{"report_id":"ff6bfe84-7df7-4348-98be-1962b3874bc2","version":6,"status":"done","tags":[],"date":"2024-10-08T15:49:38Z","url":{"schema":"http","addr":"bleleadersto.com/s?f3fd244e","fqdn":"bleleadersto.com","domain":"bleleadersto.com","tld":"com"},"ip":{"addr":"172.67.165.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bleleadersto.com/s?f3fd244e","fqdn":"bleleadersto.com","domain":"bleleadersto.com","tld":"com"},"title":"Shifty"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-20T08:48:42Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":142677,"first_seen":"2020-01-28 20:52:40","last_seen":"2023-07-23 07:59:56","alert_count":1,"request_count":1,"received_data":0,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bleleadersto.com","ip":{"addr":"104.21.16.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":0,"first_seen":"2024-09-23 13:37:43","last_seen":"2024-10-07 14:01:15","alert_count":0,"request_count":2,"received_data":97113,"sent_data":920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-01-01","domain_rank":0,"first_seen":"2024-09-07 02:18:13","last_seen":"2024-10-07 20:01:20","alert_count":0,"request_count":2,"received_data":104050,"sent_data":862,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-10-08 08:32:59","alert_count":0,"request_count":2,"received_data":95069,"sent_data":938,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dfdgfruitie.xyz","ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-12-12 12:59:22","last_seen":"2024-09-26 20:05:27","alert_count":0,"request_count":1,"received_data":674,"sent_data":411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"skillsombineukdw.com","ip":{"addr":"104.21.25.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-08","domain_rank":0,"first_seen":"2024-10-01 19:41:10","last_seen":"2024-10-07 19:44:29","alert_count":0,"request_count":2,"received_data":1365,"sent_data":1008,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yfueuktureu.com","ip":{"addr":"172.67.132.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-01-01","domain_rank":0,"first_seen":"2024-08-21 21:42:32","last_seen":"2024-09-26 20:00:04","alert_count":0,"request_count":1,"received_data":916,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2024-10-08 01:14:07","alert_count":0,"request_count":1,"received_data":8716,"sent_data":522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d1wzdj81h1hubn.cloudfront.net","ip":{"addr":"54.230.241.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-01-18 21:11:48","last_seen":"2024-09-26 01:36:13","alert_count":0,"request_count":1,"received_data":92745,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.243","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-10-07 19:37:44","alert_count":0,"request_count":1,"received_data":887,"sent_data":327,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d2w9cdu84xc4eq.cloudfront.net","ip":{"addr":"108.157.217.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-09-19 18:34:26","last_seen":"2024-10-07 09:54:20","alert_count":0,"request_count":1,"received_data":67792,"sent_data":417,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-08","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dfdgfruitie.xyz/adserver/yzfdmoan.js","fqdn":"dfdgfruitie.xyz","domain":"dfdgfruitie.