{"report_id":"0489ae29-e7fe-4353-bb4f-4e916160be55","version":6,"status":"done","tags":[],"date":"2025-08-07T10:10:19Z","url":{"schema":"http","addr":"daddylive.mp/embed/stream-34.php","fqdn":"daddylive.mp","domain":"daddylive.mp","tld":"mp"},"ip":{"addr":"172.67.186.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"title":"thedaddy.dad/embed/stream-34.php"},"submit":{"url":{"schema":"http","addr":"daddylive.mp/embed/stream-34.php","fqdn":"daddylive.mp","domain":"daddylive.mp","tld":"mp"},"ip":{"addr":"172.67.186.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-11T10:10:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":21,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.733101+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.753144+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.773167+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.833360+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.853398+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.873722+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.034686+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.053659+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.073966+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.434914+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.453874+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.474182+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.235692+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.254084+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.274420+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.835973+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.854362+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.874733+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.036274+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.054639+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.075010+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.dad","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"dlhd.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"thedaddy.dad","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":310766,"sent_data":1384,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"top2new.newkso.ru","ip":{"addr":"104.21.45.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2025-05-02T03:21:08.445644Z","last_seen":"2025-08-02T15:23:58.174135Z","alert_count":0,"request_count":1,"received_data":1007,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":8541,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-08-01T05:46:11.242142Z","alert_count":0,"request_count":1,"received_data":1767,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"daddylive.mp","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-03-11T18:33:27.793221Z","last_seen":"2025-07-31T07:34:59.785149Z","alert_count":0,"request_count":1,"received_data":309850,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":17812,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-08-01T05:38:11.643513Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"za.instrvinea.com","ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-07","domain_rank":0,"first_seen":"2025-06-18T03:56:28.807071Z","last_seen":"2025-07-31T19:17:53.657138Z","alert_count":0,"request_count":1,"received_data":1447,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xadsmart.com","ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":85874,"first_seen":"2020-04-19T20:24:06Z","last_seen":"2025-08-06T07:16:41.978097Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1717,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.xadsmart.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2020-04-18","domain_rank":151441,"first_seen":"2020-04-18T18:24:57Z","last_seen":"2025-08-06T07:16:41.891436Z","alert_count":0,"request_count":1,"received_data":42469,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-06T15:25:40.423241Z","alert_count":0,"request_count":2,"received_data":545027,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":19179,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-08-01T15:46:16.022655Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nrqch0vqcblp.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.dtscout.com","ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":11951,"first_seen":"2017-01-30T04:52:42Z","last_seen":"2025-08-01T16:23:26.936747Z","alert_count":0,"request_count":1,"received_data":2914,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"thedaddy.click","ip":{"addr":"172.67.208.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-24","domain_rank":0,"first_seen":"2025-07-08T08:06:43.810417Z","last_seen":"2025-07-31T19:17:53.5434Z","alert_count":1,"request_count":1,"received_data":309423,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"madurird.com","ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-10-06","domain_rank":0,"first_seen":"2023-10-07T10:39:52Z","last_seen":"2025-08-02T15:23:43.172854Z","alert_count":2,"request_count":2,"received_data":216394,"sent_data":815,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nrqch0vqcblp.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-08-07T10:10:20.446863Z","last_seen":"2025-08-07T10:10:20.446863Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":16577,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-08-01T05:43:49.62578Z","alert_count":0,"request_count":1,"received_data":79661,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nrqch0vqcblp.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-08-07T10:10:20.445958Z","last_seen":"2025-08-07T10:10:20.445958Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":2215,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-07-31T13:58:48.114688Z","alert_count":0,"request_count":1,"received_data":1787,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"dlhd.click","ip":{"addr":"104.21.81.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-07-31T07:34:57.948061Z","last_seen":"2025-07-31T07:34:57.948062Z","alert_count":1,"request_count":1,"received_data":309413,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":38137,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2025-08-02T12:46:07.856473Z","alert_count":0,"request_count":1,"received_data":12843,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jxoplay.xyz","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-13","domain_rank":0,"first_seen":"2025-08-02T15:46:56.726432Z","last_seen":"2025-08-02T15:46:56.726432Z","alert_count":0,"request_count":3,"received_data":126791,"sent_data":1417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":0,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2025-08-07T10:01:34.246305Z","alert_count":0,"request_count":2,"received_data":1653,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":0,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-08-06T10:18:15.761105Z","alert_count":0,"request_count":2,"received_data":3781,"sent_data":1505,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":0,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-08-06T00:11:51.988438Z","alert_count":1,"request_count":1,"received_data":524,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-08-06T16:11:55.56616Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.733101+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.753144+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.773167+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.833360+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.853398+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:09:59Z","timestamp":1754561399,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:09:59.873722+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.034686+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.053659+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.073966+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.434914+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.453874+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:00Z","timestamp":1754561400,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:00.474182+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":0,\"bytes_toserver\":248,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.235692+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.254084+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:01Z","timestamp":1754561401,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:01.274420+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":0,\"bytes_toserver\":310,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.835973+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.854362+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