNsV7ZbQj553MYacGUBCNZH8rUuKZ-JFNTcWeT3U326rku-zN2qMt-nBGw4iEKWS9UfsfchygvzaeJkXO9DoyX9ZxxWc-VLAmKO6ur1IlkLKnXDhM_aHeTkLZ5lIRtEcaU0q50uhFdJKas6ll-Ql5ci219-_2vGMQrW7i0G4ueL1w_CFniUkeIIPQEk8ILhR_CqBrKtMCMhalqyHvJNeSqIVce_AnOjmHSYwhlgVWvgY1rsE9rTLPHicrkSIm4I_QQUtfIyy2Ud61ZekK25x_euvHz2c4_2S4Ri9_I5kAUNfKixmfqF4J-eu-n_bxUQzVlaxPcLFkZPwemGvL8X19BqIZsP7l05sdgdwaRH8DkF38ZTcBzC6kiSOOLe8ZrmP_1_KKemS_RLyzw1JrztLAWPC3Sr89pGrWyA5d7Ya8XxkkoE096riejgMaRz6LQj_wApWnUv5ev_BcAAP__jw1r8w0EAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:18.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvY8bRRyddU4UpEBwQEe0RQoiYd_sp72ki_go4O4QCUqBhDQfu2bwemezs2s7prkQlIIqICHRIK2ffbkmQvAfIB8SBRJStnORa6goEeJoke8sHZni9zFvNHq_93sPZtUJ6aBiqw929VSlKdsJOtR-_bbKpB4be--W7dAOvW7fVlnoX7cn61CM3nQ8v0Ov2e_GYqB3XOpQ6lDHfkcVcaInO2coVP44cjoR7fhuxwl8TIpne1NZMMyCHJ2Ql6Bk88IfycdQYols-ONbsRmUOn_j7WGVslIXGMmjj7JBpscZhhdlUlhIsqPNa2jTEPJdCzo72kwAPVqsJwBXDWm9-hQ8O9rQBB8dnjPlKeIMXF7GeLREnC6h2BJC34eSTwggJPb2kQ0f7elizO6eo2yNNmTr9G-ocUO2nr6MbPjDjVRN7Js6rUqlM4NJUkNNllD9JfLqGOW0BTU-hii_gJK_k53T95ENF_sm1VByddUXSRj2uqLNQy9o-55029zlUTvu9ih3PI8KTs8kUskSzLRQGQuVslAlFqrcwlCubJ_2fOEwL0wiKbrUZ74vY06jnkspi0QXlbgHJR9CFAfIiwMM1DcNsV7ZbQj553MYacGUBCNZH8rUuKZ-JFNTcWeT3U326rku-zN2qMt-nBGw4iEKWS9UfsfchygvzaeJkXO9DoyX9ZxxWc-VLAmKO6ur1IlkLKnXDhM_aHeTkLZ5lIRtEcaU0q50uhFdJKas6ll-Ql5ci219-_2vGMQrW7i0G4ueL1w_CFniUkeIIPQEk8ILhR_CqBrKtMCMhalqyHvJNeSqIVce_AnOjmHSYwhlgVWvgY1rsE9rTLPHicrkSIm4I_QQUtfIyy2Ud61ZekK25x_euvHz2c4_2S4Ri9_I5kAUNfKixmfqF4J-eu-n_bxUQzVlaxPcLFkZPwemGvL8X19BqIZsP7l05sdgdwaRH8DkF38ZTcBzC6kiSOOLe8ZrmP_1_KKemS_RLyzw1JrztLAWPC3Sr89pGrWyA5d7Ya8XxkkoE096riejgMaRz6LQj_wApWnUv5ev_BcAAP__jw1r8w0EAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:18 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0db963834a7b53458b02930d98ded194\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 22:40:32 GMT\r\nexpires: Thu, 29 Apr 2027 22:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 295488\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-09T09:46:49.602972Z","times_seen":257980,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":60,"dns":3,"connect":8,"send":0,"wait":11,"receive":15,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=503","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.nightdestruct.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=503 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:21 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Device-Stock-UA, X-UCBrowser-Device-UA, User-Agent, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Platform, X-Device-User-Agent, X-OperaMini-Phone-UA, Sec-CH-UA-Full-Version\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.851912077876.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:39:42 GMT","end":"Mon, 27 Jul 2026 00:39:41 GMT"},"fingerprint":{"sha1":"72:D3:68:BC:A4:4E:55:26:DB:11:49:E2:96:21:2A:F6:6D:D9:43:08","sha256":"32:C2:2C:23:81:37:C1:17:20:76:3E:3A:3C:7A:DB:DC:43:10:FE:F6:F2:BA:21:05:A6:7F:B0:88:91:D5:10:02"}}},"request":{"raw":"GET /watch.851912077876.