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2w9cdu84xc4eq.cloudfront.net/?tid=1029748","fqdn":"d2w9cdu84xc4eq.cloudfront.net","domain":"d2w9cdu84xc4eq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34e19c225113657f421d0778e9e73c7d","sha1":"86bd36f846d13110dee283c0db7c93b78e8ad11d","sha256":"f87f7af419708f8aaec063b2ee4c7d4add4d0845fedb4542ccc7558109a4fd3e","sha512":"f74b1cb28dd4e33817276e58a8cddf2ec863ade92bbfc62196df8d0de45e2118b76b73454ba50054d9d86d6136952a5ba5298f8229d1d53d5eb5f2fb009e3ae0","ssdeep":"3072:nLecY5nIhvGjjD8h8Y8WhWtRlk86wWBU2CwWBU2i0UOOsCkJ9bs:nLcSZGnD8h8Y8I8oQi0UOOsCkJ9w","tlshash":"d1248d257616311a923314ea75ff2749f065d014fc024ad8a0d9c8b8a9e9ee521ff7fc","size":219531,"data":"","first_seen":"2024-10-11T08:48:44.769653Z","last_seen":"2024-10-11T08:48:44.769653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bleleadersto.com/s?f3fd244e","fqdn":"bleleadersto.com","domain":"bleleadersto.com","tld":"com"},"ip":{"addr":"104.21.16.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e2ec585db92322a0cce3bc2f810804c","sha1":"7af3bdf45a859ab01c051e022b96fd600f05455b","sha256":"149934212d96188be5af2af8b950f3b9c7702fd4528a0fd201fe327a510c0aa8","sha512":"67f650ae04a936ede189745a48df967fe8973b8084da68a692cfd163ebfcc8d9c47e6ff16182f5e70ed22b4f05694c2600b0c5de77091fdd522774e007dcd3ce","ssdeep":"1536:6HFSWp4Hu0GqdPcgncjjH0GhBYaL8APizoV9dSywhyd5vfikUo5gWVBYvriC:6HOHPnyHbhBYaoA6y94ad5vak3nAriC","tlshash":"d99312d06a9815b1077b142fa9e32f259347bda3dc4992083e7ce3839b8ef55c267136","size":92443,"data":"","first_seen":"2024-10-11T08:48:44.775946Z","last_seen":"2024-10-11T08:48:44.775946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.243","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-10-08T15:49:11.988101426Z","timestamp":1728402551988,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B6DB380F5EEB73AA56ABF90AFA43B52CC9F51B01F33AD1EEFECCC473A41FFB86\"\r\nLast-Modified: Tue, 08 Oct 2024 11:18:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5584\r\nExpires: Tue, 08 Oct 2024 17:22:15 GMT\r\nDate: Tue, 08 Oct 2024 15:49:11 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"33985775df7b619cb33f4050d88c5fb9","sha1":"cf0b2ff92cd2f7e12ce788a164a73d75dea5da83","sha256":"b6db380f5eeb73aa56abf90afa43b52cc9f51b01f33ad1eefeccc473a41ffb86","sha512":"6bc0e873177bc8082b9b3d8fdb3e1c3d3b2adf2d27c0053919c540d80bdfffa7a6f41b0ea381ef7e077c08bbd371ab5a9cbae5cea92e4752c766d8ff25ddb8f5","ssdeep":"","tlshash":"81f07551c5b13da01bb01629d9a89003dd10cdfa14c05be451f443e23c02bfc468054c","first_seen":"2024-10-08T16:14:32Z","last_seen":"2024-10-11T08:49:31.751651Z","times_seen":5844,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:12.548Z","timestamp":1728402552548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 09:34:31 GMT","end":"Mon, 09 Dec 2024 09:34:30 GMT"},"fingerprint":{"sha1":"58:48:CD:9D:CD:36:2C:BF:35:F8:E0:82:73:2B:F8:79:64:BB:AE:F7","sha256":"7D:82:2B:9F:07:5F:42:A9:C0:68:01:B6:47:DB:FD:92:6B:54:13:91:89:43:3B:C5:F2:53:D8:26:72:03:A6:5B"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Oct 2024 15:49:12 GMT\r\ndate: Tue, 08 Oct 2024 15:49:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93046,"size_decoded":93046,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"1d2d8eb4469e0643b067173c4f7c45c3","sha1":"a45f9cc58e5e03e79d3fc3d284dc0d9f23beaa22","sha256":"f1c7d9cc2211b51cc5ba5210d0a67ca96307cf83aeb7527c1e7cf9e35cdf301c","sha512":"60f89defae726815e2fae3e7fa5f8edb7024d1afebf4c0fb8fc7366e329f5c89cb6eeccc4ac2744c4f35527a732a4dfe8f4ab092a3780a824d0e47c1f0ebc283","ssdeep":"1536:MB2kdZWCHWBsl85lZxj9nwcNnrbFeg2AdDjzqcni7tk5mj2jN4ei3bLKvFb:Mw+WBsl859j9nwcdRjpPq+i7Mm+KuvV","tlshash":"119302981d712ce7e61f9371c5f36e45be3809438486a9c1bf7c31984f92928cad287e","first_seen":"2024-08-19T00:29:37Z","last_seen":"2024-10-11T09:00:56.657468Z","times_seen":5,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":60,"dns":1,"connect":22,"send":0,"wait":38,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfdgfruitie.xyz/adserver/yzfdmoan.js","fqdn":"dfdgfruitie.xyz","domain":"dfdgfruitie.