:02Z","timestamp":1754561402,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:02.874733+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":0,\"bytes_toserver\":372,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.036274+0000\",\"flow_id\":343092648947629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.733101+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.054639+0000\",\"flow_id\":248332785516024,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.753144+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T10:10:06Z","timestamp":1754561406,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.17","port":55865,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-08-07T10:10:06.075010+0000\",\"flow_id\":135641433623599,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55865,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":0,\"bytes_toserver\":434,\"bytes_toclient\":0,\"start\":\"2025-08-07T10:09:59.773167+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78a6702d966a64ed29eca96bfefed3de","sha1":"cc38ab49fb9cf0b5dfe3639378bd12af22ef1c0c","sha256":"00f32959faf141840611a9e3f434a6924cbcd843de990bb5df8ad037b9f8d095","sha512":"2b6c83fa444ad44b55fcced6f581d11b7a8e1e4339769b78b124e257de6526d0e1f7f2a974311d2a5e92633a22ff4846ee52276703d73de4dca305a5eba4be29","ssdeep":"","tlshash":"8d9002e65045d01019e61142772273497932159931451002821a4115301192fcb51594","size":52,"data":"","first_seen":"2024-07-11T01:38:35Z","last_seen":"2026-04-14T01:02:46.28791Z","times_seen":873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-18T08:22:42.111714Z","times_seen":68514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93128c282499b9ac18b63d0170ef3d44","sha1":"20a9c22e9546d49fc54c41ecbfa82880934f45f3","sha256":"f58ab76f9bc7003d1eaa68b8ca01bc723da2137cac1536511da193bd3062f86c","sha512":"7275c7fe7ca0a85191389c0c276f16c73ea59858c6af7268cc1c4a306755a35956ac72c4c8a7ba702c386eaa76ef38e871d50f0b18304dfd9ef1c75430a53f85","ssdeep":"","tlshash":"0d9000020c0ac08a003a208f3a0e3b002a02aba080020202bcea0238b8a8003aa08080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.290898Z","times_seen":13778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6ca01bb0ca3ebde821544f18ec83583","sha1":"2e8cbf747f80c79ae8c12b8685556757e813b9db","sha256":"a1d2b03b3b1269adbdcbda20f64807bc730335783a9a90e9fbd743f898fb675c","sha512":"abe6913529a7c6d57112e1fd7e8705144a557783b8b7e957c00e9d2a1cb5b05c00411e04d1c84a5df1032558a0151b396099d0582dbc944944f6040dad241573","ssdeep":"","tlshash":"cbf05c2a98e707384cfa7a441034ca7534fc38a0a9a3d067625cc82ccd39fc54c14bec","size":467,"data":"","first_seen":"2023-03-09T01:35:27Z","last_seen":"2026-04-12T18:50:07.371301Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xadsmart.com/TmMxC/qvideojs_5.vast.vpaid.min.js","fqdn":"www.xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6d00d109325681d5f5161a8b6f3340d","sha1":"6c05c407bdaf17f1f878342680e301d29a0dc7d9","sha256":"824fd403a3150c24fd0f4d4ca6e46b22b25e65b43177b1f52fd100ba972dd204","sha512":"4ed99677451bb1f4d60ee177f5da04c95c6ecf1b484a51b2c556523d5c5a3b645aa35eebb3c4e59dfb155a10f833cc228fadee187606f5a9c1ecf38832504058","ssdeep":"768:bt9rqAYKKaZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCWqCntlqo7/:bbZZzFQ9JsTgZvfzmMzhYrTscp1Zd","tlshash":"4a132aaab286282601e742b9503eb317b23305167812d458fcb9cdf96e3dd86117b7fc","size":41925,"data":"","first_seen":"2025-08-07T10:10:26.187785Z","last_seen":"2025-08-07T10:10:26.187785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.497655Z","times_seen":18393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.121473Z","times_seen":23601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.108547Z","times_seen":22785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.171411Z","times_seen":22615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.106778Z","times_seen":20809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef9e29d830b47e493c51972bb3af3ef6","sha1":"95d6255c5e100dce97da5619be073c8dbf4f00c0","sha256":"fc5a1ffc9513896711ec2c788490995715c8d32ccda8c4e2c68a9bd8cb214e77","sha512":"af408037587ea95e4db5c0412d582ea898d2fb5084e5917048698bc482dd7c3e8854d87fcf3adf508fd8cceef746eab017029aba07aa934184675a6e6c88f0b9","ssdeep":"","tlshash":"a270000000002830080208002020ca8e2a22208022033a00800a000000208802088b0a","size":19,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482014Z","times_seen":19081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc0afc5aee21e3a2c7ba20fcbbc5502","sha1":"b0b548e52b180b7ac2fbac80962700dcd226b31f","sha256":"97e8f3fb205c8b155c8c6370121edddfad4baf9da50783c9b7efc9ed120bf41b","sha512":"e37b0c0f47dd7f5641a98b80cd68fa04f9b932dedd7d691399e0d04a47e75abc50fe62dee85ca735f2dc3c534869f8f8c1478afc9fcde9b91719665003f21a7b","ssdeep":"","tlshash":"819000022c2ac08a0038208e3b0e3b082a022fa080020202bcca0238f8a8803a808080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308032Z","times_seen":13933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-13T16:26:24.159864Z","times_seen":20577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d053b0a115ef5528b92a92b79607afbe","sha1":"b815b2c0012fd7bc849e99056f7c0a26ac6d88f5","sha256":"b7eab6a205143527b2ea6d9932de8b9e91ad3e1d4ed72d842c6a701b3e21311b","sha512":"63cbfe324e8b5b81a0a00e25877ad3526b7d5f55cf45b194ded073ff0150179665eedd70d7e72832df2a729030c9ce8d079008abfd95bc65e60af5b4a66ee70c","ssdeep":"1536:4UM/KgNJvx03jeRROtYGqHCXKJzd7vN1fqkEGHxO8xQ1+y5+Ty:lM/qzeRROtYGXGZN1EGHxOIy5+Ty","tlshash":"eaa31958725774b16d668038745fc84d6febae90108e89e4d0e9acb33613074d3bbee9","size":107304,"data":"","first_seen":"2025-08-06T18:55:14.631547Z","last_seen":"2025-08-08T08:09:11.277685Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c45aa53934d395fa24467246fe0a98a","sha1":"6775bdf9f5961a43d2914b213936a8227e2b94c1","sha256":"d224cc4a157bcda644e160fa8dd987a860e0b8db09b06bef7734369b6ea91ba7","sha512":"058e1ebbdd6421a7ce202b3a2983c2ac071b55ea09411b745bc0817f52532c77790cf28510938a4b38cc9c29ba7c74a18696021b6325736bbb54588b7d37af17","ssdeep":"6144:4BuROY39ijP85mjmn174k+pJVJCQcbQzQYjZtmUD09bKVugLeQC6:4BuRv39ijk5mjK174k+zVncbQzQYjZtT","tlshash":"f84429493252b2f63bd150d59c3ba506e2365059780dc428f6ecc8d2a9afdce6236f7c","size":268912,"data":"","first_seen":"2025-08-07T10:10:26.212193Z","last_seen":"2025-08-07T10:10:26.212193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b50a7599a1cd871d2b379f9ef0b04aa4","sha1":"66783a5680bbf18a422b0ebf586f787abb91f56f","sha256":"94ba1e39aa22b534544bd907ddee33191396ded56a47cabf861e12ed65780385","sha512":"cb2dfa3c11be87aa80067ec44a034287bc817644e0e5c0bec92f0ec539919e362b7f1f14e9341a055cb68ab709bbfb41c1c082387d7b698b96b719ece4a2502a","ssdeep":"","tlshash":"2e90008c888f00e0ea2008002bac008038b022038222f0e0b00ef20c0f0838c280b0c2","size":45,"data":"","first_seen":"2024-07-20T17:31:12Z","last_seen":"2026-04-03T22:34:53.973345Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.504781Z","times_seen":18663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df0f0e3e7f31f2501d7e19833ccb4ddc","sha1":"e551bfcbdd3a7c41875f1a974ad1914604b5969f","sha256":"511e9d231c9360fcb7670f7cbaffb35bf8180f124fc080ebbfa5962d4c8bb089","sha512":"57497c56a50a2a0ed0cd9862fdaf381fbf969bd3048dff24dee46f2dc10139cccfcc4b275d7d74cd3d8f036ada1eabe54d05c4773e80ba797748aeff6c855898","ssdeep":"","tlshash":"b98000f8002300c302300f032b0b3302b033000c3accb0ebba3080303802303f8020c0","size":33,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.513113Z","times_seen":18131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.167782Z","times_seen":23028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60f1798bac26472658ff588720760829","sha1":"9929b26eeb812be15261ac5aee076e468bf4764f","sha256":"acf1662d0ddc764da1a0a9ca8c14ce6d6a937aecef80b4b0e0426698a24b765d","sha512":"9d0a619d6ac5f0516ddca9675f3eb2f0f58b6f2277e3e5925fa3ef9609f51fd08ab1826a609edf62cc1eb9d5c6543e459c205ffab10ef6cd4973caf62803f07e","ssdeep":"","tlshash":"aac08ca60128d1aae0a94c05270242006cf5bc6fdb8fea060840c20fae27216c798698","size":157,"data":"","first_seen":"2023-03-11T19:15:55Z","last_seen":"2026-04-15T20:32:47.659549Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8b250f2a8d4abf96964aa927783919e","sha1":"a623fdc9bfbfea8c33e570b9ca7700533ef7d700","sha256":"5173166bd115261ce7eafc6dcd4db4618a581b9da21b8a12d870d12ddb964835","sha512":"087ab541219ffe621a512e4463e7033e2af9bede42f4d69335558e178acb5d1cfeeb4b9ac304619d6cbf03e074c84712dcf75830868dccb4a960f8153d791db9","ssdeep":"","tlshash":"fc614ff3ac83cd05329194191daece3f305424eb702291627f8dbfe09958e5da07b06e","size":3179,"data":"","first_seen":"2025-08-07T10:10:26.216501Z","last_seen":"2025-08-08T19:12:49.092114Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff656e6bdffbea98da4df97ff7ae3d21","sha1":"f742e8d