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Model,Device-Stock-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://wayfarerorthodox.com/watch.851912077876.js?key=52f212bca95373aed7ead32398143db7\u0026kw=%5B%221%22%2C%22new%22%2C%22message%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=UYfnwkJ-Owq8KkoUT54x76rutzkEwogOhnNe8sVpLoU\u0026fstu=019ded03-7f84-7b00-ac01-247f11b2b771\u0026st1=9582a52b2275063f946c60ffc98e7928\u0026ps1=1777797922\r\nset-cookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; expires=Sun, 10 May 2026 08:45:22 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.YEIcJQ5Dc-wJ51rS43EEYBHjSAzsTjhBHKK53T4IPgA; expires=Sun, 03 May 2026 08:46:22 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a7e7c0fac071c7d2bf4a847ac31e9015\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4239,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":283,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSO48bVRi942wXEOLZgabYgkjYe-fh8QwpIiIC4pFdIEEpKNB9zGwuHs9M5s7YjtNsCIQOBSQkoBofe3cpVhH8A2TTrUBiOhfZhooaEUSH7LUUcorvcc4U55t77o7LE9JCyRbvXU5HKo7ZVrtFzZevqUSmA21uXzUt2qLnzWsq8dzz5nBZ8v6rluO26DnzzVB00y2bWpRa1DLfUHkYpcOtlQqVHQVWK6At125ZbRfD_PFdlw1o1oDsn5BnoGT91B_RR1BihqT34-uh7hZp9sqlXhmzIs3Rl4cfJt0kHSToPRqj3ECUHK6_RqprQr5tIE0O1xcg7U-XF4CrmjReeACeHK5tgvf3T53yGGECLs9i0J8hjGdQbAaR3oGSvxNASGzvIOkdbKf5gN08VdlSrcnGw7-gBjXZePAckt79i7EamlfSuCxUmmgMowpqOIPanSEr5yhGDajBHKL4FEr-RrYevoukN93RcQolF5uuiDzP74gm95x203Wk3eQ2D5phx6fcchwqOF39IhXNwHQDpTZQKgNlZKDMDPTkwnSp7wqLOV4USNGhLnNdGXIa-DalLBAdlOI2lLwHkX9-VH6cxbbX9m23Y42tg0xeL7r9aZGX4bRMhB5bP5xSdrAiD5akHYwtZPkeuurrmhjPX64J-fsWtGxAFzUx3t9DX1b7Mta2rg5krEturbu97k41SYvdMdtPi90wIWD5PeSymqrshr4DUZyZjCItJ-myMF5UE8ZlNVGyIMhvLDapFchQUqfZ8byo2ZGe1wyox5qibfkR7zhMBmwa6aKsxtkJeXr5Usb9L59EN1yYLLLbkvmOb4WUS-oGLmcutXzR8fzAZza0qqB0A0wbGKmavBOdQ6Zq8tLdP8HZHDqeQygDrHwRbFCBXa8wSo4ilci-EmFLpD3ItEJWbKC4aYzjE_Ls5IOrF39eBea1f79BKI4vLL5b4nuIvEKWV_hE_UKwG9_-aScrVE-N2DJBVwpWhGfAVE2MW79CqJo88falVZg33_oCItuDzo4vzJ0VoFMCnhmIFUEcHpM1wHgF_b-dP5rH-jPs5gZ4bEx4nBtTHufxV6c2tVqYbZs7nu97YeTJyJGO7cigTcPAZYHnBm4bha7VP2fN_wIAAP__dbPGDUoEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:20.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSO48bVRi942wXEOLZgabYgkjYe-fh8QwpIiIC4pFdIEEpKNB9zGwuHs9M5s7YjtNsCIQOBSQkoBofe3cpVhH8A2TTrUBiOhfZhooaEUSH7LUUcorvcc4U55t77o7LE9JCyRbvXU5HKo7ZVrtFzZevqUSmA21uXzUt2qLnzWsq8dzz5nBZ8v6rluO26DnzzVB00y2bWpRa1DLfUHkYpcOtlQqVHQVWK6At125ZbRfD_PFdlw1o1oDsn5BnoGT91B_RR1BihqT34-uh7hZp9sqlXhmzIs3Rl4cfJt0kHSToPRqj3ECUHK6_RqprQr5tIE0O1xcg7U-XF4CrmjReeACeHK5tgvf3T53yGGECLs9i0J8hjGdQbAaR3oGSvxNASGzvIOkdbKf5gN08VdlSrcnGw7-gBjXZePAckt79i7EamlfSuCxUmmgMowpqOIPanSEr5yhGDajBHKL4FEr-RrYevoukN93RcQolF5uuiDzP74gm95x203Wk3eQ2D5phx6fcchwqOF39IhXNwHQDpTZQKgNlZKDMDPTkwnSp7wqLOV4USNGhLnNdGXIa-DalLBAdlOI2lLwHkX9-VH6cxbbX9m23Y42tg0xeL7r9aZGX4bRMhB5bP5xSdrAiD5akHYwtZPkeuurrmhjPX64J-fsWtGxAFzUx3t9DX1b7Mta2rg5krEturbu97k41SYvdMdtPi90wIWD5PeSymqrshr4DUZyZjCItJ-myMF5UE8ZlNVGyIMhvLDapFchQUqfZ8byo2ZGe1wyox5qibfkR7zhMBmwa6aKsxtkJeXr5Usb9L59EN1yYLLLbkvmOb4WUS-oGLmcutXzR8fzAZza0qqB0A0wbGKmavBOdQ6Zq8tLdP8HZHDqeQygDrHwRbFCBXa8wSo4ilci-EmFLpD3ItEJWbKC4aYzjE_Ls5IOrF39eBea1f79BKI4vLL5b4nuIvEKWV_hE_UKwG9_-aScrVE-N2DJBVwpWhGfAVE2MW79CqJo88falVZg33_oCItuDzo4vzJ0VoFMCnhmIFUEcHpM1wHgF_b-dP5rH-jPs5gZ4bEx4nBtTHufxV6c2tVqYbZs7nu97YeTJyJGO7cigTcPAZYHnBm4bha7VP2fN_wIAAP__dbPGDUoEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=2; pdhtkv29=true; uncs29=2; u_pl26582471=1; u_pl28216845=1; slecaf25da8381e0bd0494ba4018c76898a2=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9204aa6c9cd1ffd5bd26d1d6d8617e9a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"links.mtevor.com/api.php","fqdn":"links.mtevor.com","domain":"mtevor.com","tld":"com"},"ip":{"addr":"104.21.21.