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:12.815Z","timestamp":1728402552815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfdgfruitie.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Sep 2024 19:20:22 GMT","end":"Sat, 21 Dec 2024 19:20:21 GMT"},"fingerprint":{"sha1":"98:1D:5E:36:30:97:98:91:A0:7C:89:A5:C7:05:70:1B:28:90:ED:16","sha256":"35:BD:61:68:D0:24:EE:A4:AA:A8:29:DE:E7:D0:14:B9:5A:4C:1B:59:EE:35:63:1D:5D:8F:71:94:D0:63:33:80"}}},"request":{"raw":"GET /adserver/yzfdmoan.js HTTP/1.1\r\nHost: dfdgfruitie.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:12 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 0\r\nlast-modified: Fri, 03 Feb 2023 19:26:28 GMT\r\netag: \"63dd5fe4-0\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 1337\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e5zvsKIDzU2YvmACqatLAZvankkm4BEEHM9YaMjuxqq1bKhuVeWKT2tkjBWe1JWYRYWwdWyjSV9Py5TnSkCAqzRglnNiMuv5YDynkz30kQ18LEIx2fyXQqG48TaJo4Qa4FY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8cf747940eb2d370-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":133,"dns":59,"connect":24,"send":0,"wait":34,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2w9cdu84xc4eq.cloudfront.net/?tid=1029748","fqdn":"d2w9cdu84xc4eq.cloudfront.net","domain":"d2w9cdu84xc4eq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.010Z","timestamp":1728402553010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /?tid=1029748 HTTP/1.1\r\nHost: d2w9cdu84xc4eq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 67333\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 0P-badKFAozQAUGeb5jw09skG34PdSMRtFObnYFfOmaoKpwHHY2MgA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67333,"size_decoded":219531,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1743)","md5":"34e19c225113657f421d0778e9e73c7d","sha1":"86bd36f846d13110dee283c0db7c93b78e8ad11d","sha256":"f87f7af419708f8aaec063b2ee4c7d4add4d0845fedb4542ccc7558109a4fd3e","sha512":"f74b1cb28dd4e33817276e58a8cddf2ec863ade92bbfc62196df8d0de45e2118b76b73454ba50054d9d86d6136952a5ba5298f8229d1d53d5eb5f2fb009e3ae0","ssdeep":"3072:nLecY5nIhvGjjD8h8Y8WhWtRlk86wWBU2CwWBU2i0UOOsCkJ9bs:nLcSZGnD8h8Y8I8oQi0UOOsCkJ9w","tlshash":"d1248d257616311a923314ea75ff2749f065d014fc024ad8a0d9c8b8a9e9ee521ff7fc","first_seen":"2024-10-11T08:48:44.769653Z","last_seen":"2024-10-11T08:48:44.769653Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":75,"dns":53,"connect":8,"send":0,"wait":179,"receive":20,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skillsombineukdw.com/dkRGektZeyUJdiQcLiofRQp0LhNDcRcyLzwiHhIAEBF/TC0jHWAOIhJ5d0p5T3NyQm0GLSJHeENiNQ4qAjE1R3pQLSgcJEtiMEd7WHJoSGVGYjNHelAwNhssS3VgCj8CKHtLfER8ckp5Q3F1SXpF","fqdn":"skillsombineukdw.com","domain":"skillsombineukdw.com","tld":"com"},"ip":{"addr":"104.21.25.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.322Z","timestamp":1728402553322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skillsombineukdw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:58:25 GMT","end":"Thu, 05 Dec 2024 07:58:24 GMT"},"fingerprint":{"sha1":"4A:5B:83:E7:5E:43:C0:DE:B8:4B:BC:EC:BA:30:36:E2:20:9D:85:9B","sha256":"7B:02:31:98:86:85:B2:A0:99:5F:27:6E:3D:B3:FE:7C:A7:4C:4E:3C:0D:D3:E4:E3:6C:F0:A1:88:BB:A4:7F:D7"}}},"request":{"raw":"GET /dkRGektZeyUJdiQcLiofRQp0LhNDcRcyLzwiHhIAEBF/TC0jHWAOIhJ5d0p5T3NyQm0GLSJHeENiNQ4qAjE1R3pQLSgcJEtiMEd7WHJoSGVGYjNHelAwNhssS3VgCj8CKHtLfER8ckp5Q3F1SXpF HTTP/1.1\r\nHost: skillsombineukdw.