729409184fdaf152c2d2b670d6db7e9ec","sha256":"9e6e95d6fa2ce522e900a6eb22ef91ae4fa930a9e39e2ca913742d48d0484b68","sha512":"6d33c580d8b244ba6a4268947d576a1633f299fa43cc01e6f492e69b3245b277b9ead9597d20e953f5af78c8b9caa3c2fd80fc92a259de307b4461ccd71b63a0","ssdeep":"192:M4CrN2ip9brETbWI/Yum+RyXePI06HGwBJk4W1x:MjH9brETbP/Yum+RyXePI06mrX1x","tlshash":"2802c9bb7b49359061f10c7e625b7225753604baaa0f9512a262c8513c1cd0fc3afbee","size":8477,"data":"","first_seen":"2023-07-23T19:35:27Z","last_seen":"2026-04-15T20:32:47.668786Z","times_seen":662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c510d5a3d97cb2f599576a56b2703434","sha1":"9bc8f27eddd88f1e3f879b2dceb86f92486dc1e3","sha256":"b4a3a83fe09d48db0c0b4416fefb19af5f9e069c12d2af8793a18f159574bb79","sha512":"7adf4f6f79a04ef4aa41503ef199d996dfe027863d5493881f4689e595cc9ce27a4451f1be2617108f3716d2c26bea30fe4ef4c7c4922d4896cf3f7f94e50467","ssdeep":"","tlshash":"7d60002002002820002002000a02a20a2002020c82020200000a8000220208300802c0","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-11T18:05:35.188109Z","times_seen":18160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4260c01394765a497287987f27d6823a","sha1":"7162f84a1608c790ba9e01abfa0e0ddd067feb97","sha256":"0200f755a2c13b9335fe39b3a88f696c334e518e8407780c4731d8e6be966c4e","sha512":"acb1477b99c1be7773301f0a9ac146c60b4e5961824b2d27f4ab27d2f879ac4985a4df0dae6ce4cb2c0b3f9c93d5731320df8a49ddddc0cb9b4c8d2e328afeb6","ssdeep":"","tlshash":"7270003003003c00c03003030f03f3003000030cc000000003ccc00c330300330000c0","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-11T18:05:35.224213Z","times_seen":17922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c927a0bf0593f7b95fa92cd0df015d8","sha1":"3dbebe0b9d2e7b908eb1fc7849a51b2a53803ecb","sha256":"473917a7a4ae47fb69d1d5aff4767039c2c2d48dde0e3349643dba847b52dbb3","sha512":"fd15d2b4250a2a17ca0a6b9d7ffba7538cfdf218ed5d081ad227fa5900d3fe65478f4eb20cf902aff53be1b8d9673b072d40240aa4b3a993a0c3206f0d375004","ssdeep":"","tlshash":"1c11a529a8267818e1e51074943afb08f87102eb5f4475f424fd70e092358030c87acd","size":1018,"data":"","first_seen":"2025-08-07T10:10:26.232229Z","last_seen":"2025-08-07T10:10:26.232229Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.0011107531077610977","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c809887dc51fb5a7e73a3a98c3dd661c","sha1":"7d7574d4dcf1e06e2230379897c5df681ba603de","sha256":"1138f8c1bb11f4a5f7d8354b8c8a642ef94c9c741d76a7f476bac6473b7de085","sha512":"3a5e6abed1f1fa40c5d7d13b98d4e90d180f5913a673f10db23f40b1fe68a70de8e780c2633bb6f37745ce4aaf81707844817fa84baaa2b764a322831c298e7a","ssdeep":"","tlshash":"9b8000f00283008b08308f03230b3300b030200c30c032cf3038003c3002383bc030c0","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.494055Z","times_seen":17899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-14T08:01:01.793934Z","times_seen":19591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.154067Z","times_seen":22175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-18T08:22:42.111714Z","times_seen":68514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d053b0a115ef5528b92a92b79607afbe","sha1":"b815b2c0012fd7bc849e99056f7c0a26ac6d88f5","sha256":"b7eab6a205143527b2ea6d9932de8b9e91ad3e1d4ed72d842c6a701b3e21311b","sha512":"63cbfe324e8b5b81a0a00e25877ad3526b7d5f55cf45b194ded073ff0150179665eedd70d7e72832df2a729030c9ce8d079008abfd95bc65e60af5b4a66ee70c","ssdeep":"1536:4UM/KgNJvx03jeRROtYGqHCXKJzd7vN1fqkEGHxO8xQ1+y5+Ty:lM/qzeRROtYGXGZN1EGHxOIy5+Ty","tlshash":"eaa31958725774b16d668038745fc84d6febae90108e89e4d0e9acb33613074d3bbee9","size":107304,"data":"","first_seen":"2025-08-06T18:55:14.631547Z","last_seen":"2025-08-08T08:09:11.277685Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.491972Z","times_seen":18883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d76eb8dc02861ed102d5d2586f0d82b","sha1":"55f9121e69e32deb1d9248bd692cdf06e3e76267","sha256":"81471189f19f3e6d41e33d4f12ba8a5e03b70522fc6c9b0715ec63fdacf35076","sha512":"c54885a64a0800dfdec0736275e827244987f906dec35983ce1ee4bd4a9268b760fb5d246ee802ac3c09489f90e5667302e43b91991cc3bd0c36500a74bebc89","ssdeep":"","tlshash":"50e0ab2a98e706384cfa3a441034ca7934f838a0aaa3d057525cc82ccd39fc54c00aec","size":424,"data":"","first_seen":"2023-03-09T16:51:34Z","last_seen":"2026-04-15T20:32:47.681806Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac7fe824fc01da2eae66c69cde47673","sha1":"12c7d2596939ad5d05162d227907c9bf707559b0","sha256":"c259f617c5131add5a2a6c588f31e278b6c9443eddfa2399888a0d786712f20c","sha512":"ac205048c8287ebdd4ed9d241173dbca2ec4ceca2963d3706bd6b3d824f31fe3f073295f4003bd848d56dc1aa3733bfea5e620e1ce168519bbc03e8ea6d0ebd0","ssdeep":"","tlshash":"899000020c0af08e0038a0ae3a0e3b002a022ba080028203bcca0238b8a8003a828080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.309926Z","times_seen":13689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"442f7e0ac53b0beeffb200677ff2ffa2","sha1":"7fb17f685c8a652386c7341e39138ea6f4a0e928","sha256":"3db042ba8dbf234b0ba7ed8b47e5c8cb58b267af983635a41652258f1e282c0c","sha512":"9ed02a0a8dc7b515a0559d830651b43416e7877eb948dc3a7692c57cbede1fa72a8ac6ae75553c3cd6a015f3fbf85683a50ea2c98d278155633d7ab682f917d3","ssdeep":"","tlshash":"af80047055005110701c1345013353d41151010d1540c144d0035c1cf3113cf74100d0","size":34,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-05T11:10:16.823518Z","times_seen":14605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e0a1c0fffd54a51adc01d83b01abc47c","sha1":"3679a2b04ad12fcabf55dbbfd43b5d6f7a2f7a5f","sha256":"9604536382ce48ce59397c4a9ffdf06d534c5239bef334130b5da9dcc6dbb500","sha512":"4eab1529ab27dd08b1f5d24c96151fbe8b1b3428dd1200a3e17e3c195664c91fc9d5a48cfae0ef0a60d2d4cf0c16f9075ebe609f6efaef0e5f24fae709e81178","ssdeep":"","tlshash":"8d500000000cc000000003000000000300000000c0030000000c0000c0300003000000","size":9,"data":"","first_seen":"2025-07-08T08:06:47.760286Z","last_seen":"2025-09-01T17:57:12.979986Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e196ea436ee919174067e2ee23fca23f","sha1":"794fa42811be60cd5ec896f32f41342a9711f409","sha256":"7dd1efba8ea751d4b54c4e388bf3bcadfba2d057200fd01e0d085c1e41ebec6b","sha512":"969368dadcf64d1bb8d80cd6d4c36dc8291ee9434773523226533ce494d788721ebb1a9ba05a403d1305ba47473bfeb7c22cf9989184a675e785c9a283a018c2","ssdeep":"384:+v0a/K7iYFRdYttrow0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMV:+K72t0PQ80GaIoQPzahq/AMOY","tlshash":"66c2d5a7321eb91a8719626150ef2ec5a2cc48c4718f1b7ce724e53634d763485ebef8","size":27965,"data":"","first_seen":"2025-08-07T10:10:26.24489Z","last_seen":"2025-08-07T10:10:26.24489Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","size":78356,"data":"","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"08aa92ee799fcb0042b0596e554b2a96","sha1":"a36ce17bfe36ec2bbce4e00ab4d6ea928878ef02","sha256":"41d0020478872523dec2784396c880578c3280f28b6b25ac95c00b877749ab7a","sha512":"cae3205b4017f665d7d42ea47d69bbf156800a2cc73c72bb28b523342ad4865635ca3c6e77b1c4c45c5fdcca56b243886b77b8bf131878a68a1772dedeaa8cb1","ssdeep":"","tlshash":"75500000300fc00000c0cc030000c00000000000000000300c000030000000c0000000","size":9,"data":"","first_seen":"2025-08-07T10:10:26.246321Z","last_seen":"2025-08-07T10:10:26.246321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"265fbd04531d9cf5fd767b4e3149a5d1","sha1":"9df7368252b2b411d8472e2a6cc46fd5557ac415","sha256":"1b5a1da3648fc66667a67e766f23683675655e69a2f5186d65e750c7af80fa01","sha512":"c66a183c6e2dcabfedf54ccf42ca70a8cb2f9fde6fdfabfcb8ce20dc684821ce10b7892a940f459cc41c7462c97300aa740eecc1a38638845d159c684c9b036a","ssdeep":"","tlshash":"cb9000020c0ac08a003a208e3a0e3b022a2a2ba080020202bcca023ab8a8003aa28080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308656Z","times_seen":13860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.16672Z","times_seen":22394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"175286414dd8b9b41ed8253795c165a6","sha1":"4794ba3180f1cdcc7e4d5c0067b8062387cbd422","sha256":"e792f04ee4ea814167ae4d72b80f493d57a2a2c49e4307365c993896dfbb7fe8","sha512":"438d84ab680715944cb66c4e17b1f34b8b895163bc9cb18796ff46edd0d84065bad1cbd3157d7e3d038d09eb601ba9fe82df021ec0d586bcd0f2917700db4575","ssdeep":"","tlshash":"18500000cc000003c300000c0c00000000000030c0300c0cc030000c003000c3000300","size":9,"data":"","first_seen":"2025-05-31T20:41:39.44575Z","last_seen":"2025-09-01T17:57:13.008551Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xadsmart.com/rtxipdqcezmbsk?MbZvFAdW=BQNyAAAAAAAACZUAAm0-fqB8IGso5RvAcNeIN5fwSZuUETLAv8XFuLmcqmRBYor10umyEnaNOhTM7cxnWfD5vQ085JIobbZCmj8pwG_k_6j-_kqFbBZhYMZZWHyai1oGO-elmAB5jJBavIki9D5sCu1XsKUh7n2aoZQ3wFel16JYb-Y9eRmjsj7keKjxyRsS5PHIqlAnJ9aUuXK2A6QFy0LkftJ0DyexbHtVH3ketprQsqMycl8jyYyQW4MOGq-fQ7wJC9zXikJ1MOewibgKak-Np-O_LnVT2aT2mp0pwEeQ_eASCOgZkuBU1KTCAq2X0LeCAk5mn_lm5TTrSFIo1xYB7K2l-NpiVs1r6UEgspv_qJ-aJicvay0kVPd973U646XFzPRaWbp-jqTft0JDEYAdaWKHCkut2KPFlhqThE7FKmxVHgkKdlzK_baaKKPHc-j4QUPocHgkKzYb_3kTDA90zJiEG7kS9qaRucMzclbCe3nCmKBubShMQ7rnW4bnX23AFRhwE1j2xey6Jj4ndXBF2hsX4AOwGby0hZUf3_2PFa8SZo1c0rnwVW_4VStb0apcjJohFn4Ub8sGjFLvEfxc3BfFvWuqEZ5zhMNp6Vi6c-VGmbq-jxkbG_wIwB14EXOmmzLRdklA-5qcFgLWtcpeAsHMH2brdCkpNMSyNHKCNuITFSVzQAcI9p2916ABP8AGyXT6bww1xyfglMKOrVFdpT07NM0y6GPTBgSSRrd9Lib09j9h22zOK6D5BthQfhYFArxoVl1n3Ly5OH-HyjWMlwrNk5aaVU1LgJOxcFmBXgqrGuJpBY7sydA6wT58VM2Ns01NMJ_xj613n4IUUsGaX_26ST2_z4t6nGX9edDsYUE1qbRaksN8LADFII7s_pZ2rFfMT9UoXRCNjy-y_rc9axTVLuVMLGMjh2WIN3aH7bPg4B0B8TS13hFfnEt2D9cV3g9gIKCZ9gY9SiYEy5q7VdrLyEMoasSA68N3RuGnZPyKqez2XKNihQmX6ka1Ft7MPD0F6iZLM0TP5jKeItRSUZXBXrkTiVOTBkTwxRLPezNUUyMF-_dDo1CAP19RBc0vvq9J4SDa38rPafD-fRDfC5STJ7e5uYWe8issc7XItlkaAVC98Tzvl0O3xeLHxqMV7Ix2bl3H5CR9O5_hkrXnXnCEXrBSfoPEazE\u0026UfRyFGHa=4\u0026UfydGhWv=5224973\u0026JWmHhuEg=\u0026wxmvHQsT=0,0\u0026pVJazgnh=\u0026lzQiFqIY=\u0026buqGyajB=1280,1024,1,1280,1024,0","fqdn":"xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-18T08:36:10.110544Z","times_seen":23410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"9d7213c0c5d75f106631f2d74c23a1f5","sha1":"08a08f9d3090f3975d8c4a6ba53137a2db61abf3","sha256":"7bc228d23cdf9da22bb58db2c10a2af571597d503614d317af73057f2d02bc54","sha512":"818da65a348317a8eb344e0598837a339325e677701cec2cdf82463f5368c3ac2943ce8898fd2563a68efd1ee7f5db1e5845706e9be40617bacb8e69cfa3bdf5","ssdeep":"","tlshash":"85500000c30030c00c0000000c0000003c0c0c0000000cf00c00000c0f000c000003c0","size":11,"data":"","first_seen":"2025-08-07T10:10:26.248771Z","last_seen":"2025-08-07T10:10:26.248771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e214a7584bd935442f48a4b2d3b4249b","sha1":"3b147f379d15bfcb949e36cbcdfc7d29942db2bb","sha256":"1bc558bf6c75e531782bf6d8ceff79c5f405b843a194fbe4309a29f8802e2148","sha512":"a6d7dfbc61044982d78492d8fae14008d4faad9a9a577b9f8a2012aa25ad2bb1090a39bf0822f5aa5f9800e5305a7f022b27b4ce8f5aa629a76eb3a0541ab5b7","ssdeep":"384:+v0a/K7iYFRdYtnZ0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOIf:+K72nCQ80GaIoQPzahq/AMOY","tlshash":"36c2e5a7321eb91a8719626150ef2ec5a2cc48c4718f1b7ce724e53638d753485ebef8","size":28003,"data":"","first_seen":"2025-07-08T08:06:47.771646Z","last_seen":"2025-09-01T17:57:13.024218Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.103681Z","times_seen":20841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"za.instrvinea.com/rItVnbE7Xeat/69521","fqdn":"za.instrvinea.com","domain":"instrvinea.com","tld":"com"},"ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-18T08:37:41.531421Z","times_seen":15594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.11164Z","times_seen":21974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d936f0d3e0535e2fa01aa05c9d1508f","sha1":"d20537b105615348981de83acaa439e771f719de","sha256":"ec4b3c7a9f6ffc2691c526ef4e11982138f47505bf1245a72284d5f2ea3a5139","sha512":"b652ddcaf495c6cbd1b4c6ad40996249f94b67922be2c86f6b265b31c364b60fec7647074f81ad90fc8e21efb5349a74dbd0f827d40b45fb5599b9c432ce45fb","ssdeep":"","tlshash":"3a9002114c06c08a0178608e3a1e3b0076012f5180020102bcc60138b454003a4060a0","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.288429Z","times_seen":13737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.175739Z","times_seen":23636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.145032Z","times_seen":24301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.509046Z","times_seen":20073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-17T13:40:54.319887Z","times_seen":21365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.170519Z","times_seen":23253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"902c460afdd3e381e561395b818a5dbf","sha1":"91008cfe46804ec773a2e4f72302086a0a41366b","sha256":"64e360e85164e7675724c7fe1ed681b25a138c51d437bac5ff97e8910ccf2aa7","sha512":"f1cdaa252c9faeb7cafc830b5d755b186e10d090b7b2482e66ff0cba147c8ba570a1751dec8f3cbc4a59e654025753813aa3910f3c0c9ea2a673bec65e485416","ssdeep":"","tlshash":"5670002002002820802e20022202a3002000020008000000820800082220203280828a","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.113388Z","times_seen":17704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-13T16:26:24.164496Z","times_seen":21541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-13T16:26:24.110437Z","times_seen":23250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"thedaddy.click/embed/stream-34.php","fqdn":"thedaddy.click","domain":"thedaddy.click","tld":"click"},"ip":{"addr":"172.67.208.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T10:09:56.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thedaddy.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 19:38:47 GMT","end":"Thu, 16 Oct 2025 20:37:31 GMT"},"fingerprint":{"sha1":"1F:95:38:C1:AE:2D:B1:83:83:03:74:1D:0D:B1:6C:76:D6:1E:ED:0D","sha256":"E7:94:F6:91:93:4D:77:CA:0D:BD:10:CE:09:16:63:F1:58:18:89:9C:6C:EF:DE:97:98:1C:F1:BC:09:BE:14:06"}}},"request":{"raw":"GET /embed/stream-34.php HTTP/1.1\r\nHost: thedaddy.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 07 Aug 2025 10:09:56 GMT\r\nlocation: https://dlhd.click/embed/stream-34.php\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcXOeEcUTIocz2zZlBM87Z8SmJp%2B9hjej%2BWnABdo6kTxy%2FfMEEGJftRHU%2FD30BxhEr0wBhjucCxZ6sbY%2BJqhv2BYzyNHDmyvcb0oDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b5fb3799e9569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308880,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":75,"dns":51,"connect":1,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xadsmart.com/TmMxC/qvideojs_5.vast.vpaid.min.js","fqdn":"www.xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1376341044.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Jun 2025 06:29:51 GMT","end":"Tue, 23 Sep 2025 06:29:50 GMT"},"fingerprint":{"sha1":"A6:BD:44:5B:F6:EB:AE:48:79:85:5D:6B:31:98:F2:AA:06:FD:47:6D","sha256":"96:36:CA:FD:DC:90:04:16:03:03:D9:4A:CC:C5:82:B0:B6:DB:21:92:7F:62:C0:90:C7:0B:70:EB:D4:49:2C:B0"}}},"request":{"raw":"GET /TmMxC/qvideojs_5.vast.vpaid.min.js HTTP/1.1\r\nHost: www.xadsmart.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb11\r\nexpires: Thu, 14 Aug 2025 09:59:24 GMT\r\naccess-control-allow-origin: https://thedaddy.dad\r\nlink: \u003chttps://xadsmart.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBuUwJGwFBDAG5TAoBAfdsAgAADAElE8IxAbcNAAAA\r\nx-77-nzt-ray: fdb54123305d6927757b946866a25225\r\nx-77-cache: HIT\r\nx-77-age: 620\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41925,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"d6d00d109325681d5f5161a8b6f3340d","sha1":"6c05c407bdaf17f1f878342680e301d29a0dc7d9","sha256":"824fd403a3150c24fd0f4d4ca6e46b22b25e65b43177b1f52fd100ba972dd204","sha512":"4ed99677451bb1f4d60ee177f5da04c95c6ecf1b484a51b2c556523d5c5a3b645aa35eebb3c4e59dfb155a10f833cc228fadee187606f5a9c1ecf38832504058","ssdeep":"768:bt9rqAYKKaZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCWqCntlqo7/:bbZZzFQ9JsTgZvfzmMzhYrTscp1Zd","tlshash":"4a132aaab286282601e742b9503eb317b23305167812d458fcb9cdf96e3dd86117b7fc","first_seen":"2025-08-07T10:10:26.187785Z","last_seen":"2025-08-07T10:10:26.187785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":86,"dns":29,"connect":7,"send":0,"wait":33,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 145133\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.13\r\nx-jsd-version-type: version\r\netag: W/\"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220029-FRA, cache-lga21957-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 11978\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sjDtU9Px%2FiKHgmPX5SM25kGKFqHv%2F%2Bf30YfZYHojHxZAT5jgh2hCCGvSA%2BcjC6sTwu3GijJoseOT3m3kMe210FzdcINIIE66RkdAkqoxGazRcKf3XNMSmvegynqSRn3vHu0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b5fb41ca5c56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-18T05:20:15.511545Z","times_seen":2348,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":35,"receive":9,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jxoplay.