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mtevor.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Mar 2026 16:10:55 GMT","end":"Thu, 25 Jun 2026 17:08:44 GMT"},"fingerprint":{"sha1":"1D:90:33:9C:3D:4D:50:02:77:2C:32:67:1E:87:33:CC:BD:89:04:6D","sha256":"72:55:21:53:6A:A2:E9:F9:08:9D:13:A1:4F:FC:E2:CD:E9:5C:53:05:B8:B0:36:72:24:AB:FD:DA:7A:F9:7C:C4"}}},"request":{"raw":"GET /api.php HTTP/1.1\r\nHost: links.mtevor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caFBNlkAWNpwHIuQWHR1ymlLAALozXTts2XM198TahKQ1QIZunwjuCYneDeW32BZPEqGMpK%2FbDskBD3HpKcq3j83zQLw3nncKkTdF%2Fy8lQhV2HON0u8j8UN%2BwGZwV%2FJfgaV9\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd135bce723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"58896697b80adffeac7737d2f9e3b629","sha1":"ad4a45b636fed4682566745a616e516c7e0dd273","sha256":"1f48c1676ecce2d36773fed616ee289eeb18b2846f9444aa0292baa51b63adcf","sha512":"004f8a3ff9bb02bf7b705b0d10dc60056451dde9b8089f33bb9bd270096067f85b2f92c5c13715fc49e5ae57a31a91c069f0f87ba49a9d3275a51cf47bec5a95","ssdeep":"","tlshash":"9fc04c7ed259086c61c640daf529197e4d1a608ad93354c6f30dba165bd0473414d19b","first_seen":"2026-05-03T08:45:43.477635Z","last_seen":"2026-05-03T08:45:43.477635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":261,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-custom-name-filter-script.pages.dev/favicon.svg","fqdn":"roblox-custom-name-filter-script.pages.dev","domain":"roblox-custom-name-filter-script.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:16.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-custom-name-filter-script.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 20:26:02 GMT","end":"Thu, 23 Jul 2026 20:26:01 GMT"},"fingerprint":{"sha1":"FE:ED:5F:E4:22:C6:7A:AE:59:62:E5:7D:F1:28:E6:C4:8D:EA:E3:78","sha256":"B7:D3:64:3F:0B:70:AC:32:8E:9C:79:5F:FF:4F:24:95:50:08:81:77:61:3D:E0:A4:7D:24:7C:17:03:75:82:97"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: roblox-custom-name-filter-script.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:16 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMYztQ3CF6AWPM5Y40nRC1oZ3Ebf4Li3sSis8vXV2UAOLIOGNzjl%2F5p%2FOo%2BYbsx3MXsR%2FLrHmhnvGrYpSCVF0o%2B%2BsYs85oZakYLXIxz5W3at0Eap6GFAfKqPmu8YVhg3Chr4BxxqJLIeWhnZqJav4rHEeM4TnRTSJag1%2BIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c32bf1839a02c28417636e2fbfe32b83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5dfd13ed420afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5eb335b0265fa668f3b7a8bb83dd62","sha1":"3a7497bfe01d5f0dd7f93b25400ff8dd4410b033","sha256":"4183fc50d0ecbe4f28d32f897b93b712a6e90df092b0b5d921b51ce9da6931ee","sha512":"b3fb01f8dce34190449c733e25a5818ce09b3957fbe5088be6877f89d0f32ed35e793a245ae2d736cd17031d8183183d0e4188b2d93f7faaa286b5b88f8179e6","ssdeep":"","tlshash":"bf11ef5fc341983af23ed341eab4da49863568cb91f523d8fed06d29b43a5d61409788","first_seen":"2025-05-31T11:23:43.744066Z","last_seen":"2026-08-08T20:52:52.627521Z","times_seen":495,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/watch.1000770050317.