{"report_id":"07b86e28-c10e-48a8-889a-3d126e6c208c","version":6,"status":"done","tags":[],"date":"2026-02-18T06:39:06Z","url":{"schema":"http","addr":"tokcnpocket.pro/","fqdn":"tokcnpocket.pro","domain":"tokcnpocket.pro","tld":"pro"},"ip":{"addr":"103.224.212.200","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"title":"Mamma.com Search - Trust Mamma to provide the best search results","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tokcnpocket.pro/","fqdn":"tokcnpocket.pro","domain":"tokcnpocket.pro","tld":"pro"},"ip":{"addr":"103.224.212.200","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T06:39:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":7}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-18T06:38:45Z","timestamp":1771396725,"ip_dst":{"addr":"Client IP","port":33354,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-18T06:38:45.032120+0000\",\"flow_id\":470429352610943,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"35.172.245.152\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":33354,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.sd559908.js.rsocdomains.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"52:B6:98:6D:01:6C:36:05:DE:97:BF:E1:AA:7D:D0:67\",\"fingerprint\":\"ea:71:3d:ec:fb:1b:e3:ce:69:f9:00:4f:34:6e:df:3a:95:11:14:5a\",\"sni\":\"obs.sd559908.js.rsocdomains.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-14T00:00:00\",\"notafter\":\"2026-04-14T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3934,\"start\":\"2026-02-18T06:38:44.740479+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"tokcnpocket.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-15T22:47:07.321489Z","alert_count":0,"request_count":3,"received_data":841278,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"expired.mamma.com","ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"1996-07-31","domain_rank":0,"first_seen":"2025-12-17T02:37:38.466476Z","last_seen":"2026-02-13T02:48:36.692143Z","alert_count":0,"request_count":22,"received_data":897539,"sent_data":25699,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2026-02-16T00:54:57.055729Z","alert_count":0,"request_count":2,"received_data":34546,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-02-15T22:26:20.2781Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":759,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-02-15T22:34:15.115252Z","alert_count":0,"request_count":2,"received_data":1682,"sent_data":2200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"172.217.21.162","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2026-02-15T23:12:54.138755Z","alert_count":0,"request_count":1,"received_data":11291,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-02-11T22:37:40.399181Z","alert_count":0,"request_count":2,"received_data":348399,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ob.sd559908.js.rsocdomains.com","ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.718439Z","last_seen":"2026-02-14T20:06:01.296485Z","alert_count":2,"request_count":1,"received_data":121247,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":3,"received_data":149361,"sent_data":1676,"comment":"","tags":null,"fingerprints":null},{"fqdn":"obs.sd559908.js.rsocdomains.com","ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.715008Z","last_seen":"2026-02-14T21:07:10.447836Z","alert_count":6,"request_count":3,"received_data":4491,"sent_data":7846,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":2,"received_data":789403,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tokcnpocket.pro","ip":{"addr":"103.224.212.200","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"2025-02-13","domain_rank":0,"first_seen":"2025-11-27T17:42:22.429777Z","last_seen":"2026-02-04T06:42:06.680919Z","alert_count":1,"request_count":1,"received_data":3037,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-15T22:26:20.540622Z","alert_count":0,"request_count":1,"received_data":131977,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dynadot.rsocdomains.com","ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2026-01-30T09:17:15.422663Z","last_seen":"2026-02-13T09:50:28.188472Z","alert_count":6,"request_count":3,"received_data":44617,"sent_data":1804,"comment":"","tags":null,"fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"t.contentsquare.net","ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-02-16","domain_rank":18964,"first_seen":"2017-11-15T12:53:17Z","last_seen":"2026-02-11T23:01:52.253081Z","alert_count":0,"request_count":2,"received_data":460980,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"527467a8c4df22c647a4d5f68da512aa","sha1":"926734b0db46083d1e76c4a4e63427d688920f7a","sha256":"62cfa49ac29539b3f7e60e25ecee463d240968a71e291022174c8647f8042e71","sha512":"57f38f44cae40924da22ac8693156316c3aae11cb0f78195cf1f77809d235c84c423a3152543dd81debe1aa5f1b36bd3e532a2045998cb15160a9a28e209bb2f","ssdeep":"6144:WuD8Qakv/kJlIxuJH8kr4eMe1aX1AVGcijVN6E2:ZwQt/JxwH8DA3ijv2","tlshash":"c96408cdb3d6702693a3a478403f118bb27b7992e84cc895f186d8d42d70a9a4277f7c","size":325946,"data":"","first_seen":"2026-02-18T06:36:11.389016Z","last_seen":"2026-02-18T06:39:12.202284Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-24T14:46:16.195886Z","times_seen":395118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T14:39:23.87835Z","times_seen":46101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f27d78b1f47d5e8a5dc7c9779ff2ad","sha1":"161da2ee6e76f34fa4a959efd540ad171f9c9c1d","sha256":"6753e44c8aa3b471a2811e81da9ba6f8fe3fa4c347adf6330230c2dc9717468e","sha512":"d52b4093d8d4f2bf73d85cc84552d204057518e28b90aeae6341107621e1220059baedb32964c6d701ee7cea8a8d938bbf83348ebbbb92f66bea53d0c605dcfe","ssdeep":"","tlshash":"33c02bccf08351ea30722030cb7308070831937b08c4c0413009027d1f72c07024bb0c","size":137,"data":"","first_seen":"2024-08-21T07:24:10.333614Z","last_seen":"2026-05-23T23:19:54.910286Z","times_seen":3381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62h0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"843dd33c85786f28bbd6d888aed48ca2","