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OZ6OkFJVTsvmskxZmDmboinBaYsuzzOpSdY6pUOOUiu52KpiNnFZXapzLfHJSjLMzyfuxd%2BAcu9%2FQ6OtJ4L%2BqYJuv5qY7fK5Y4%2Fr2mHoRl%2FD1CpdzEXpbZOMHCh5r1UNtwopwn5R9Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8cf74796c92e5697-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":80,"dns":50,"connect":1,"send":0,"wait":134,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skillsombineukdw.com/popunder.gif","fqdn":"skillsombineukdw.com","domain":"skillsombineukdw.com","tld":"com"},"ip":{"addr":"104.21.25.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.725Z","timestamp":1728402553725,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skillsombineukdw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:58:25 GMT","end":"Thu, 05 Dec 2024 07:58:24 GMT"},"fingerprint":{"sha1":"4A:5B:83:E7:5E:43:C0:DE:B8:4B:BC:EC:BA:30:36:E2:20:9D:85:9B","sha256":"7B:02:31:98:86:85:B2:A0:99:5F:27:6E:3D:B3:FE:7C:A7:4C:4E:3C:0D:D3:E4:E3:6C:F0:A1:88:BB:A4:7F:D7"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: skillsombineukdw.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 58\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 7413\r\nlast-modified: Tue, 08 Oct 2024 13:45:40 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gRcHD1twprhoAgyOoetI5VZgbq9jeIXqg%2BSf7mLiG2wcQHwuEeMcUFyfIGiZJNQIxcKrB1jRkWJHV7kWL5Mq5eiG7RlyeqmVqryf5Kt27h%2Fqn9392tUJ3gGzWhh%2Bja9sEcVVvy%2BTgQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8cf74798cc685697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":58,"size_decoded":35,"mime_type":"","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-19T12:00:49.3631Z","times_seen":43646,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfueuktureu.com/tc","fqdn":"yfueuktureu.com","domain":"yfueuktureu.com","tld":"com"},"ip":{"addr":"172.67.132.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.786Z","timestamp":1728402553786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yfueuktureu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Sep 2024 10:51:26 GMT","end":"Sat, 28 Dec 2024 10:51:25 GMT"},"fingerprint":{"sha1":"25:7B:29:76:3C:CF:5F:B2:D0:90:15:56:F6:1F:2C:0A:C0:06:66:42","sha256":"F7:6D:AE:00:2B:06:99:23:45:F2:59:EB:64:65:75:74:3A:6A:07:A5:D7:1C:80:21:EE:E6:2B:BA:3C:DB:E2:E0"}}},"request":{"raw":"OPTIONS /tc HTTP/1.1\r\nHost: yfueuktureu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bleleadersto.com/\r\nOrigin: https://bleleadersto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\nset-cookie: ci=2063055901898983; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://bleleadersto.com\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6VgC97SANyLaL%2FHpprEnCA%2FCtKd67pwKA52cKAFoMyMFcYE9ikISRQFLSNaTCTmDbLqyTsVb0L%2FYANv0dJJvuOrDqZbY0PwRIB4XtfMZJesNOJ8FlAHfjnHo3erBFFnIl3Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8cf7479999aab517-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":68,"dns":37,"connect":1,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:15.014Z","timestamp":1728402555014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 09:34:31 GMT","end":"Mon, 09 Dec 2024 09:34:30 