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22making%22%2C%22your%22%2C%22own%22%2C%22roblox%22%2C%22custom%22%2C%22name%22%2C%22filter%22%2C%22script%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:05:19 GMT","end":"Mon, 27 Jul 2026 00:05:18 GMT"},"fingerprint":{"sha1":"9E:9D:89:63:27:09:09:E1:DE:EF:A3:53:5A:4C:B4:8F:37:96:26:12","sha256":"0D:74:F5:C7:12:ED:B6:75:69:22:A8:F1:16:86:18:85:88:22:BF:39:04:76:47:0E:7B:64:51:C3:94:F0:5A:7F"}}},"request":{"raw":"GET /watch.1000770050317.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22making%22%2C%22your%22%2C%22own%22%2C%22roblox%22%2C%22custom%22%2C%22name%22%2C%22filter%22%2C%22script%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,User-Agent\r\naccess-control-allow-origin: https://roblox-custom-name-filter-script.pages.dev\r\naccess-control-allow-credentials: true\r\nlocation: https://sourshaped.com/watch.1000770050317.js?key=6dd5e3d7ac37d33b5abc87810f6ac7f3\u0026kw=%5B%22making%22%2C%22your%22%2C%22own%22%2C%22roblox%22%2C%22custom%22%2C%22name%22%2C%22filter%22%2C%22script%22%5D\u0026refer=https%3A%2F%2Froblox-custom-name-filter-script.pages.dev%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=66dd5f99-59fc-4221-8763-7ec2132a0149%3A3%3A1\u0026rmtc=t\u0026shv=2\u0026sht=h07-huswWlwjQNV2i0ayQsgdybtGxeSNFLusc5YoorU\u0026fstu=019ded03-73a3-7a50-a666-aec990f1e733\u0026st1=92af1399f38bd977c2fb66d485eb6e40\u0026ps1=1777797919\r\nset-cookie: uid_id2=66dd5f99-59fc-4221-8763-7ec2132a0149:3:1; expires=Sun, 10 May 2026 08:45:19 GMT; path=/; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4MjQ0MywiayI6IjZkZDVlM2Q3YWMzN2QzM2I1YWJjODc4MTBmNmFjN2YzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0OTQxMzUzLCJwaWQiOjIwMDA2MTcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjo1LCJwdCI6NCwicGsiOiJtZWVtNXlqOGUiLCJjcGtzIjp7IjI4IjoiZDA4OWVhMDQ5ZjBmN2IxZWFjZmEyYjViYjk5ZDNiZGMiLCIyOSI6ImFmMjVkYTgzODFlMGJkMDQ5NGJhNDAxOGM3Njg5OGEyIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3JvYmxveC1jdXN0b20tbmFtZS1maWx0ZXItc2NyaXB0LnBhZ2VzLmRldi8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.kebWVpCVILviAJIY4nesjX-AnLsYx1zbISGt1Buvthc; expires=Sun, 03 May 2026 08:46:19 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c1ddf8a835df0121ba9bc67106e5044e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4212,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":298,"dns":1,"connect":94,"send":0,"wait":101,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/8e/5a/93/8e5a93269ec053af685b98de61e9fc17/1755792733.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /cti/8e/5a/93/8e5a93269ec053af685b98de61e9fc17/1755792733.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91718\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 21 Aug 2025 16:12:13 GMT\r\netag: \"68a7455d-16646\"\r\nexpires: Tue, 05 May 2026 08:45:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:10:08 12:36:14], progressive, precision 8, 300x250, components 