sha1":"3ab9885547146e489f88b33a039ed6185b188e0b","sha256":"33aec5647b3c60c8a15ce69370378fcef53e884ba825f39dd718cce7e7e1315b","sha512":"cf58cd7b5193b5f8c2dd10d29beda6ba5fd0541e4eb223ab857e49bf85cb9a8785012436a88988aabab14c4ba5d4cf2635f2b7554b508a8951c10cd8f2c252db","ssdeep":"6144:gSuD85/akvpSJlIxuJEn8krHeMe1aX1AVG2ijS+r1ZxNsAJ:6w5/tp/xwEn8EAnij13J","tlshash":"bda41ace73d674269296f078503f01cba57b25a2b45cc89af189cce42d74a9a4237f7c","size":462223,"data":"","first_seen":"2026-02-18T05:45:33.155321Z","last_seen":"2026-02-18T06:39:12.200671Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"74a5093be6bbe87a908f682177bf15de","sha1":"d9754c682a51e822aee182ff0140a10235de96fa","sha256":"cb6aadd914f2678081f70c362fea1b300001c9c4e66157a2afcd17aada37ed89","sha512":"4daaaebdc0e5b0f4b47320bb78a89e045680fddf6801658d1ae8729abf3cf4e93b9e5f053a94a0ce5e2d1bbc148cbf2da9cd3c69edc751662a2bd963b5f6f9c2","ssdeep":"","tlshash":"8e017b1a76f38110499be426573f3d0934bee5071509c8513c1e87cc8fa06d6a4226f5","size":793,"data":"","first_seen":"2026-02-18T06:39:12.219065Z","last_seen":"2026-02-18T06:39:12.219065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-07-24T15:16:14.402355Z","times_seen":17899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"095524960c604a56d83ef3aec2759337","sha1":"8f801c6871dbed52ea28965055c2f49f5637dba4","sha256":"c3d3843cffad4bb1ca570ccec9c9f4d51184e6237338f1972a53dd33d05f2d48","sha512":"ad5b53e34d47335d204c37ac28f7bde3e03994aa3b035067ac04be83302a06244734c794dabed5bd291343c87598959392e08c096358c867b4e5b0ac354d5e0b","ssdeep":"1536:o1dZrBd5jW9ZlypQL6AreKdC/4bU0J5Eg2WJAcGuzarKZUtXXSS697af9j0FkZf+:YGLb3s/4BJ1Ba/XCSblSRd","tlshash":"25d33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","size":131260,"data":"","first_seen":"2026-02-17T21:37:01.370602Z","last_seen":"2026-02-19T19:08:51.902241Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","size":19990,"data":"","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","size":518995,"data":"","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-07-22T10:12:37.035705Z","times_seen":3555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84dce395c2dd9bc2555fca96f6841c59","sha1":"f41fa65b38e69ce44cac952bab61ace42147fe96","sha256":"d2ac56393749741d2d89dc077e014fde683bbbdb7aa30e50fe0d4186b2291b35","sha512":"fe3206ee8a0e5568c885ec8ebf4d53ef1b69e264add9ee75f58eb8e837acd2c0d5e4e700061f8c3c68dbe3288ce39ebd6ef9df8df2600a330c15e0c75f51f9de","ssdeep":"1536:5wxeb5bdwL+pdFz9FSUsqLonHNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+JzUVP9ftrdruZ5QZ3fao8r0","tlshash":"85c3d6ddb2e27025439324a5157f410ae27b6e543c4b8294d17ee9d4ac7ce8e807bfac","size":120744,"data":"","first_seen":"2026-02-17T21:15:35.404311Z","last_seen":"2026-02-18T08:00:13.837297Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-24T14:46:16.180364Z","times_seen":395157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3Dtokcnpocket.pro\u0026sf=0\u0026tpi=\u0026ch=tokcnpocket.pro\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1771396724707\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=03620518888622708661718268205100155119610702851027770111269175628112220707096637208709891068\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDMzNjZdLFsiYWJuY2giLDEyXSxbMTIsIntcImN0eFwiOlwid2ViZ2xcIixcInZcIjpcIm1lc2FcIixcInJcIjpcImxsdm1waXBlXCIsXCJzbHZcIjpcIndlYmdsIGdsc2wgZXMgMS4wXCIsXCJndmVyXCI6XCJ3ZWJnbCAxLjBcIixcImd2ZW5cIjpcIm1vemlsbGFcIixcImJlblwiOjk3LFwid2dsXCI6MSxcImdyZW5cIjpcImxsdm1waXBlXCIsXCJzZWZcIjo0OTQxOTUwNDMsXCJzZWNcIjpcIlwifSJdLFstNywiLSJdLFstNDYsIjAiXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy03MSwiYTAxMDAxMDExMDAxMDAxMDEwMDAxMDEwMDExMDExMDAwMDAwMTAiXSxbLTksIi0iXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMjEsIi0iXSxbLTI1LCItIl0sWy0yNywiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbFpiRjBwZERBd0FBQWtCRjFOS0YwdEtWbHBkVmxSWVVGZEtGMXBXVkJaUUZnd0JEQWdCWEY4T1dsOWZDVm9CRFFvS1dBb01XQXBZRFZnSkQxaGFERjFkRjFOS0F3Z0RBUTRKQ1FzVkRnZ0FGazBYWEVGSlZrdE5TaFlGZVZGTlRVbEtBeFlXVmxzWFNsME1EQUFBQ1FFWFUwb1hTMHBXV2wxV1ZGaFFWMG9YV2xaVUZsQVdEQUVNQ0FGY1h3NWFYMThKV2dFTkNncFlDZ3hZQ2xnTldBa1BXRm9NWFYwWFUwb0RDQU1CRGdzSkNSVktYRTF0VUZSY1ZreE5HVkZZVjExVlhFc1REZ2dBRmswWFhFRkpWa3ROU2hZRmVWRk5UVWxLQXhZV1Zsc1hTbDBNREFBQUNRRVhVMG9YUzBwV1dsMVdWRmhRVnc9PSJdLFstMTAsIi0iXSxbLTEzLCItIl0sWy0yLCI4LElzTjluR25XYkFZQUl4TmZRYU9xR0UwQ0ZBUXNjRzAwSW5oT2JZQkFLWVVPelFPNkVYMDIwSW1HTGN1NjJ1cmRQL2MyZDJwTm1WWkF3ZjMvLzh6NzlHckhhMVd1M09tWFBQdmUiXSxbLTM4LCJjLC0xLC0xLDcyMCwwLDEsMCwxLDMyMCwxNTcsLTEsMCwsLDE4MjYsMTgyNSJdLFstNDUsIjc1MiwwLDAsNzE5LDAsMCw3NjEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCJdLFstNTAsIi0iXSxbLTUxLCItIl0sWy01NSwiMCJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy03NSwiKGludGVybWVkaWF0ZSB2YWx1ZSkuc29tZUZ1bmMgaXMgbm90IGEgZnVuY3Rpb24iXSxbLTEyLCJcIjFcIiJdLFstMTQsIi0iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTIwLCItIl0sWy0yNCwiW10iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTU0LCJ7XCJoXCI6W1wiXzNcIixcIjI4NzI4OTkzMjBcIl0sXCJkXCI6W10sXCJiXCI6W10sXCJzXCI6MX0iXSxbLTU4LCItIl0sWy02MSwiLSJdLFstNzAsIi0iXSxbLTE2LCIwIl0sWy0zNSwiWzE3NzEzOTY3MjQ2NjIsMF0iXSxbLTUzLCIwMDEiXSxbLTU5LCItIl0sWy02MywiLSJdLFstNjgsIi0iXSxbLTY5LCJXaW4zMnx8fDQ4fC18LSJdLFstNzQsIi0iXSxbLTI2LCItIl0sWy0zMiwiMCJdLFstMzcsIi0iXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAwMDEwIl0sWy02MiwiNTgiXSxbLTcyLCJFeFU9Il0sWy0yMywiKyJdLFstMzMsIi0iXSxbLTQxLCItIl0sWy00MiwiODgzMzk5MDE2Il0sWy02NCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTI5LCItIl0sWy0zMSwiZmFsc2UiXSxbLTQ5LCItIl0sWy01MiwiLSJdLFstNjAsIi0iXSxbLTY2LCItIl0sWy02NywiLSJdLFstOCwiLSJdLFstNCwiLSJdLFstNSwiLSJdLFstNDAsIjM3Il0sWy00NCwiMCw1LDAsNSJdLFsiYm5jaCIsMjM1XSxbLTE1LCItIl0sWy0xNywiNDgiXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjQsbnVsbF0iXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy03MywiRWhRPSJdLFstNiwie1wid1wiOltcIjBcIixcIm9uQ2hlcVJlc3BvbnNlXCIsXCJoaWRlTG9hZGVyXCIsXCJOb3RpZnlQYWludEV2ZW50XCIsXCJfX2N0Y2dfY3RfOTMxMDZfZXhlY1wiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTM0LCItIl0sWy02NSwiLSJdLFsiZGRiIiwiMCw5LDAsMCwwLDMsMCwwLDEsMSwwLDAsMCwwLDAsMCwwLDAsMSwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDMsMCwwLDAsMCwwLDAsMSwzLDQ0LDAsMjIsMSwxLDAsMCwwLDEsMCwwLDAsMCwyLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwxLDAsMCwwLDAsMSJdLFsiY2IiLCIwLDAsMCwwLDAsMCwwLDAsMCwzLDAsMCwxMDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDUsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMywwLDAsMCwxLDAsMCwwLDAsMCJdXQ%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=plLzleyVHP\u0026pto=1921\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1771396724.D9IwJem1yngI7KIg\u0026suid=1.1771396724.s4Qkx19W2lceeApZ\u0026tuid=1.1771396724.PBwzw9yBIxegP1ec\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C143\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58613b700e2ecf7d0e66ebb9d75fe4b8","sha1":"801d845209c22a27bc643df1ce0bc5e01afc83eb","sha256":"9f26dfb06ced9803c60991e117ed9afd745a43a0f4a6549d50ee56dadd7f589c","sha512":"6f8213b42d6797be1126596e9d60e169c5d0f862cb02bc2113a83c55489b1092a44dcd661374fc89990b73a7b3802a61fd8a9abaf6c0295e9bd6086fe52cc198","ssdeep":"","tlshash":"3d610a312a1a58344a6b9bf3f70184cf2397bb39c2ce590b165b76570cb7766ee20801","size":3463,"data":"","first_seen":"2026-02-18T06:39:12.198295Z","last_seen":"2026-02-18T06:39:12.198295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","size":1155,"data":"","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-05-23T23:19:54.899519Z","times_seen":3366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf1a0b319850914ec37db3662478aac8","sha1":"a01a3bd40e2b408259650ede8440f7250edfd635","sha256":"66e579dfdcb2d80a606bec2549a0b9bd17ea9dc3e44bcb4fa7902381ee723eb2","sha512":"7f9f089679a0ecb8a1e0323c879baedef1f5fb33ca073f58d4ce49eeaa9a623978b68c300f3b992fad938db4d4b18f7638d2a005aaeab64ba9c2137079089b74","ssdeep":"","tlshash":"56e0c0eb74164872629f85b633b5a1257253290d78091c22fdfd8c246e58687481719c","size":358,"data":"","first_seen":"2025-09-28T06:57:47.637874Z","last_seen":"2026-05-23T23:19:54.918573Z","times_seen":3370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef3aba1b4bc47c8762640473305da4d","sha1":"08ac8203afc12c766f493b98b349a55011ae7159","sha256":"fdd7c4e21e372ea2d03f0569e6f64b2955924d919c9732e08b5bea3930b127aa","sha512":"cd0b287920f1d69ff11dc4f43a96a917a76e81f996bcae572231f56283fbaa22f96f8287b58cb77b4d63304c25768e0c28d3ee40200a8b6c5ba9b6fe3ba213c3","ssdeep":"6144:3X4rpu90YWRuKRHJj+p7RO4gGj5AFsvgq0p6jUAid:3X4E9el47aPcggid","tlshash":"6da41ad973a6b0b647e9c1ead0360102b33974a97409003cf1adecfb35a5d4662f6b79","size":457108,"data":"","first_seen":"2026-02-15T10:20:40.39011Z","last_seen":"2026-02-18T09:39:00.188974Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-07-24T14:46:16.185671Z","times_seen":425729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-24T14:46:16.195287Z","times_seen":395166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0bb74b0b25b907f0209e865e6b5d8d4","sha1":"bdb2dcf8c447197fa53c0b075141126eeb1a89b6","sha256":"27d6832829b065f873b4f2268ed68e65bbf91b4c77b9fd015f4ec1f7f6990fce","sha512":"00b9d36b0bc4d8623f07907b1e409cc83cdf689195a19ce3999f67bae1b3dfac2118a1123649a73cd5e7502650e9ba44ab23877e66cbac26173edf18b24daf2a","ssdeep":"","tlshash":"63113a2fb4e1207741ab29f5b39b864d3b69890754c685323aacc70d6fa755008f3afc","size":1013,"data":"","first_seen":"2025-07-02T03:33:37.463951Z","last_seen":"2026-05-23T23:19:54.923029Z","times_seen":3358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-24T14:55:46.937901Z","times_seen":24996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-07-23T01:39:44.874962Z","times_seen":27518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nage: 4912881\r\nx-served-by: cache-lga21929-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 30446\r\nx-timer: S1771396726.325993,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-07-24T15:16:14.402355Z","times_seen":17899,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":76,"dns":17,"connect":26,"send":0,"wait":40,"receive":3,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/fiverr.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/fiverr.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"8b8-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 2232\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d7c86e0082be875ab9e502d8f63a560a","sha1":"7465b9a5a77881507eeb6356b5f4c04ea4921093","sha256":"dbab65716f1d5e9dc9ce6a17614ad1e015be9b49a23d78f48a042a9d2e5b5dc0","sha512":"311b5ffb7eeb21c8494a1fe91da9c8c735d247663a9b303aa0975d1cc70c2743716d16866fd3e21e51b7aab9177b6b0d9599cfa72540586ae446084bb790afc7","ssdeep":"","tlshash":"e3413a86b6441918e5a2c77417a8f87075eb199dd07099e73bca08a6314ee2a70163dd","first_seen":"2025-07-02T03:33:37.459148Z","last_seen":"2026-05-23T23:19:54.88022Z","times_seen":3308,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/321-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/321-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"9f64-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 40804\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a1e62a109f4b95b599b96da0d04e0b","sha1":"7d5230d9e41a82dab1e5cd32f2c6894619d9c9bb","sha256":"74a8bb8966d37e73bdc9ece150de372b27f48130fcded4a309a7ccc33d5d4b41","sha512":"74620c60aa1e2becee3cf5b7b288daed4f69a8d8448da7756e11ec7b4e017db5d9f0f0a51c49b267cde974cf5af87e9fe95486195c61aa98d03de4fa42336ed0","ssdeep":"768:yIIUiReHQ4ooUsxPobEF2/liXZjQim9qC4+T2w+tE+MQrFPNVY/:dqc1hPobEAEkJy+CnC+XrNw/","tlshash":"8503e170513f6d8ec459843c5d95136250ecfa9abf702eb6a00ab0ca6d6b05f2773b1e","first_seen":"2025-09-28T06:57:47.543146Z","last_seen":"2026-03-04T08:57:10.893455Z","times_seen":3076,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/music-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/music-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Wed, 17 Dec 2025 09:42:07 GMT\r\netag: \"487a-64622a85534d9\"\r\naccept-ranges: bytes\r\ncontent-length: 18554\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4aa7aca4d11ccf6561a2c495bee3dabc","sha1":"e1e8ebaed23d62a59f024b2cfab2f9d37d28c3f0","sha256":"5ca12a75440fc12401421f3635237fd59aded8d5a901295e75670753f810941e","sha512":"04101d2329b761ac21936f7563e83e226730c3a4526a932fceb13a28fd98f094e2fca5b914a0ec569334f86cfb0afbcb20b17fbe5ba75ee2cb2291ce79f21e95","ssdeep":"384:Vwg4ZSCQHrnJBXkXu2ozsCgmqs+90thUL8F7XZDIthLsl8AZqkdUvV:KgaSCQHrnHmTJsUs7Jcwl8IqkdWV","tlshash":"0282e1bca3e7ce02e83855fc859e7b9d510ef256ae7c404d3298722291090ee21674dd","first_seen":"2025-12-17T10:34:42.032489Z","last_seen":"2026-03-04T08:57:10.912727Z","times_seen":2995,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:33:12 GMT\r\nexpires: Sat, 13 Feb 2027 06:33:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nage: 432335\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-07-24T15:13:29.361409Z","times_seen":53467,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=CAes39TSRKKoj0KS/L82xg==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.21.162","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:48.