GMT"},"fingerprint":{"sha1":"0B:BA:7B:D2:D9:02:2E:7F:5C:C7:1F:18:F2:A7:76:44:D1:22:07:2B","sha256":"87:E5:92:E7:D4:E0:3B:1A:A3:3C:82:06:27:70:72:2C:74:1D:06:DC:DB:EB:C4:F0:1D:CB:70:95:A2:97:41:AD"}}},"request":{"raw":"GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bleleadersto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Oct 2024 17:45:16 GMT\r\nexpires: Sun, 05 Oct 2025 17:45:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 22 Mar 2024 00:00:38 GMT\r\ncontent-type: font/woff2\r\nage: 252239\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":7884,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-19T12:28:47.941286Z","times_seen":307255,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":60,"dns":0,"connect":21,"send":0,"wait":22,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/eVEyeUsYM1EUdBhsUF8+Cz0PXHk/dAA/L0smCxovDGkGAShNNENXKBU+Rx0tCz5cDWUXNEZceT88ZSERLxwCKH0+BUYvLgBhVDQaTGBTLBkKE3o7IywSZDsCLWh+N3pBOXwrBkkHSzw5OwJ0GioTPmg2CSwkeREgTgABEiozY0oLLy1ldzN6PCR0PwoRAmE7ICs/fB8BLTJgGAksOXwBHRYQXzB/PDtRNigxaXEzHQ4naDgGTgdLPG5LF3oDPy4YekEPNxAGCQUeJgohMh5lZ0svSDJqHQwaEHRJKChkWTgmPyB8MQo7NXYsLTZha0EtPANeKngBJ3kuZjQZay4kSTJzP3syJnAOCjgHVSgDChVQITM8C2QoIzY5Ak8NFwhUKwwsElY+JzELYzMjGGFrAxwTCAo8Dwkday44DjNzLzoYB3MeDxcEFBM4Fj9CRAgoaGpILAsjUBMG","fqdn":"undefined","domain":"undefined","tld":"undefined"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.326Z","timestamp":1728402553326,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /eVEyeUsYM1EUdBhsUF8+Cz0PXHk/dAA/L0smCxovDGkGAShNNENXKBU+Rx0tCz5cDWUXNEZceT88ZSERLxwCKH0+BUYvLgBhVDQaTGBTLBkKE3o7IywSZDsCLWh+N3pBOXwrBkkHSzw5OwJ0GioTPmg2CSwkeREgTgABEiozY0oLLy1ldzN6PCR0PwoRAmE7ICs/fB8BLTJgGAksOXwBHRYQXzB/PDtRNigxaXEzHQ4naDgGTgdLPG5LF3oDPy4YekEPNxAGCQUeJgohMh5lZ0svSDJqHQwaEHRJKChkWTgmPyB8MQo7NXYsLTZha0EtPANeKngBJ3kuZjQZay4kSTJzP3syJnAOCjgHVSgDChVQITM8C2QoIzY5Ak8NFwhUKwwsElY+JzELYzMjGGFrAxwTCAo8Dwkday44DjNzLzoYB3MeDxcEFBM4Fj9CRAgoaGpILAsjUBMG HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-10-08","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bleleadersto.com/s?f3fd244e","fqdn":"bleleadersto.com","domain":"bleleadersto.com","tld":"com"},"ip":{"addr":"104.21.16.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-10-08T15:49:12.106Z","timestamp":1728402552106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bleleadersto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Sep 2024 10:36:06 GMT","end":"Sun, 22 Dec 2024 10:36:05 GMT"},"fingerprint":{"sha1":"1E:1F:75:26:56:BE:7A:5B:15:78:54:21:01:6F:10:F0:4C:86:CF:65","sha256":"89:FA:D9:D7:EA:33:65:5F:64:FF:27:62:A3:B8:B7:7E:7E:B2:DD:1E:84:52:A4:B1:54:C2:21:F1:4E:90:D9:7C"}}},"request":{"raw":"GET /s?f3fd244e HTTP/1.1\r\nHost: bleleadersto.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:12 GMT\r\ncontent-type: text/html\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jWGPC9Hq1QxKx3A1aI9ebz6Xn8uvWSse%2BIBYDJPAs2nzCzm2mSXBzlmGmeA%2BHKakOJ34dyUg%2Fndz5VNVw58Pu6BqBe0BjTDtFpMc2scvz3NISLsGmRweGHBpg7ffiyCF648L\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 