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 13 Jun 2025 14:55:50 GMT","end":"Thu, 11 Sep 2025 15:04:28 GMT"},"fingerprint":{"sha1":"42:A2:EA:51:2D:C2:5A:EC:8F:13:88:7E:3A:F9:28:E5:A2:AB:82:B7","sha256":"96:D7:C0:C1:10:18:46:92:6E:DD:A8:D3:17:81:07:FF:3E:0B:F3:2D:B9:A9:5E:A7:AD:C7:33:20:BF:1C:33:C3"}}},"request":{"raw":"HEAD /premiumtv/daddyhd.php?id=34 HTTP/1.1\r\nHost: jxoplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/premiumtv/daddyhd.php?id=34\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nvideocdnx: NO\r\nnode: PHP\r\ncache-control: public, max-age=30, immutable, no-transform\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOSX70BAMcETI%2BmWIMhDgNkyNMVzpwYaiG0dnLFEK1Wuj3si6%2BAAEB%2Fr8OCanDeJx%2Bk8gUDjZB28tcjjrfM3yvS1Ko%2BkAjDGmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96b5fb431f1db517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/6712285/?oo=1\u0026js_build=iclick-v1.1526.0\u0026dmn=madurird.com\u0026tt=2\u0026ix=0","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Aug 2025 05:09:42 GMT","end":"Thu, 30 Oct 2025 05:09:41 GMT"},"fingerprint":{"sha1":"CA:B0:55:2C:92:65:6D:F3:1E:6D:BA:45:88:FD:65:2F:07:36:13:27","sha256":"DA:EB:6B:D8:17:3D:D3:8F:2D:0D:B8:71:CE:2B:40:9E:83:B9:6F:46:25:7F:24:C5:24:83:76:CC:BB:09:4A:7F"}}},"request":{"raw":"POST /5/6712285/?oo=1\u0026js_build=iclick-v1.1526.0\u0026dmn=madurird.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2608\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 10:09:59 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://thedaddy.dad\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.681Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=6707202\u0026cbur=0.9246540945977365\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=\u0026cbpage=https%3A%2F%2Fthedaddy.dad%2Fembed%2Fstream-34.php\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=qapdututycwyj.store\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1754561397508\u0026srs=d49e01c817c9154f47a8a369e6c82a89\u0026atv=64.2\u0026abtg=1\u0026adbv=3-cdn-js","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 11:57:50 GMT","end":"Wed, 10 Sep 2025 12:56:28 GMT"},"fingerprint":{"sha1":"33:F7:89:37:41:BF:FA:59:BF:98:36:E9:5A:74:20:54:A0:1D:C0:76","sha256":"D8:52:82:3E:D8:62:46:01:AB:38:D1:94:B8:B4:FB:CA:29:D0:EF:08:CA:1B:7A:15:A4:20:A0:C3:58:59:A4:9C"}}},"request":{"raw":"GET /script/suurl5.php?r=6707202\u0026cbur=0.9246540945977365\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=\u0026cbpage=https%3A%2F%2Fthedaddy.dad%2Fembed%2Fstream-34.php\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=qapdututycwyj.store\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1754561397508\u0026srs=d49e01c817c9154f47a8a369e6c82a89\u0026atv=64.2\u0026abtg=1\u0026adbv=3-cdn-js HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thedaddy.dad/\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUTrAZE2L6j%2FOVSPxtJxHNxgF7ml4RHvYApncewbEjCSUO445v%2BK9K0h%2FT2PmdJllnoNU4A0a5iDZttiT3LYG88uD0xfkZqGfWKdOHAeeOvO\"}]}\r\ncf-ray: 96b5fb3eede256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":966,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af05259f78ec4701397dd744c3e852bb","sha1":"4be84417a64150e2ece9378d263ec329ade0cfc9","sha256":"786c9106c39b90af2ff6291ab2719304c0a8c46cbc0f4ddd3ba40f3797d7ff7d","sha512":"f90175a94dbf1bf987d3cf89fcf061fda70b7f72d0bcdb69612d0103736510d44a96248ab797cc3341e30360e5bf0f9081631110e2ec6385556845059e17beda","ssdeep":"","tlshash":"2c1194323bd82261b5b169cd09bd563975d1142e9e90240080c11c684a942a4ab7e876","first_seen":"2025-08-07T10:10:26.189502Z","last_seen":"2025-08-07T10:10:26.189502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":72,"dns":39,"connect":1,"send":0,"wait":204,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.02501535408752953\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Jun 2025 11:32:07 GMT","end":"Sun, 14 Sep 2025 12:30:39 GMT"},"fingerprint":{"sha1":"73:D3:CF:85:0F:63:93:DD:FC:EC:C6:A5:AD:25:E8:9F:46:71:26:ED","sha256":"A8:B0:CB:2F:32:B5:AE:46:45:D1:0C:B8:85:56:D2:88:0C:43:C1:0E:61:09:34:D5:ED:78:EF:E0:E4:CE:AE:C7"}}},"request":{"raw":"POST /ut/hb.php?cb=0.02501535408752953\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 807\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGu3i%2BsiPDx4a4wa7QET%2FsCd188aPX6xNnO6dE2NEPmG3zlHEHHOSyp24eUUDOx1aA3SjMdCCNo8FR6INQOJIm7ms3AGjv6N6uiB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96b5fb406f23b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":146,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"madurird.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 05:31:00 GMT","end":"Mon, 06 Oct 2025 05:30:59 GMT"},"fingerprint":{"sha1":"09:91:C5:C7:5D:1D:EE:65:92:6D:A8:CB:EF:8C:E0:02:50:27:22:09","sha256":"86:B2:92:68:AC:3B:41:2C:A1:0B:F0:F6:31:0C:6C:D8:95:41:65:85:7B:32:CD:C1:F8:ED:B4:76:89:9C:81:58"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: madurird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: a35bc105d7ce8f86ba5d41b93d00d7d6\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d053b0a115ef5528b92a92b79607afbe","sha1":"b815b2c0012fd7bc849e99056f7c0a26ac6d88f5","sha256":"b7eab6a205143527b2ea6d9932de8b9e91ad3e1d4ed72d842c6a701b3e21311b","sha512":"63cbfe324e8b5b81a0a00e25877ad3526b7d5f55cf45b194ded073ff0150179665eedd70d7e72832df2a729030c9ce8d079008abfd95bc65e60af5b4a66ee70c","ssdeep":"1536:4UM/KgNJvx03jeRROtYGqHCXKJzd7vN1fqkEGHxO8xQ1+y5+Ty:lM/qzeRROtYGXGZN1EGHxOIy5+Ty","tlshash":"eaa31958725774b16d668038745fc84d6febae90108e89e4d0e9acb33613074d3bbee9","first_seen":"2025-08-06T18:55:14.631547Z","last_seen":"2025-08-08T08:09:11.277685Z","times_seen":10,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/disable-devtool@latest/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220123-FRA, cache-lga21970-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 17669\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c5qLyY8HGzRu%2Fxxo7wgQstClrz1avWxRkWHHmSln%2FBgKGHCpdmfGdHzFaf3Essy%2BJy1JDIeGTRTp6oz59Q5e6hcbh3bs0rX%2BPBLrngFn4DCwDfGrQGIGK4wIfGk3wMWmhtc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b5fb41ca6856b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-18T08:29:44.848694Z","times_seen":3728,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":12,"dns":1,"connect":3,"send":0,"wait":24,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/favicon.ico","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:58.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thedaddy.dad","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 01:09:14 GMT","end":"Sat, 01 Nov 2025 02:07:39 GMT"},"fingerprint":{"sha1":"A8:85:66:EE:89:0E:AE:A4:E6:22:A8:BF:3E:AD:95:79:0E:F4:0E:1F","sha256":"60:81:D0:48:50:95:F0:03:72:31:44:8F:49:D4:9C:DF:97:92:1D:9E:33:65:C4:9E:89:86:01:7C:B6:E2:D2:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: thedaddy.dad\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/embed/stream-34.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqVeVww%2FWUPhg9THdL4UMrUOteRbsZ1K2VDJ6kfNlERp4fKpFMyvH1JU2ybqQtimnncYsx0tVnF2GpUeI%2BVxCbq2wE5AstVQoMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 96b5fb435f425689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-18T08:22:48.576353Z","times_seen":490496,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.dad","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/9064848/?oo=1\u0026js_build=iclick-v1.1526.0\u0026dmn=madurird.com\u0026tt=2\u0026ix=1","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Aug 2025 05:09:42 GMT","end":"Thu, 30 Oct 2025 05:09:41 GMT"},"fingerprint":{"sha1":"CA:B0:55:2C:92:65:6D:F3:1E:6D:BA:45:88:FD:65:2F:07:36:13:27","sha256":"DA:EB:6B:D8:17:3D:D3:8F:2D:0D:B8:71:CE:2B:40:9E:83:B9:6F:46:25:7F:24:C5:24:83:76:CC:BB:09:4A:7F"}}},"request":{"raw":"POST /5/9064848/?oo=1\u0026js_build=iclick-v1.1526.0\u0026dmn=madurird.com\u0026tt=2\u0026ix=1 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2647\r\nOrigin: https://jxoplay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://jxoplay.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":88,"dns":2,"connect":26,"send":0,"wait":29,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nrqch0vqcblp.l4.adsco.re/","fqdn":"nrqch0vqcblp.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:55:04 GMT","end":"Thu, 16 Oct 2025 09:55:03 GMT"},"fingerprint":{"sha1":"89:17:D6:F2:7A:24:C5:33:57:EE:DE:EE:8A:24:F2:17:17:F4:D3:82","sha256":"E7:4D:AF:EE:70:50:82:45:92:27:31:C9:82:61:D4:DC:59:1B:06:E0:75:04:FB:AC:D9:72:BB:43:8A:B0:07:C1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: nrqch0vqcblp.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":86,"dns":63,"connect":23,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/premiumtv/daddyhd.php?id=34","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jxoplay.