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=CAes39TSRKKoj0KS/L82xg==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Wed, 18 Feb 2026 06:38:48 GMT\r\nserver: cafe\r\ncontent-length: 8116\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10734,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"53fffb54ecf2b0b3921fe98615a6cd1e","sha1":"2112982b61b22bd95aca2542734327daff577947","sha256":"254dc0342f8196e118133bfa239edd91f202ece93e0e003777f4daf0dd02fd35","sha512":"799692dc92d84267a54fa3dbca6fbcfece7005747c88e74c50361db7c4d68bee6c7fc37da06875e7144782907ae9bd928330a893a6ffc2b18fb1695423cbbf9b","ssdeep":"192:Tjy4svkYQzBHgr+0M7XhBVrIRoPceCf91rVADfmyKns+mhW8pehQjD2te5m7mhD/:q4akYP+0M7XhBGeCf91S+dnsk8pP2t/o","tlshash":"7822bf2d4f65b835045378b3d63893c22e3a7c9fda0299c6f8e54dc69d326ee0e415b8","first_seen":"2026-02-18T06:39:12.195501Z","last_seen":"2026-02-18T06:39:12.195501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":54,"dns":1,"connect":8,"send":0,"wait":25,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:48.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7188\r\ndate: Wed, 18 Feb 2026 06:38:48 GMT\r\nexpires: Wed, 18 Feb 2026 06:38:48 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1747411493688989\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19990,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":63,"dns":1,"connect":20,"send":0,"wait":30,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:48.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /sodar/sodar2/237/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 06:22:52 GMT\r\nexpires: Wed, 18 Feb 2026 07:12:52 GMT\r\ncache-control: public, max-age=3000\r\nage: 956\r\nlast-modified: Tue, 13 May 2025 23:17:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2024)","md5":"0120a1d624ff8fc3ec792d93a7133947","sha1":"1e3bd23df78ff2c60b187b40a0c6505be9ab889f","sha256":"14b660a511e14a9a481c6fe43c576f36c61b656cfd379728c54f1128e1855966","sha512":"84286e299ebc6690ee904b5581cd6aaf6b59d06200b61156923301484d1b75fa517894167c4f4777553ba09c840a2d74a723e3ff112448f00514d910dfd172c5","ssdeep":"192:pl/6xS2OASROqI3wgh5MXDc9EAOaK3qzfaGDCiMgIcTa1mx:rz2NQJIVsTiMH3qzfcOIr1mx","tlshash":"4842a7ccbad2b0210353b4f1a13f400ff13ea8aae44c9954b181e8e17cb56a94667f7d","first_seen":"2025-05-19T23:59:48.478548Z","last_seen":"2026-02-26T18:27:55.136579Z","times_seen":169945,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Thu, 22 May 2025 08:13:45 GMT\r\netag: \"483-635b50f75e040\"\r\naccept-ranges: bytes\r\ncontent-length: 1155\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-05-23T23:19:54.899519Z","times_seen":3366,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/paramountplus.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/paramountplus.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"1e076-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 122998\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":122998,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 950 x 950, 8-bit/color RGBA, non-interlaced","md5":"56258cd30601041a360e3a721edb7129","sha1":"2f29d7342998911bdd6f8ca58484548e6d363b32","sha256":"1c13d46b591e6846eaeea09d1d505bb2ac264f4edddca3f4eda06024277750be","sha512":"b7497db239188cfb2e2b32ff81135eb8fdf55d1568dcaec92c7084580795d69ca7aac6f139fa4c33ee416d249a984d146c38c37de58a156790cacbf08efa9b78","ssdeep":"3072:bIJbnu1qWtyhu83Aa2t9pWsjkMVnPq3ny8o6DC+mMH4486XGZNQJVEF0:ccquTR9/j5nGo6DsMfnQGJV7","tlshash":"83c31282a9c25e20d27f727e65cb58498393ce25b367b6b835896512fc1dfc8383413b","first_seen":"2025-07-02T03:33:37.428722Z","last_seen":"2026-05-23T23:19:54.849275Z","times_seen":3313,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3Dtokcnpocket.pro\u0026sf=0\u0026tpi=\u0026ch=tokcnpocket.pro\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1771396724707\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=03620518888622708661718268205100155119610702851027770111269175628112220707096637208709891068\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=plLzleyVHP\u0026pto=1921\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1771396724.D9IwJem1yngI7KIg\u0026suid=1.1771396724.s4Qkx19W2lceeApZ\u0026tuid=1.1771396724.PBwzw9yBIxegP1ec\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C143\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","date":"2026-02-18T06:38:44.