8cf7478ec834b51b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95469,"size_decoded":95469,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (61205)","md5":"c48a1dd64b43cd64aca43b09efac48ab","sha1":"62b588174ffe26ab7621075dc48b9d0e36e8dce2","sha256":"a029a2df47f505a0ca998ea0f94d13c2f3a2f829066f1e4c77a989c03f933e45","sha512":"9e847a84279a3a77e80a218dae0fbda07cb3ebb831b0375f0cba26a07bc0b0dd3d9f567fce763fc48a75795334d91eee28b86e3a9f6b3fcd01eef51bda50890c","ssdeep":"1536:lHFSWp4Hu0GqdPcgncjjH0GhBYaL8APizoV9dSywhyd5vfikUo5gWVBYvri7:lHOHPnyHbhBYaoA6y94ad5vak3nAri7","tlshash":"719302805ad805a2177b112eaae33f245356bda3dd49c5083ebce386cf8ef95c167235","first_seen":"2024-10-11T08:48:44.771719Z","last_seen":"2024-10-11T08:48:44.771719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":252,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.319Z","timestamp":1728402553319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bleleadersto.com/\r\nOrigin: https://bleleadersto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=1885587757896949@1@1728402553; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://bleleadersto.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NY9tGTr%2F5IUmuThn4pNsNllHFWqOvyudgrxTehOXmX8kbaP9vBCVAzNtucqf3oHQxwsXzTxXuwzF%2BtL%2FcvS0oh5amszzfiDvGpKu0FW3hiIw7wlcWK87r7Eams5FxxvuRmk0zK0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8cf74796ad3756b1-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27,"size_decoded":27,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"246415ad71e56b579d2c5201949732b1","sha1":"cf02b61f34fa4e8fe5b39077d0bb7d56e936e9d1","sha256":"0cfdad7780db6abd30a15c3f7fdbdff76fe98f1e125592dc44d20eb459d869fc","sha512":"bfd1f5bfa08dd7ffc092fe7debe0ddb049725474493bcaa8a682fc6fd8c00e67b3d6c2f3e5e60eb93ee28aad53826b6283d3d9b950b8435563b487b877e62599","ssdeep":"","tlshash":"498000002328b2228b2a2e0e20222238280c88088800800e828b8c00800803300a80f8","first_seen":"2024-10-11T08:48:44.772957Z","last_seen":"2024-10-11T08:48:44.772957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":60,"dns":37,"connect":1,"send":0,"wait":155,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.746Z","timestamp":1728402553746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 09:34:31 GMT","end":"Mon, 09 Dec 2024 09:34:30 GMT"},"fingerprint":{"sha1":"58:48:CD:9D:CD:36:2C:BF:35:F8:E0:82:73:2B:F8:79:64:BB:AE:F7","sha256":"7D:82:2B:9F:07:5F:42:A9:C0:68:01:B6:47:DB:FD:92:6B:54:13:91:89:43:3B:C5:F2:53:D8:26:72:03:A6:5B"}}},"request":{"raw":"GET /css?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Oct 2024 15:49:13 GMT\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":781,"size_decoded":781,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (799), with no line terminators","md5":"f2734c367eb54d2729867445e0ea79a8","sha1":"18f8b32901dae48bedc55cc12baca116e56e6bb7","sha256":"d5f6fe55368116052648d76167ba4c103db2e0e52680340cd0cb014d3f6cf1d4","sha512":"fe77397ad4a71c6e79fefaaefffa1497403da2a4e2ba916bfd948fc6580012179fd256d235b270ed1ce15c18dac55ccfcef055ef3db363571fe9009a6ab84837","ssdeep":"","tlshash":"5d018981083ba504e7834ed523db7932fe0ea710b470a2716bfd18ea5d87c561322b2d","first_seen":"2024-03-26T10:55:40Z","last_seen":"2024-10-15T18:27:31.871496Z","times_seen":667,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/802cbc3abf14334d.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:12.711Z","timestamp":1728402552711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /resources/802cbc3abf14334d.