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 13 Jun 2025 14:55:50 GMT","end":"Thu, 11 Sep 2025 15:04:28 GMT"},"fingerprint":{"sha1":"42:A2:EA:51:2D:C2:5A:EC:8F:13:88:7E:3A:F9:28:E5:A2:AB:82:B7","sha256":"96:D7:C0:C1:10:18:46:92:6E:DD:A8:D3:17:81:07:FF:3E:0B:F3:2D:B9:A9:5E:A7:AD:C7:33:20:BF:1C:33:C3"}}},"request":{"raw":"GET /premiumtv/daddyhd.php?id=34 HTTP/1.1\r\nHost: jxoplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: BYPASS\r\nvideocdnx: NO\r\nnode: PHP\r\ncache-control: public, max-age=30, immutable, no-transform\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wM13uv0MfUM4IruyaDoJhIiu5BYskB0B%2FtoWacAHl7DEahYhk8Wh017%2BdCWUAGdZucjPPmJ%2BfVXw9VGFhZolZOcUNt9A9Yd%2B1w%3D%3D\"}]}\r\ncf-ray: 96b5fb3f3a23b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46989,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (28192), with CRLF, LF line terminators","md5":"4533cd181ff8aa23a9d84044e6b1e099","sha1":"96197a93a899128166f46568232b58bf078dbccd","sha256":"f72d160dd06f393d14f2d995070e277f2a7a1701fd39ca8719cfaa8764240f79","sha512":"39aa993adb83703436ea8fd6c28f9f1fbf1fc2237a8e90144ccba2c12f547d803236f9ab70e18bf83c38b6f8b8238b21f883e9520a60bcfa2cd225b9a31bc4b1","ssdeep":"768:s7pyJy4K72t0PQ80GaIoQPzahq/AMOK4P1UiULcuYlKi/IC0zVBuga/ppN34Dyxv:apyQ72/GI7MOJKifr/ppN34+F6c4m","tlshash":"402328a6344ab8154336626114bf2989e1ac4482758f4638f71cf8727feb634c4e7ef8","first_seen":"2025-08-07T10:10:26.192639Z","last_seen":"2025-08-07T10:10:26.192639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":68,"dns":23,"connect":1,"send":0,"wait":181,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thedaddy.dad","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 01:09:14 GMT","end":"Sat, 01 Nov 2025 02:07:39 GMT"},"fingerprint":{"sha1":"A8:85:66:EE:89:0E:AE:A4:E6:22:A8:BF:3E:AD:95:79:0E:F4:0E:1F","sha256":"60:81:D0:48:50:95:F0:03:72:31:44:8F:49:D4:9C:DF:97:92:1D:9E:33:65:C4:9E:89:86:01:7C:B6:E2:D2:E6"}}},"request":{"raw":"HEAD /embed/stream-34.php HTTP/1.1\r\nHost: thedaddy.dad\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/embed/stream-34.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBBC6PeNT%2Ff5oRcUdA4PIFGR8pmSyuwt%2Fpr%2FkXFgA5%2FhcgZwN18FbT0y4jIYDJGJbpX45RgqNrH4bIKiS2BNANY9ZFxvfdwk1QA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 96b5fb3f29b25689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.dad","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jxoplay.xyz/blast.js","fqdn":"jxoplay.xyz","domain":"jxoplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jxoplay.xyz","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Fri, 13 Jun 2025 14:55:50 GMT","end":"Thu, 11 Sep 2025 15:04:28 GMT"},"fingerprint":{"sha1":"42:A2:EA:51:2D:C2:5A:EC:8F:13:88:7E:3A:F9:28:E5:A2:AB:82:B7","sha256":"96:D7:C0:C1:10:18:46:92:6E:DD:A8:D3:17:81:07:FF:3E:0B:F3:2D:B9:A9:5E:A7:AD:C7:33:20:BF:1C:33:C3"}}},"request":{"raw":"GET /blast.js HTTP/1.1\r\nHost: jxoplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/premiumtv/daddyhd.php?id=34\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 17 Oct 2024 06:47:40 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZJr4q%2BbfabMnfUQ6v8fDheYhPnCBXk8AboRvDqs0p515B%2FiuosG8aXwUh0Y%2B0DrCd8PqyFLtNQAhJIbWeLk1XTeBUnu9J2ufw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 519\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6710b30c-13040\"\r\ncf-ray: 96b5fb468f9fb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"091faec928970e76d37a3601c19fcf8a","sha1":"6441e8eebe90eb8d4a40e7c25440ff99caba3520","sha256":"eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12","sha512":"0065b4e5167b85abb85d4af6be22853d1ea16e9c0d5420173f356dd7a980374487405d8561a4a5df32dd68d2956af6c7a3f099776994e2cf6a3b0eb8df1c3277","ssdeep":"1536:HnyiwA6dLK4I7T8IVCJ0Xiyu/lpvd7TN8+Prp2s:HnyiwFLzI7AeSymrpTNZrpN","tlshash":"16732ec177d5bc8212872b77731bb1e6e82a9dd87188488ef104bc90f4bda12fae4575","first_seen":"2023-03-08T14:53:38Z","last_seen":"2026-04-18T05:20:15.507231Z","times_seen":1589,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top2new.newkso.ru/auth.php?channel_id=premium34\u0026ts=1754561397\u0026rnd=bd14a960\u0026sig=6bdc530b1704a6b2455356de914a4e3b28af4fa45c67eb28c87a7f785ed472e9","fqdn":"top2new.newkso.ru","domain":"newkso.ru","tld":"ru"},"ip":{"addr":"104.21.45.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"newkso.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 18:51:43 GMT","end":"Sun, 26 Oct 2025 19:50:12 GMT"},"fingerprint":{"sha1":"BE:74:F8:FF:C2:47:12:00:62:97:4B:7D:42:B6:95:3D:7D:AB:EC:FA","sha256":"E0:1B:17:B0:50:FC:21:55:8B:FF:B9:F8:DB:57:2F:25:48:77:E5:12:58:4C:CB:BC:34:FA:5A:05:BC:C2:BA:D7"}}},"request":{"raw":"GET /auth.php?channel_id=premium34\u0026ts=1754561397\u0026rnd=bd14a960\u0026sig=6bdc530b1704a6b2455356de914a4e3b28af4fa45c67eb28c87a7f785ed472e9 HTTP/1.1\r\nHost: top2new.newkso.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jxoplay.xyz/\r\nOrigin: https://jxoplay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\ncache-control: no-cache, no-store, must-revalidate\r\na-php-lb-cache: MISS\r\nx-lb-cache: MISS\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 07 Aug 2025 10:09:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5Z799%2BPs81HVjwlEbIiRsbeJABAaBlz9ibb6r1C7I%2FgMMjwh%2FKueIQnXtU2S5Y%2FdN0Jiqre5liCmXRJzJJWATMSZ%2FLymx9LJ6GVhdhMhlv0swmaeCKUshEPbCi0DcgPKGRB0WQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nno-cache: no-cache\r\nserver: cloudflare\r\ncf-ray: 96b5fb477de6b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=743\u0026min_rtt=469\u0026rtt_var=510\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3269\u0026recv_bytes=1300\u0026delivery_rate=5815261\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=9a417e3b6708782c\u0026ts=140\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-04-18T08:52:33.255631Z","times_seen":25210,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":76,"dns":50,"connect":1,"send":0,"wait":119,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nrqch0vqcblp.n4.adsco.re/","fqdn":"nrqch0vqcblp.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:54:44 GMT","end":"Thu, 16 Oct 2025 09:54:43 GMT"},"fingerprint":{"sha1":"E8:50:0E:37:80:04:3C:5C:59:CD:8C:24:F1:FE:D8:F1:FF:1A:B2:40","sha256":"28:14:77:1D:ED:49:07:14:6E:D8:8C:76:86:9D:DF:DC:03:EF:C8:93:12:71:33:5A:35:E5:1D:99:92:00:32:C6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: nrqch0vqcblp.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:10:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":343,"dns":126,"connect":88,"send":0,"wait":91,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.0011107531077610977","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:59 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//adsco.re/\u003e;rel=preconnect\r\nexpires: Sun, 07 Sep 2025 10:09:59 GMT\r\netag: W/\"C6pTuopbpe5oM6YpwwANTg==\"\r\ncf-cache-status: HIT\r\nage: 540118\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b5fb4c28c10b59-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78356,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (689)","md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 1492\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 07 Aug 2025 10:10:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://thedaddy.dad\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"8dad83fc7af0ee095533c360009c266a","sha1":"a8eb0043915e77d94b0fab31faffd8dda7985c86","sha256":"5262c27413b69fee2a24e5ffc80a17c2a7a28e826185673662ca2fbaefdbd449","sha512":"e3b242d7551a756f62f521f9de059e01be9aa188b781b104bd47128997384c345d633c0de76279cf100f959e8acbf747d0ca38cca1119c4dc0b33cfe5a26a74f","ssdeep":"","tlshash":"fc210a94c51843cd435d2da41c8895bcbe4d32c3b8a9883a7c9c33383238b290415523","first_seen":"2025-08-07T10:10:26.195638Z","last_seen":"2025-08-07T10:10:26.195638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":291,"dns":1,"connect":111,"send":0,"wait":143,"receive":1,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daddylive.mp/embed/stream-34.php","fqdn":"daddylive.mp","domain":"daddylive.mp","tld":"mp"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T10:09:56.