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /ct?id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3Dtokcnpocket.pro\u0026sf=0\u0026tpi=\u0026ch=tokcnpocket.pro\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1771396724707\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=03620518888622708661718268205100155119610702851027770111269175628112220707096637208709891068\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=plLzleyVHP\u0026pto=1921\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1771396724.D9IwJem1yngI7KIg\u0026suid=1.1771396724.s4Qkx19W2lceeApZ\u0026tuid=1.1771396724.PBwzw9yBIxegP1ec\u0026fbc=-\u0026gtm=-\u0026it=3%2C1459%2C143\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=1.1771396724.D9IwJem1yngI7KIg; _cq_suid=1.1771396724.s4Qkx19W2lceeApZ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Wed, 18 Feb 2026 06:38:45 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=79da412cc064b8695d6f90e93a75d3f6; Max-Age=29030400; Path=/; Expires=Wed, 20 Jan 2027 06:38:45 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-length: 1191\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3463,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3463), with no line terminators","md5":"58613b700e2ecf7d0e66ebb9d75fe4b8","sha1":"801d845209c22a27bc643df1ce0bc5e01afc83eb","sha256":"9f26dfb06ced9803c60991e117ed9afd745a43a0f4a6549d50ee56dadd7f589c","sha512":"6f8213b42d6797be1126596e9d60e169c5d0f862cb02bc2113a83c55489b1092a44dcd661374fc89990b73a7b3802a61fd8a9abaf6c0295e9bd6086fe52cc198","ssdeep":"","tlshash":"3d610a312a1a58344a6b9bf3f70184cf2397bb39c2ce590b165b76570cb7766ee20801","first_seen":"2026-02-18T06:39:12.198295Z","last_seen":"2026-02-18T06:39:12.198295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":319,"dns":27,"connect":95,"send":0,"wait":133,"receive":1,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/234-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/234-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"b22c-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 45612\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":45612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0fa1e2cd3198ac909b31aed1d8842ad7","sha1":"4a0a7e3bac645fe7b71a266f29229cdb5c1a4316","sha256":"14ec2e784f6a04f738f7c7370533d7a9ccf9db899e9d47f39674baff93c9dcb4","sha512":"020dd7e64c52a49a0190c80f3d1aab3321a9d64ddb2b3617cc93cdb8239e02f54f254fdbce2694728aae6635d83eeb5e434aedcbfce73aa01667edc82835da20","ssdeep":"768:9YcqhZs9788c1RNz79A27BP1NmZFCxEvRlTwsCx0rHkYLaAWiPMW:YZs9Iz9P22lP31AbTwtx0bkY1","tlshash":"c12302491b89799ddd0675f348d303741e9c38fe6471f224bb646207b6f1ac9798b243","first_seen":"2025-09-28T06:57:47.6212Z","last_seen":"2026-03-04T08:57:10.90871Z","times_seen":3082,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/678-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/678-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"7fd4-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 32724\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11a821d91db99dd8a9f1d32c748b000d","sha1":"3a5370bb5c5e92cd43bbba2075ea2c33c3a20ef2","sha256":"a323e837951b2cecc330804cd34ce9aea859a3fc183a02581f6e1ff6cb9d5233","sha512":"80018ecfb520673cbbd5b7ec3cce7e470e6fac92be18eb22225f370b8c55062310c8d0de06573af0fd00bc46c35ebd1bbb3a16259c80de088a50a5159d94032a","ssdeep":"384:dw+jiZMS52RiBqFQMUu/1Z1/DqwhwC8xTH85QSvDjTfT69ZbCtfCP7lqkTnP9VDy:iZMDk2HF/H5YTc2SfW9ZbaaMST0MK15X","tlshash":"f3e2e176f3a12369fe558b743e8c483042e2ce3a6dd0381db71a42594de844dadaec78","first_seen":"2025-09-28T06:57:47.504222Z","last_seen":"2026-03-04T08:57:10.925009Z","times_seen":2973,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/panda-law-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/panda-law-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Tue, 23 Dec 2025 04:28:18 GMT\r\netag: \"13d8-64696f914e1d1\"\r\naccept-ranges: bytes\r\ncontent-length: 5080\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec064536e0578bd642a1665c97852bd6","sha1":"d64828283d007e79e3efac25fc4f1e2c5edc89c0","sha256":"bdbefb53a9e974dbedbce9b54c6a910e1beb214a6147d92ccedf3dc7fc5f89e0","sha512":"e9e0801687b429067636b0424c97be934030d7ac7ba6c6643253855557e03d81c9799a3f0cb77ea344a4d6c3ab8d29258891f15395f3a47378090afcf89e1d82","ssdeep":"96:ZElbw+iRmYQds+19i+qxfWSAbaglSkncehxae1WL0sUulil8z:0wF3+HqKaXkcez+L0sUuln","tlshash":"46a18e607f5a67ecf04228785066a35387491c370d69691c1e08086b36f84e634a83b5","first_seen":"2026-01-01T02:13:49.3117Z","last_seen":"2026-03-04T08:57:10.905428Z","times_seen":2927,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62h0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62h0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\nexpires: Wed, 18 Feb 2026 06:38:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 152558\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462223,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"843dd33c85786f28bbd6d888aed48ca2","sha1":"3ab9885547146e489f88b33a039ed6185b188e0b","sha256":"33aec5647b3c60c8a15ce69370378fcef53e884ba825f39dd718cce7e7e1315b","sha512":"cf58cd7b5193b5f8c2dd10d29beda6ba5fd0541e4eb223ab857e49bf85cb9a8785012436a88988aabab14c4ba5d4cf2635f2b7554b508a8951c10cd8f2c252db","ssdeep":"6144:gSuD85/akvpSJlIxuJEn8krHeMe1aX1AVG2ijS+r1ZxNsAJ:6w5/tp/xwEn8EAnij13J","tlshash":"bda41ace73d674269296f078503f01cba57b25a2b45cc89af189cce42d74a9a4237f7c","first_seen":"2026-02-18T05:45:33.155321Z","last_seen":"2026-02-18T06:39:12.200671Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/favicon.ico","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","date":"2026-02-18T06:38:44.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 0\r\ndate: Wed, 18 Feb 2026 06:38:43 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/132-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/132-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"b77a-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 46970\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":46970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bd63976804b547b59a7004dd8a86c24","sha1":"2cef9ad3434ce3fee08b716b86a77bfd60aac798","sha256":"e0cda1c7cb36dc4dbf7522d0a53a12da55ad7878d87615407455cbb2cf22c1cb","sha512":"e4ca0e9da8e5b383a8ac8012f0e1e3ce72472d31cfa59fd2fecf6debe1eb026089045fb88c18067f3fa25befe1f8b234b740c6a15010ae93773626aa93909474","ssdeep":"768:4ytQcc+oiCYHehD9yKpAL8GG1A48VOE5Ty0KmMDJlb1mKrJxm2IA:ZQccXDYHhIGGlEtlAjb1/rt","tlshash":"da230217331b8febe5b8a6ba88950b2561e02b76d04c3722d20a2c119dd7619cf1c4df","first_seen":"2025-09-28T06:57:47.517056Z","last_seen":"2026-03-04T08:57:10.888053Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-NKZMCM7F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\nexpires: Wed, 18 Feb 2026 06:38:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 18 Feb 2026 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 111898\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"527467a8c4df22c647a4d5f68da512aa","sha1":"926734b0db46083d1e76c4a4e63427d688920f7a","sha256":"62cfa49ac29539b3f7e60e25ecee463d240968a71e291022174c8647f8042e71","sha512":"57f38f44cae40924da22ac8693156316c3aae11cb0f78195cf1f77809d235c84c423a3152543dd81debe1aa5f1b36bd3e532a2045998cb15160a9a28e209bb2f","ssdeep":"6144:WuD8Qakv/kJlIxuJH8kr4eMe1aX1AVGcijVN6E2:ZwQt/JxwH8DA3ijv2","tlshash":"c96408cdb3d6702693a3a478403f118bb27b7992e84cc895f186d8d42d70a9a4277f7c","first_seen":"2026-02-18T06:36:11.389016Z","last_seen":"2026-02-18T06:39:12.202284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":89,"dns":4,"connect":26,"send":0,"wait":34,"receive":51,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/mon","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","date":"2026-02-18T06:38:46.