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 92166\r\ndate: Tue, 08 Oct 2024 11:31:33 GMT\r\nlast-modified: Sat, 10 Aug 2024 03:50:46 GMT\r\netag: \"ed71035b78e4f20fe84958596a6d4cff\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 344322\r\nx-amz-meta-timestamp: 2024-08-09T14:12:39.643794\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: JWqCm7fW9LKlV-4nR-3UZCPtlTLmazhZGH411Ud2PxSndYNXI8CfsQ==\r\nage: 15459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92166,"size_decoded":92166,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"ed71035b78e4f20fe84958596a6d4cff","sha1":"b91033511dea4b58539640e88c7681919be2382c","sha256":"0e90ca20cf823d0a13e6d187f53cfcb2b7bae9dab4862233d02611a693360231","sha512":"e266cf51827b812905cbcfda16e5963a173c842f6d1c2dfbf98de0f09c89ebd2a7dd40500bff8a1158cdc69291a7908768bea3df144eab4cce1d70aab3e68240","ssdeep":"1536:f2kdZWCHWBsl85lZxj9nwcNnrbFeg2AdDjzqcni7tk5mj2jN4ei3bLKvFb:++WBsl859j9nwcdRjpPq+i7Mm+KuvV","tlshash":"049301941d711cf7e61f9371c5f3ae45bf3809438446a981bf7c35a84f9291889d287e","first_seen":"2023-08-02T11:36:01Z","last_seen":"2026-03-28T13:46:17.555667Z","times_seen":110,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":41,"dns":39,"connect":1,"send":0,"wait":23,"receive":4,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bleleadersto.com/favicon.ico","fqdn":"bleleadersto.com","domain":"bleleadersto.com","tld":"com"},"ip":{"addr":"104.21.16.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:12.713Z","timestamp":1728402552713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bleleadersto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Sep 2024 10:36:06 GMT","end":"Sun, 22 Dec 2024 10:36:05 GMT"},"fingerprint":{"sha1":"1E:1F:75:26:56:BE:7A:5B:15:78:54:21:01:6F:10:F0:4C:86:CF:65","sha256":"89:FA:D9:D7:EA:33:65:5F:64:FF:27:62:A3:B8:B7:7E:7E:B2:DD:1E:84:52:A4:B1:54:C2:21:F1:4E:90:D9:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bleleadersto.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bleleadersto.com/s?f3fd244e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 08 Oct 2024 15:49:12 GMT\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 81\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a0LUAWjY6zhN3kHF8FSN59ZhQtVYXso8WQ1Wb1MUwYOpmPsOJs7i6wIUSoG7cUJiAgGw1R4D3iM0GmOgRqSuidplkyNipwqVMWSg5Nd2AW9LCyzsnu7ApKXmxdJ1%2F9leT%2BUa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 8cf747927e70b51b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":159,"size_decoded":159,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"047df4239d5e57f4c78db606a5859d7b","sha1":"6f2a5da57c2a02837e19f8ac1158db728f3ad62c","sha256":"45eda3cf633f023269cef5c11cf1c1d5dde3345afdc28610589ef3682ae5130a","sha512":"2a07686d1d5d132fa339da2fbca5d43e9252f306f24f51b8d9eb82d50991139b6bb0fda98b60758d6efc57f394150db38de971a65520b1204b69624f25103bb3","ssdeep":"","tlshash":"17c0801cb8137004450349a11ac33541c34a5327e4bd801185844157f0cf1b5c4ea7d5","first_seen":"2023-04-11T06:15:44Z","last_seen":"2025-04-05T18:51:35.844026Z","times_seen":575,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bleleadersto.com/s?f3fd244e","date":"2024-10-08T15:49:13.317Z","timestamp":1728402553317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bleleadersto.com/\r\nOrigin: https://bleleadersto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Oct 2024 15:49:13 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://bleleadersto.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 5905\r\nlast-modified: Tue, 08 Oct 2024 14:10:48 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lAlax%2By6Gr%2BzOBJ7DQGhrh%2BoMacmQ9o2aXB5NAJVLaxEIJ2rwuWj9558fiEDfCmWUG7yoa8BgezfI6PwWu2oUPcmovqloiObf2yOMeJqTmxIaUs6VzEg7Vv4efh%2Bfx%2F8NveabyE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8cf747969d2f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":60,"dns":38,"connect":3,"send":0,"wait":53,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}