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daddylive.mp","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 02:15:41 GMT","end":"Sun, 26 Oct 2025 03:14:16 GMT"},"fingerprint":{"sha1":"2F:45:76:8B:5A:96:C3:7E:04:BB:BF:28:62:F5:15:A7:E5:97:6F:DB","sha256":"F1:2E:D3:78:01:67:D0:11:97:6B:19:B2:F4:EA:1E:77:49:D6:85:CC:21:53:45:D4:26:57:4D:B6:E5:E1:33:76"}}},"request":{"raw":"GET /embed/stream-34.php HTTP/1.1\r\nHost: daddylive.mp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 07 Aug 2025 10:09:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://thedaddy.click/embed/stream-34.php\r\ncache-control: max-age=3600\r\nexpires: Thu, 07 Aug 2025 11:09:56 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kC2BpnQvlmU7neTfOlTjz0gPGi78L%2FDxQPvLtO5PHPFuk1qmwXjvh5Gw%2Btv7kYxoYXFYLggzs9vAjgnAz69z9mVy3uY2BG7EX%2FWIUO44y4IbLuupnOrsk0ZMic2ck7c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 96b5fb36af39712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfOrigin;dur=0,cfEdge;dur=60, cfL4;desc=\"?proto=TCP\u0026rtt=5869\u0026min_rtt=512\u0026rtt_var=10729\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3199\u0026recv_bytes=1137\u0026delivery_rate=6851735\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=f46c524bc5ed5d46\u0026ts=81\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308880,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":27,"dns":5,"connect":1,"send":0,"wait":63,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fjxoplay.xyz%2Fpremiumtv%2Fdaddyhd.php%3Fid%3D34\u0026j=https%3A%2F%2Fthedaddy.dad%2F","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Jul 2025 06:07:16 GMT","end":"Wed, 01 Oct 2025 07:06:51 GMT"},"fingerprint":{"sha1":"84:74:81:B9:DA:1E:0B:90:B3:A6:4C:78:8F:C5:C8:AA:3A:19:C6:C9","sha256":"17:8B:73:76:0E:85:B5:33:46:BE:3C:65:D2:5F:9C:C6:92:F3:99:F2:26:D4:3F:5C:43:2D:26:53:10:9C:B6:9E"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fjxoplay.xyz%2Fpremiumtv%2Fdaddyhd.php%3Fid%3D34\u0026j=https%3A%2F%2Fthedaddy.dad%2F HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl1\r\nx-t: 0.381\r\nexpires: Thu, 07 Aug 2025 10:09:58 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAXD2%2FyXTwHsScav1j84QiPP%2BRvkfMnzfO%2BKKB2u1viNSXQexf%2B7Nk0nMbDZICzyVmx51T0rKF4G5j%2F7XWvQYnSbkBBzPYewEKk%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: m=1; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=5000; Expires=Thu, 07 Aug 2025 11:33:19 GMT\ndf=1754561399; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Sat, 15 Nov 2025 10:09:59 GMT\r\ncf-ray: 96b5fb473bd80b3d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2079,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2077)","md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"0441a70bb5e9347813a2007a55ff235fb2324928ac1788c08196d804bc785faa1b6ea6","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":230,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.686Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"za.instrvinea.com/rItVnbE7Xeat/69521","fqdn":"za.instrvinea.com","domain":"instrvinea.com","tld":"com"},"ip":{"addr":"23.109.170.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"za.instrvinea.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Jul 2025 07:35:51 GMT","end":"Fri, 10 Oct 2025 07:35:50 GMT"},"fingerprint":{"sha1":"87:21:23:5C:26:98:30:64:94:BF:6E:54:EA:F4:9C:1A:78:A4:B9:8D","sha256":"86:F4:A3:BA:E3:23:DD:AF:45:20:28:1C:47:37:04:9D:89:D6:B8:93:5B:E1:92:70:F9:6D:6D:C4:D6:98:19:9B"}}},"request":{"raw":"GET /rItVnbE7Xeat/69521 HTTP/1.1\r\nHost: za.instrvinea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 Aug 2025 10:09:57 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://thedaddy.dad\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Fri, 08-Aug-2025 10:09:57 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Fri, 08-Aug-2025 10:09:57 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-18T08:37:41.531421Z","times_seen":15594,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":198,"dns":140,"connect":20,"send":0,"wait":23,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/interstitial.php?r=9830542\u0026srs=d49e01c817c9154f47a8a369e6c82a89\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fthedaddy.dad%2Fembed%2Fstream-34.php\u0026atv=64.2\u0026cbref=\u0026pblcz=6707202\u0026abtg=1\u0026adbv=3-cdn-js","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 11:57:50 GMT","end":"Wed, 10 Sep 2025 12:56:28 GMT"},"fingerprint":{"sha1":"33:F7:89:37:41:BF:FA:59:BF:98:36:E9:5A:74:20:54:A0:1D:C0:76","sha256":"D8:52:82:3E:D8:62:46:01:AB:38:D1:94:B8:B4:FB:CA:29:D0:EF:08:CA:1B:7A:15:A4:20:A0:C3:58:59:A4:9C"}}},"request":{"raw":"GET /script/interstitial.php?r=9830542\u0026srs=d49e01c817c9154f47a8a369e6c82a89\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fthedaddy.dad%2Fembed%2Fstream-34.php\u0026atv=64.2\u0026cbref=\u0026pblcz=6707202\u0026abtg=1\u0026adbv=3-cdn-js HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thedaddy.dad/\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnF0xQOldNHrn7Z43wUWEuAYYjy%2BDUpgwvjXsALgjbW82AM6DF1kPZANEwvunVicsgI6LZgulmX%2Bbt3H5yj5nE7ioPW92pR8MLVkqwoffu39\"}]}\r\ncf-ray: 96b5fb41092156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"301693b7e3738b499e1cdc3ff9148f21","sha1":"aaab0d1b00b1cee8eb58e2ad874418b8b945724f","sha256":"2dcd575129a09f299949d5becf0d1b141086df0eb65e55bdff0150b43973376a","sha512":"d83611822c48509d62dc378519aa3aa338acc8d9126a0c69ace0953c079239f52506dee6ccb7eca1335fc4cf8f577658f621ff05b20954dab5dee2164875abde","ssdeep":"","tlshash":"bf21e9dd7cbccc1d105972e5c80b399647962113ae08fc1571d9aec10abdd9891a94d3","first_seen":"2025-08-07T10:10:26.198134Z","last_seen":"2025-08-07T10:10:26.198134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\nage: 1391857\r\nx-served-by: cache-lga21931-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 278057\r\nx-timer: S1754561398.328297,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-18T08:23:22.792836Z","times_seen":451453,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":281,"dns":22,"connect":26,"send":0,"wait":54,"receive":2,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/21/Speaker_Icon.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 07:57:35 GMT","end":"Mon, 15 Sep 2025 07:57:34 GMT"},"fingerprint":{"sha1":"54:2F:E4:BE:E3:58:FD:4E:C1:90:B3:44:8E:41:6C:8C:12:0C:1B:D6","sha256":"4F:57:E1:90:0D:8B:1B:E9:2F:27:10:DE:61:15:05:12:8E:E7:F1:1C:FA:B9:51:6F:A4:10:F6:39:C1:9E:C0:63"}}},"request":{"raw":"GET /wikipedia/commons/2/21/Speaker_Icon.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 12:11:12 GMT\r\nserver: ATS/9.2.11\r\netag: W/1e965f9ca6bac55c4bfece8dabe6fa47\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: rcosig5pk1fefnugtbiewl19zhtt86j\r\nlast-modified: Wed, 28 Aug 2019 18:11:18 GMT\r\ncontent-encoding: gzip\r\nage: 79125\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/16928\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=cM2vwg1yJ_qeVBBzvGs4XwJIAAAAAFvd1MQKPV5XjiJE8RhSJQ3JnoVGYu_F_59d;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 07 Aug 2026 00:00:00 GMT\r\ncontent-length: 328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":514,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e965f9ca6bac55c4bfece8dabe6fa47","sha1":"ea28e0f6d1a42bd7f2ab416bcf2a9fd0dde55fab","sha256":"70e589ae4b79586ddd4eadd1ac8b501d64ab0433c2038c92e945fbb6195ad7a9","sha512":"ac5cba3ff4bd990c24695203c88c8b444051059398c8d7b53c8dd87bbe4d2693000a2b2e502bcfc0dee7b745b01a580c9dba3cf362337003626f9e18394fed75","ssdeep":"","tlshash":"53f0591d83865c3ea0628b148750f90963bb5552a672f394cebd1b7325171d450bbaec","first_seen":"2024-06-21T01:55:05Z","last_seen":"2026-04-14T01:02:46.187714Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":61,"dns":3,"connect":17,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.684Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xadsmart.com/rtxipdqcezmbsk?MbZvFAdW=BQNyAAAAAAAACZUAAm0-fqB8IGso5RvAcNeIN5fwSZuUETLAv8XFuLmcqmRBYor10umyEnaNOhTM7cxnWfD5vQ085JIobbZCmj8pwG_k_6j-_kqFbBZhYMZZWHyai1oGO-elmAB5jJBavIki9D5sCu1XsKUh7n2aoZQ3wFel16JYb-Y9eRmjsj7keKjxyRsS5PHIqlAnJ9aUuXK2A6QFy0LkftJ0DyexbHtVH3ketprQsqMycl8jyYyQW4MOGq-fQ7wJC9zXikJ1MOewibgKak-Np-O_LnVT2aT2mp0pwEeQ_eASCOgZkuBU1KTCAq2X0LeCAk5mn_lm5TTrSFIo1xYB7K2l-NpiVs1r6UEgspv_qJ-aJicvay0kVPd973U646XFzPRaWbp-jqTft0JDEYAdaWKHCkut2KPFlhqThE7FKmxVHgkKdlzK_baaKKPHc-j4QUPocHgkKzYb_3kTDA90zJiEG7kS9qaRucMzclbCe3nCmKBubShMQ7rnW4bnX23AFRhwE1j2xey6Jj4ndXBF2hsX4AOwGby0hZUf3_2PFa8SZo1c0rnwVW_4VStb0apcjJohFn4Ub8sGjFLvEfxc3BfFvWuqEZ5zhMNp6Vi6c-VGmbq-jxkbG_wIwB14EXOmmzLRdklA-5qcFgLWtcpeAsHMH2brdCkpNMSyNHKCNuITFSVzQAcI9p2916ABP8AGyXT6bww1xyfglMKOrVFdpT07NM0y6GPTBgSSRrd9Lib09j9h22zOK6D5BthQfhYFArxoVl1n3Ly5OH-HyjWMlwrNk5aaVU1LgJOxcFmBXgqrGuJpBY7sydA6wT58VM2Ns01NMJ_xj613n4IUUsGaX_26ST2_z4t6nGX9edDsYUE1qbRaksN8LADFII7s_pZ2rFfMT9UoXRCNjy-y_rc9axTVLuVMLGMjh2WIN3aH7bPg4B0B8TS13hFfnEt2D9cV3g9gIKCZ9gY9SiYEy5q7VdrLyEMoasSA68N3RuGnZPyKqez2XKNihQmX6ka1Ft7MPD0F6iZLM0TP5jKeItRSUZXBXrkTiVOTBkTwxRLPezNUUyMF-_dDo1CAP19RBc0vvq9J4SDa38rPafD-fRDfC5STJ7e5uYWe8issc7XItlkaAVC98Tzvl0O3xeLHxqMV7Ix2bl3H5CR9O5_hkrXnXnCEXrBSfoPEazE\u0026UfRyFGHa=4\u0026UfydGhWv=5224973\u0026JWmHhuEg=\u0026wxmvHQsT=0,0\u0026pVJazgnh=\u0026lzQiFqIY=\u0026buqGyajB=1280,1024,1,1280,1024,0","fqdn":"xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:10:00.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xadsmart.