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2569\r\nOrigin: https://dynadot.rsocdomains.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.041fdd7cb5fcfff37264ab51bf882af4; _cq_suid=1.1771396724.s4Qkx19W2lceeApZ; cg_uuid=79da412cc064b8695d6f90e93a75d3f6; _cq_pvid=4.c60a837b5c3b9f3b5167b3303ddc8bb8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2569,"data":"e=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\u0026cri=plLzleyVHP\u0026sf=0\u0026dc=Jy8rMyNUMyQkfiQzJCQzJFV4Y3p6MyRVIiMvMyRVJSIgJTMkVSQmIyczJFUkJCIhMyRVJy8jIjMkVSQkIiAzJFUnLyQkMyRVJjMkVSQuMyRVJCUuJjMkVSQlLiczI1IwJScrMyFUMyQkYTMkJDMlVychJDMkVTMkJH4zJCQzJVciJDMkVTMkJHRJMyQkMyVXIDMhUjAhJyszIVQzJCRlMyQkMyVXJjMkVTMkJHszJCQzJVcmMyRVMyQkYTMkJDMlVyYzJFUzJCR0STMkJDMlVyciMyFSMCciJyszIVQzJCRlMyQkMyVXJzMkVTMkJHRJMyQkMyVXJjMhUjAnIy8rMyFUMyQkcyYzJCQzJVczJCRgOHFzYlR3YmJzZG8zJCZ%2FZTMkJnh5YjMkJnczJCZwY3h1Yn95eDMkJDMkVTMkJHRJMyQkMyVXJjMhUjAlJCArMyNUMyFUMyQkdDMkJDMlVyYzJFUzJCRlMyQkMyVXMyQkJzMkJDMhUjMkVTMhVDMkJHQzJCQzJVcmMyRVMyQkZTMkJDMlVzMkJCczJCQzIVIzI1IwIyQmKzMhVDMkJGYzJCQzJVczJCRBf3glJDMkJDMkVTMkJHozJCQzJVczI1QzJCRzeDtDRTMkJDMkVTMkJHN4MyQkMyNSMyRVMyQkfnUzJCQzJVciLjMkVTMkJGN3cnMzJCQzJVczJCR1MyQmf2UzJCZ4eWIzJCZyc3B%2FeHNyMyQkMyRVMyQkdEkzJCQzJVcnJzMhUjAuISIrMyFUMyQkZTMkJDMlVyUzJFUzJCRjYGZ3MyQkMyVXJjMkVTMkJHRJMyQkMyVXJjMhUg%3D%3D\u0026ule=pagehide\u0026cp=unload\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=896\u0026mo=0\u0026pn=3303\u0026spn=2406\u0026fp=2407"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-type: application/json\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 06:38:46 GMT\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"fc4d1e8341532e72b100662c8d5cd00b","sha1":"9fb1cdb5aa0fbacb008b309cad0c3f15cb77aee3","sha256":"9d0d749d352bfe34562d871e060ad504c4c2e3f26fac903b7c64751eacab220e","sha512":"06a816f0e8acea46f483fdcdb92063c14a95397cbcf94b6df0fc1947de44d364b21f47021e7df34468ca1b4058128d0cc0d8cb36d1b12c21dfe4ac82da175494","ssdeep":"384:+bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5v7qY49Un1AnOPEgtHmN:kiCAgkgHL8OOnL3JbcI/z","tlshash":"57231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-18T17:37:33.475534Z","last_seen":"2026-07-23T17:37:17.869657Z","times_seen":3700,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":152,"dns":6,"connect":7,"send":0,"wait":21,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tokcnpocket.pro/","fqdn":"tokcnpocket.pro","domain":"tokcnpocket.pro","tld":"pro"},"ip":{"addr":"103.224.212.200","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T06:38:42.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quoteskills.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 16:32:47 GMT","end":"Thu, 14 May 2026 16:32:46 GMT"},"fingerprint":{"sha1":"65:9B:36:38:B7:FB:E7:FE:6C:77:CE:88:1D:9B:A5:3D:23:6C:81:C4","sha256":"C1:DE:A6:19:75:C3:FB:45:23:0E:79:32:5E:30:57:5A:80:51:B9:C6:D4:F8:6F:9C:65:AA:DD:1F:84:9C:01:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tokcnpocket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Wed, 18 Feb 2026 06:38:43 GMT\r\nserver: Apache\r\nset-cookie: __tad=1771396723.7401591; expires=Sat, 16 Feb 2036 06:38:43 GMT; Max-Age=315360000\r\nlocation: https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2719,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":1201,"timings":{"blocked":514,"dns":185,"connect":156,"send":0,"wait":173,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"tokcnpocket.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: n52Bf3LWRDaOcX+G2RPVwx8SEDZUCJ0AyfUgjGPvYVNyQUafB/LdFOPd3sfuEtvf+8L1+JbisB/iLAkorEypR6t9a9Lmjg9G\r\nx-amz-request-id: XZ1VFYBQX2EYTN8Q\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:12:47 GMT\r\netag: W/\"1dfe138ae594553bc5ddec1f1f1ef389\"\r\ncache-control: max-age=31556926\r\nage: 2426535\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9cfb86030fec0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":173842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"1dfe138ae594553bc5ddec1f1f1ef389","sha1":"7cc21d0873893a2ef4f9ad06962d8b32cb62d24d","sha256":"e7de3b4b49089f8cdd8267eda652f35806cb2b70f7c5cec0351f6d129263e52b","sha512":"95aa51536dd8c8075b1ce64b8424884e91d8f1718115295d2d9c4a9b5faccb1a7b5675f9a8a0db6a2c458fb5519cf47872247f01ea2c3616919449f20f5de6b9","ssdeep":"1536:mLv1E8SIklJ/ZHUADlnzZ+mqX5l5dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmh9:61E1Ik3/S2ln9+1vlbqMAXHP","tlshash":"e4046eb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-11T10:03:25Z","last_seen":"2026-07-22T19:49:58.763727Z","times_seen":3896,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":25,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-8941\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nage: 1204581\r\nx-served-by: cache-lga21941-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4098, 110\r\nx-timer: S1771396726.318721,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 8095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c7adb32928265c74cd2756b2e671e514","sha1":"29bd82afaa8d25afc01224193d02f917ab6ed244","sha256":"91f3e161d59796ce95f79439670ef5c752fa6c0d2100c5da5d037c400026dcd3","sha512":"2f7d90dd65dc3369a2ef5860bdde7a59c0f89756c5d736aa8cf803896e8027bdf365ebc967e33f1872ba37946fef65a6fa2fa9d36788364582ab8b3eb830d602","ssdeep":"192:70OW0NANbrj6ltnJbUetUQnSMfps3+emQY+h572hk/grQY5Y6BjSmMErEURHllPR:UrjUJo0W1eX3/PiF5fypDS25H","tlshash":"faf2ec316b432919ba1bd1a425a11bf7e32f1342ee1b6e7f64aa345cc3d54e080bf5b4","first_seen":"2024-08-16T22:22:29Z","last_seen":"2026-07-22T10:12:37.028193Z","times_seen":3586,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":69,"dns":18,"connect":13,"send":0,"wait":15,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/samsung.