3","md5":"7ab291d548ad31b5ee0754bd22fb26a4","sha1":"6d4b260181aa3fb2385a7c3dd9b70d46b99c2d52","sha256":"af3e5c05e7c70a613a9315d4877f8c55aadaad81508bb635eb01bba025a26a5a","sha512":"1b6a934c27fe575ce50422abf0bcf93bfbf291223a278d9c9233199029605a436751b3d88024ed4a2d046b968b66c71dc4b085f830a0472c491399c055d2f31b","ssdeep":"1536:cog3DzLgDog3DzLgDZBsfEu4Pg56EBbdnQuUk/F4WRtetypJoGyXvXGfZl:Rg3Dvg8g3Dvgj04Pg53BVQu/zRxpmG6u","tlshash":"5f93012df631afc2f0d91fb569d4c043a3245ef819daa02574beb562bbf84a1ec46701","first_seen":"2025-04-13T04:21:39.846844Z","last_seen":"2026-07-22T02:48:25.185955Z","times_seen":573,"resource_available":false,"data":null}},"time_used":6653,"timings":{"blocked":3276,"dns":0,"connect":19,"send":0,"wait":47,"receive":54,"ssl":3254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eHSHwQZYkcYtv5QRgLDoNz7vPFN21eTrlvkcgQAdPsEBhhrC6jUR5G0NuTB%2FC37pL13Fdnra69E02WMul73HHyyfCelAfsNWndPDWzHE9DCO9pItbpxtUxxlQ1TvnlgaGJXwuHeUUw%3D\"}]}\r\ncf-ray: 9f5dfd2f6fb51ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-08-08T04:08:50.849317Z","times_seen":3459,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/3d/81/bb/3d81bb97268ef5728376a4b8c41e5769/1680149067.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 02:33:25 GMT","end":"Fri, 05 Jun 2026 02:33:24 GMT"},"fingerprint":{"sha1":"4A:66:11:51:1F:1F:F3:84:B6:E4:4F:81:C1:03:83:9F:01:17:7E:82","sha256":"DA:55:E3:02:D5:3C:4E:3A:51:ED:21:0D:F4:32:52:C2:C5:31:87:50:DC:AB:13:D9:93:4A:15:0C:D9:8C:D6:4F"}}},"request":{"raw":"GET /si/3d/81/bb/3d81bb97268ef5728376a4b8c41e5769/1680149067.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 70486\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:04:36 GMT\r\netag: \"64250a54-11356\"\r\nexpires: Tue, 05 May 2026 08:45:23 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5b12f832c47768efe99140878896a06e","sha1":"e4ad174888c105b49055b901cf85ea28fdf08718","sha256":"cd602fed63cebb83565961dae66555978c2e1927388e50c7fb2ee0bb70939fb0","sha512":"7cae7180c69b456dd973f5430e88eca4b0fcf150c999bf14d44601906a320290bb494ee6330a8d33dc0b2ee295dc335eda1e1c6a2a394a31abca690667be1196","ssdeep":"1536:ZF2THgeV1DYIau/86djX5X01YjA/K9NF+Hp8CB2fRHCr:ZF2zgeov8dLC1Di9uJXYfA","tlshash":"9563026fd9fc60573afb58489928afcbd87e91578710d304e164868d008f9cef21b792","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-08-08T04:08:50.856057Z","times_seen":1284,"resource_available":false,"data":null}},"time_used":4377,"timings":{"blocked":2163,"dns":1,"connect":19,"send":0,"wait":37,"receive":10,"ssl":2143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immigrationacre.com/52f212bca95373aed7ead32398143db7/invoke.js","fqdn":"immigrationacre.com","domain":"immigrationacre.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:22.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"immigrationacre.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:44:59 GMT","end":"Sat, 20 Jun 2026 22:44:58 GMT"},"fingerprint":{"sha1":"C5:C0:F1:09:DF:66:79:21:CE:6B:25:C3:DC:5A:3B:4E:6C:24:00:FD","sha256":"14:5E:A4:DE:46:F2:FF:8F:7D:14:D8:7C:E6:33:BC:41:57:AD:BF:24:AC:C4:3C:0F:A7:EE:34:BE:D3:48:56:5B"}}},"request":{"raw":"GET /52f212bca95373aed7ead32398143db7/invoke.js HTTP/1.1\r\nHost: immigrationacre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:22 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 20154\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 17\r\nHost: immigrationacre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2365caf6bf6108a04646aa447b04b52c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51093), with no line terminators","md5":"16757a148f4933d36326d4e489c9e224","sha1":"3f34b359f127a0dfd04c65c7fd177783c9c0a325","sha256":"57878320d4c0fb91c24d616e51c0babfab2f3e66e2915121f6516ece6cdf87aa","sha512":"1fdfc686df08b608d5ea4603e89e97e476a850da959c6377b9e5eb8fc5ab9f1dbb255c4b03251f161df7598e50bb914274bd7642d978f5c586e1159a37c4dcba","ssdeep":"768:Uu73Lx6hMHp9GzuNWlpBCHpDBRKO8doFtXj9H6sgT:rLx6hMHp9zA7BCHpDBcV+fz9H6sS","tlshash":"da3307887fb1b07503b67473622f9046f25c0d0956ecd8dcd087a8a87ea87e9d1b7b25","first_seen":"2026-04-30T20:02:05.069642Z","last_seen":"2026-05-03T08:45:43.481261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"immigrationacre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Findex.html\u0026l=1354\u0026fd=493","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:19.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 22:18:41 GMT","end":"Thu, 23 Jul 2026 22:18:40 GMT"},"fingerprint":{"sha1":"85:96:BC:41:7A:67:17:33:3C:0F:33:72:BB:3D:4F:F3:56:97:46:09","sha256":"DD:49:0E:2F:27:46:7A:6C:59:AD:4C:03:B8:50:05:CE:D0:BE:26:63:2C:98:45:1E:56:85:0C:E8:27:00:7A:19"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fnotif%2F1%2Findex.html\u0026l=1354\u0026fd=493 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=4cf6687c-b635-43d2-b2b9-e780b1330cb0:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl26582471=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 03 May 2026 08:45:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Device-Stock-UA, User-Agent, Sec-CH-UA, Sec-CH-UA-PlatformUser-Agent, Sec-CH-UA-Model, Sec-CH-UA-Mobile, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA, Sec-CH-UA-Platform-Version\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T09:49:07.809217Z","times_seen":17797099,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nightdestruct.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"cdn.nightdestruct.com","domain":"nightdestruct.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblox-custom-name-filter-script.pages.dev/","date":"2026-05-03T08:45:21.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nightdestruct.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 16:21:26 GMT","end":"Sun, 28 Jun 2026 16:21:25 GMT"},"fingerprint":{"sha1":"77:BA:39:E3:87:1C:89:74:C5:36:C2:0F:E9:4C:0E:35:C4:92:A6:BA","sha256":"5F:17:E6:F7:42:E9:5F:B9:9E:03:47:36:9F:79:03:3B:E2:C2:66:ED:E9:3D:14:AB:29:B0:52:4A:62:57:C4:91"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: cdn.nightdestruct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://roblox-custom-name-filter-script.pages.dev/\r\nOrigin: https://roblox-custom-name-filter-script.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:45:21 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00Mlf2NLTDTNmlkoWjIoNo3bokNqi8C2mIRj64byzF7NqH0CSit6c2K8y5eXAqeXvsdjDgfKXCR5n%2BGOlZA%2BSFnXUuSkC359wxQ6l0qkgbidC20Vbngi0Q5WlYQjDUrjJBqUNxRos%2BQ%3D\"}]}\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9f5dfd305c87b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-08-08T04:08:50.861041Z","times_seen":3556,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}