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:60:97:0C:DC:E6:0F:0D:1B:04:5B:46:03:77:64:46:88:C5:CF:87","sha256":"14:CD:91:C4:51:65:3A:E9:F5:6D:CB:BF:EF:86:31:A9:7F:DD:F9:17:57:48:89:78:CE:C4:29:EA:76:4F:04:DB"}}},"request":{"raw":"GET /rtxipdqcezmbsk?MbZvFAdW=BQNyAAAAAAAACZUAAm0-fqB8IGso5RvAcNeIN5fwSZuUETLAv8XFuLmcqmRBYor10umyEnaNOhTM7cxnWfD5vQ085JIobbZCmj8pwG_k_6j-_kqFbBZhYMZZWHyai1oGO-elmAB5jJBavIki9D5sCu1XsKUh7n2aoZQ3wFel16JYb-Y9eRmjsj7keKjxyRsS5PHIqlAnJ9aUuXK2A6QFy0LkftJ0DyexbHtVH3ketprQsqMycl8jyYyQW4MOGq-fQ7wJC9zXikJ1MOewibgKak-Np-O_LnVT2aT2mp0pwEeQ_eASCOgZkuBU1KTCAq2X0LeCAk5mn_lm5TTrSFIo1xYB7K2l-NpiVs1r6UEgspv_qJ-aJicvay0kVPd973U646XFzPRaWbp-jqTft0JDEYAdaWKHCkut2KPFlhqThE7FKmxVHgkKdlzK_baaKKPHc-j4QUPocHgkKzYb_3kTDA90zJiEG7kS9qaRucMzclbCe3nCmKBubShMQ7rnW4bnX23AFRhwE1j2xey6Jj4ndXBF2hsX4AOwGby0hZUf3_2PFa8SZo1c0rnwVW_4VStb0apcjJohFn4Ub8sGjFLvEfxc3BfFvWuqEZ5zhMNp6Vi6c-VGmbq-jxkbG_wIwB14EXOmmzLRdklA-5qcFgLWtcpeAsHMH2brdCkpNMSyNHKCNuITFSVzQAcI9p2916ABP8AGyXT6bww1xyfglMKOrVFdpT07NM0y6GPTBgSSRrd9Lib09j9h22zOK6D5BthQfhYFArxoVl1n3Ly5OH-HyjWMlwrNk5aaVU1LgJOxcFmBXgqrGuJpBY7sydA6wT58VM2Ns01NMJ_xj613n4IUUsGaX_26ST2_z4t6nGX9edDsYUE1qbRaksN8LADFII7s_pZ2rFfMT9UoXRCNjy-y_rc9axTVLuVMLGMjh2WIN3aH7bPg4B0B8TS13hFfnEt2D9cV3g9gIKCZ9gY9SiYEy5q7VdrLyEMoasSA68N3RuGnZPyKqez2XKNihQmX6ka1Ft7MPD0F6iZLM0TP5jKeItRSUZXBXrkTiVOTBkTwxRLPezNUUyMF-_dDo1CAP19RBc0vvq9J4SDa38rPafD-fRDfC5STJ7e5uYWe8issc7XItlkaAVC98Tzvl0O3xeLHxqMV7Ix2bl3H5CR9O5_hkrXnXnCEXrBSfoPEazE\u0026UfRyFGHa=4\u0026UfydGhWv=5224973\u0026JWmHhuEg=\u0026wxmvHQsT=0,0\u0026pVJazgnh=\u0026lzQiFqIY=\u0026buqGyajB=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: xadsmart.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Thu, 07 Aug 2025 10:10:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-18T08:36:10.110544Z","times_seen":23410,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":228,"dns":0,"connect":62,"send":0,"wait":164,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlhd.click/embed/stream-34.php","fqdn":"dlhd.click","domain":"dlhd.click","tld":"click"},"ip":{"addr":"104.21.81.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T10:09:56.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dlhd.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Jul 2025 12:24:49 GMT","end":"Sun, 19 Oct 2025 13:23:22 GMT"},"fingerprint":{"sha1":"6D:DE:FF:92:D1:8A:70:F8:1B:58:A2:E6:E5:B8:53:69:7D:CF:43:25","sha256":"B2:3C:7F:F4:20:8F:7C:2E:C3:FE:D3:DE:96:66:AC:CD:57:3E:C3:1B:F4:5B:31:0C:EA:2E:05:3B:D3:DD:8D:05"}}},"request":{"raw":"GET /embed/stream-34.php HTTP/1.1\r\nHost: dlhd.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 07 Aug 2025 10:09:56 GMT\r\nlocation: https://thedaddy.dad/embed/stream-34.php\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKjoe1AzQYgykt3h1ulgkIhWmGGfHPUuLxQaRGmihqQjTU2MHncYNhUp%2BcfYV0HDjtiSipX%2Bq%2FBrS1JmVpfp99REzU%2FaO%2FXp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b5fb37fdf8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308880,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"dlhd.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thedaddy.dad/embed/stream-34.php","fqdn":"thedaddy.dad","domain":"thedaddy.dad","tld":"dad"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T10:09:56.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thedaddy.dad","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 01:09:14 GMT","end":"Sat, 01 Nov 2025 02:07:39 GMT"},"fingerprint":{"sha1":"A8:85:66:EE:89:0E:AE:A4:E6:22:A8:BF:3E:AD:95:79:0E:F4:0E:1F","sha256":"60:81:D0:48:50:95:F0:03:72:31:44:8F:49:D4:9C:DF:97:92:1D:9E:33:65:C4:9E:89:86:01:7C:B6:E2:D2:E6"}}},"request":{"raw":"GET /embed/stream-34.php HTTP/1.1\r\nHost: thedaddy.dad\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmFzbY%2Fz7eqCOxlTwkAvD1GOagfurNjjQOTTzJHaGMdca9Q1%2FlDhnVIDn3c750TKi%2B2zjhhFp6LBJETEGVfUv6oesSutr6wpV7E%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96b5fb385cd17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308880,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48342), with LF, NEL line terminators","md5":"12fa752b75f5ee563252c03105d8f36c","sha1":"0a27a8b4bc75eb37b9348ea98accf79eff92dc67","sha256":"277eb18701fb604f3a95dfe74b8f11bc315f0beaf246f21c6b74bb6cfabda806","sha512":"302ce8e34dfc1b11e130ff538e2431fa6cd3624b7ff129287c00a6f6b5fe4f1fc29f135cd338cac267c279a69d9d3efb143977c45f8ee5246e5425f14681edaf","ssdeep":"6144:WBuROY39ijP85mjmn174k+pJVJCQcbQzQYjZtmUD09bKVugLeQC4wMp:WBuRv39ijk5mjK174k+zVncbQzQYjZtp","tlshash":"13644b493352b2a63bd150d55c3f6505e2365059780e8428f6ecc8e2a9afdce6237fbc","first_seen":"2025-08-07T10:10:26.201236Z","last_seen":"2025-08-07T10:10:26.201236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":51,"dns":25,"connect":1,"send":0,"wait":418,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"thedaddy.dad","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"139.45.197.106","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:57.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"madurird.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Jul 2025 05:31:00 GMT","end":"Mon, 06 Oct 2025 05:30:59 GMT"},"fingerprint":{"sha1":"09:91:C5:C7:5D:1D:EE:65:92:6D:A8:CB:EF:8C:E0:02:50:27:22:09","sha256":"86:B2:92:68:AC:3B:41:2C:A1:0B:F0:F6:31:0C:6C:D8:95:41:65:85:7B:32:CD:C1:F8:ED:B4:76:89:9C:81:58"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: madurird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 10:09:57 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 49515fff3b8e62c273c5a235f90fa689\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d053b0a115ef5528b92a92b79607afbe","sha1":"b815b2c0012fd7bc849e99056f7c0a26ac6d88f5","sha256":"b7eab6a205143527b2ea6d9932de8b9e91ad3e1d4ed72d842c6a701b3e21311b","sha512":"63cbfe324e8b5b81a0a00e25877ad3526b7d5f55cf45b194ded073ff0150179665eedd70d7e72832df2a729030c9ce8d079008abfd95bc65e60af5b4a66ee70c","ssdeep":"1536:4UM/KgNJvx03jeRROtYGqHCXKJzd7vN1fqkEGHxO8xQ1+y5+Ty:lM/qzeRROtYGXGZN1EGHxOIy5+Ty","tlshash":"eaa31958725774b16d668038745fc84d6febae90108e89e4d0e9acb33613074d3bbee9","first_seen":"2025-08-06T18:55:14.631547Z","last_seen":"2025-08-08T08:09:11.277685Z","times_seen":10,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":118,"dns":27,"connect":26,"send":0,"wait":56,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/c.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxoplay.xyz/premiumtv/daddyhd.php?id=34","date":"2025-08-07T10:09:58.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 14:12:03 GMT","end":"Fri, 19 Sep 2025 15:11:40 GMT"},"fingerprint":{"sha1":"83:0A:BB:EA:89:E1:09:05:05:D3:44:92:81:62:75:4B:35:61:DA:4D","sha256":"63:E9:65:78:32:23:DA:F9:C0:E5:6D:52:58:66:11:25:06:6D:3B:30:C0:C6:52:24:F0:1E:5C:10:89:A4:1F:F3"}}},"request":{"raw":"GET /c.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jxoplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:09:58 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 12 Jun 2025 10:31:56 GMT\r\netag: W/\"684aac9c-2f55\"\r\nexpires: Fri, 08 Aug 2025 09:33:46 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2171\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4wOwDSMZjHEfJYdSNC40dMJBOnzH1o1hNiyBMT7r1uPibxcr7OXb24L%2Fm25icK6MLixjtF%2FkVMspgUWSv6deNIumS9n\"}]}\r\nserver: cloudflare\r\ncf-ray: 96b5fb41ce2756c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12117,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12117), with no line terminators","md5":"7f167017c3edca98e152e2ad7e547032","sha1":"cbcbd0f11bd2f552cdd87cf1947fadc2b7371681","sha256":"52784de24aa1b312200cd6262ccecb5983c443290f1fe8d01790199be351b02d","sha512":"68c879651da562bb04d028bf0e4c5fcbfcbba27c7180fb3a0545dc6e6697b55aa1f422ab5fbfa557f6f1ab7107f0bcf3d12d1e4df2f15d209975b4da221cb33d","ssdeep":"192:lEpB4BQM5iClA7y1w65jqc4izncX9HVvW2kdjxWybsm8/29NBm2/MIGQKG+I8:lEpB4BQB9W1wC4bN1wdjxWybsm8/242o","tlshash":"8c424c55211b28b6a7ff50ea252f73057030543aaf4a905190a6c0bc36bde4f90ffeb6","first_seen":"2025-04-13T04:38:43.35501Z","last_seen":"2026-02-15T18:16:47.15295Z","times_seen":769,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":15,"dns":2,"connect":1,"send":0,"wait":14,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.687Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nrqch0vqcblp.s4.adsco.re/","fqdn":"nrqch0vqcblp.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://thedaddy.dad/embed/stream-34.php","date":"2025-08-07T10:09:59.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 09:54:45 GMT","end":"Thu, 16 Oct 2025 09:54:44 GMT"},"fingerprint":{"sha1":"83:C7:27:CC:F1:15:7A:E0:86:E4:6A:42:8E:8B:4B:D6:F0:81:BE:78","sha256":"27:48:A4:5B:60:63:6F:94:B9:90:BA:1D:D5:C4:1A:8D:62:BF:0C:DE:A0:7F:8D:B1:21:C4:4E:85:A6:3E:D6:33"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: nrqch0vqcblp.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://thedaddy.dad\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thedaddy.dad/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 10:10:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T08:22:59.538646Z","times_seen":13891178,"resource_available":true,"data":null}},"time_used":2753,"timings":{"blocked":1193,"dns":341,"connect":304,"send":0,"wait":309,"receive":0,"ssl":603},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}