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/samsung.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"1ec6-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 7878\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"dce623707b3632f8e0b5d1b222e54f31","sha1":"917107118b9e2437a08d5d65b2944f2402af635c","sha256":"c59f8b204e7a80a9f7863b11393da254a801feaee3108d1afadef0431644c2a0","sha512":"9c9dd63cba86a8ca5a401b30d41a1e9b76a61c3005f50cc0a9d82823815e6c2b3ca2b538ac016d2ccb3e6b64e55979dd758adeaf4ac35ddf0814a0cff9ebe3bd","ssdeep":"192:se90ywTuMWvsb4Da/wK+jrVKBiMWhX5l0X+U:sN3uMWEbvwK+fkRWl5lFU","tlshash":"99f17df23f10ad0ac21c17715ca04b45cb876d05b874a36fe5d9642af7be8b851884db","first_seen":"2025-07-02T03:33:37.453175Z","last_seen":"2026-05-23T23:19:54.901727Z","times_seen":3316,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/webfonts/fa-regular-400.woff2","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pro.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173220\r\ncf-ray: 9cfb860adfd40731-OSL\r\nx-amz-id-2: Kh5gud7Xsg+AkTq3RE1Kr/4tkGxXkOMrRlfte4H/xKiRGA66hUwt/vDu4NKAzhAi/AFr+CXb/Qk=\r\nx-amz-request-id: E2CGREY3TFTHGWN4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:14:37 GMT\r\netag: \"3e332211899360ab9380df4d50e1c33a\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 623539\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":173220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173220, version 331.17301","md5":"3e332211899360ab9380df4d50e1c33a","sha1":"a4c6413bb7f7549b4fa37f22829e4d09f9de6817","sha256":"58f76b0b684536fbea8ae9ae7177607e81a261407916e9a86e063b02948e9adc","sha512":"697a1a3c6517f93d280d47ec93871aadb9e0d6576d2966ed2a296f2764d9b2bfd39a4b4854c6fa445965545dda72a4656de96ca3f8497c041749791c0f3c682e","ssdeep":"3072:AsJ+WJ7ekhVohiHZSPzAIc0NmYgt4Qmp60OPzGYDpBXa:B0UekhVoUZSPkIJVQ3PzZTXa","tlshash":"e904121023ee60e0327d969b5374e34e770b4789c656e99dcac7b2e1d8d44af41c2d2e","first_seen":"2023-04-05T13:40:29Z","last_seen":"2026-07-24T13:28:44.144829Z","times_seen":5062,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/255-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/255-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"3f88-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 16264\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df43024e930518dbe24f01ca9f0d7a4f","sha1":"fef8c32a2b13527aeec06be387cc93f9cf8ce11f","sha256":"adcec55151a06dd31610758e1407d81a1ad35a7ab2e04d092b85b3c4da891264","sha512":"39610ec08ca69d51210dee9ab31c927f14231b16f4156810f55758fa561a87ee7834429331996eb9da1963eae8a20f20a2955e3c3e3d462b6015e747922693dd","ssdeep":"384:ZwnXEClW8Rg7n/MQe7Vptoeh+uzJPPc3wCFGAE6/q4TdgZQSw:Gn0D71sv03wCFGAF/bpSw","tlshash":"6d72d00303761994e9cebf36654f8612fb2a2f6d034a104246d263df4528e5947d77fe","first_seen":"2025-09-28T06:57:47.512171Z","last_seen":"2026-03-04T08:57:10.87768Z","times_seen":3021,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T06:38:43.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired?d=tokcnpocket.pro HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2719\r\ncontent-type: text/html\r\ndate: Wed, 18 Feb 2026 06:38:43 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2719,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b865575cac49af82d019b136926d38ba","sha1":"edf1d75fa992e0556d6eff126771c28ce7b24a13","sha256":"f81118959775649a2b2bc33be39d5c1b34d0e42aac12324a5ea259ba5f182ee6","sha512":"15a6b30177aff0100dcf87faac4242c09882a12295de1c5c578d30d54e6196836ce2edcb7abfe9ab9536dd2f3defb2bc0d47ab50e26e19dfa390eb3fe451aa65","ssdeep":"","tlshash":"b4514117a9e340015467c0215bbb7a083aaae507870acd913e9e53cccfc57da98937e8","first_seen":"2026-02-18T06:39:12.205834Z","last_seen":"2026-02-18T06:39:12.205834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":320,"dns":1,"connect":154,"send":0,"wait":156,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/kohls.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/kohls.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"5ea-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1514\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"f6460f7fcdc8f7eb154a550c288b5cab","sha1":"7a166d72f5a212f40a512b8a6ffa92ed5753dc20","sha256":"f830f7710726f1d905411ed23c357fd22d163b9a859dc910323051d94ec74427","sha512":"92660ccdddc6751a5d3541db9847662a78a01b634f2062a28bd68e87590c4027a3e023858a5e1d19d5b10a5edff9cfa2476431508a1f60ac1833b6ce31132892","ssdeep":"","tlshash":"ce31ebd52aa594aed1fef83bd655512716acb3350b5ccd07276d08dd2ea0b30d50603a","first_seen":"2025-07-02T03:33:37.447297Z","last_seen":"2026-05-23T23:19:54.760352Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/settings/556112.json?r=1968218","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /settings/556112.json?r=1968218 HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\ncontent-type: application/json\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 26 Jan 2026 03:15:18 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JYKgQ.CljoWi5DC9vLiKSKVo6bEEQ7xn\r\ncontent-encoding: gzip\r\netag: W/\"2c0114ac7a91de05d645d19a8349b347\"\r\nvary: Origin,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 0\r\nx-amz-cf-id: YpVXMNxMmGSxD5kZ6S6wUqueR7eAKCD6ODD-B8BaE8FVwGGKHk_Yww==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2445,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c0114ac7a91de05d645d19a8349b347","sha1":"ad7deb9a027cc507c6163dcb8b5cd2a57ca27b98","sha256":"37e9685e252238a002a7f5d547beace4bdc279a484011d98c55aeb04d262bac6","sha512":"2dc7460fce58d120b5452a1b7a8332a541873fedac5a9f622878e67ed6f7fe4c17db06f95496d17621a4b1e3c88c457e47fb66f6e2cfdbb306953101399e4ca3","ssdeep":"","tlshash":"7b51cc61115c28fa5b8ac56ad6527a434568ca3719d80bfce5ce4acca1f89b05703d27","first_seen":"2026-01-26T14:57:02.998855Z","last_seen":"2026-04-04T09:28:43.685813Z","times_seen":3068,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":11,"dns":1,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=361919608.1771396728\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026z=147507959","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:44 GMT","end":"Mon, 20 Apr 2026 08:42:43 GMT"},"fingerprint":{"sha1":"F4:E5:BB:F4:C6:49:BF:FE:1F:8E:CA:B5:6E:31:1B:21:49:9E:F4:ED","sha256":"F5:84:6C:89:F1:15:EB:18:A7:93:94:EA:72:B8:78:5A:EB:19:BA:8A:28:33:40:EF:E8:C3:8C:89:D8:0D:F7:61"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=361919608.1771396728\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026z=147507959 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 18 Feb 2026 06:38:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T15:51:23.034468Z","times_seen":1007093,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":84,"dns":0,"connect":26,"send":0,"wait":34,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /uxa/3e73dd2905556.js HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\ncontent-type: application/javascript\r\nx-tag-target: es2019\r\nx-amzn-trace-id: Root=1-69919b3c-56037b7056590ab94e33785a;Parent=40ee4cf3ccc94c13;Sampled=0;Lineage=1:d10704b2:0\r\nx-amzn-requestid: dfddd9d0-77be-43d7-ba98-7535b5d0245a\r\nx-date: 2026-02-15T10:09:00.199Z\r\nx-tag-version: 15.181.0\r\ncontent-encoding: br\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Jtkjybukyf9qzFZ_rOY5yMynfMG9KslL5nrAUZ62TSaDeVHRqXmb_g==\r\nage: 0\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":457108,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44657)","md5":"2ef3aba1b4bc47c8762640473305da4d","sha1":"08ac8203afc12c766f493b98b349a55011ae7159","sha256":"fdd7c4e21e372ea2d03f0569e6f64b2955924d919c9732e08b5bea3930b127aa","sha512":"cd0b287920f1d69ff11dc4f43a96a917a76e81f996bcae572231f56283fbaa22f96f8287b58cb77b4d63304c25768e0c28d3ee40200a8b6c5ba9b6fe3ba213c3","ssdeep":"6144:3X4rpu90YWRuKRHJj+p7RO4gGj5AFsvgq0p6jUAid:3X4E9el47aPcggid","tlshash":"6da41ad973a6b0b647e9c1ead0360102b33974a97409003cf1adecfb35a5d4662f6b79","first_seen":"2026-02-15T10:20:40.39011Z","last_seen":"2026-02-18T09:39:00.188974Z","times_seen":174,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":48,"dns":32,"connect":3,"send":0,"wait":8,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 08:40:55 GMT\r\nexpires: Thu, 11 Feb 2027 08:40:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 597472\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-24T14:54:53.784346Z","times_seen":314680,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":51,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 08:40:55 GMT\r\nexpires: Thu, 11 Feb 2027 08:40:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 597472\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-24T14:54:53.784346Z","times_seen":314680,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-favicon.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-favicon.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"37d-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 893\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cab9de44eae12465ff29b6a664f9375","sha1":"adbe537227d33660ea063248f10579b0b04cdb24","sha256":"507fe22603f5670f685c8170fc9b69fcd1c7619533dad12260b6245e04420ca1","sha512":"2eae91f47cc74bf070ac483ca7be63772f73137a976c60657d2024a96300b71f18822c075ac5c71576ba7583f8e1ac284b4879430f7b07cb7a0d9481f34eb498","ssdeep":"","tlshash":"f21123964318d87bfdd9460987f075e633e0349ae29414ec6c9b347ae15d8e8e1092dc","first_seen":"2025-07-02T03:33:37.440576Z","last_seen":"2026-05-23T23:19:54.687844Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired/result?rid=c60a837b5c3b9f3b5167b3303ddc8bb8\u0026cid=562926f5-cd92-4d62-b7f4-0fffdf672e56\u0026d=tokcnpocket.pro","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.74","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T06:38:45.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired/result?rid=c60a837b5c3b9f3b5167b3303ddc8bb8\u0026cid=562926f5-cd92-4d62-b7f4-0fffdf672e56\u0026d=tokcnpocket.pro HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro\r\nCookie: _cq_duid=4.041fdd7cb5fcfff37264ab51bf882af4; _cq_suid=1.1771396724.s4Qkx19W2lceeApZ; _cq_pvid=4.c60a837b5c3b9f3b5167b3303ddc8bb8\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\ndate: Wed, 18 Feb 2026 06:38:44 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nlocation: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":41302,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/stockX.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/stockX.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"711-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1809\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1809,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"3a74e3bc367eca73b987c062d3cc121c","sha1":"a4dd42327e27f6f5b015173c166ea31330aafdb8","sha256":"2b589c966d50e480e5c1e9966c5305f00b63be2b28b83be271ef4a96483da903","sha512":"095664247fcc501d6f766a749ea030ec324d3943511ed9a214b8e47456b6b952ad40d13337285d0980f811349ffb4c8f1d811138e4a16117b07e230ee8809d6c","ssdeep":"","tlshash":"fb31e65f24443d2cc645fa3ace6033b81a129840bb7913454dcbf43e0b0e1873fe9992","first_seen":"2025-07-02T03:33:37.403661Z","last_seen":"2026-05-23T23:19:54.69941Z","times_seen":3311,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /adsense/search/ads.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\nexpires: Wed, 18 Feb 2026 06:38:47 GMT\r\ncache-control: private, max-age=3600\r\netag: \"11214460557647919053\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131260,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2505)","md5":"095524960c604a56d83ef3aec2759337","sha1":"8f801c6871dbed52ea28965055c2f49f5637dba4","sha256":"c3d3843cffad4bb1ca570ccec9c9f4d51184e6237338f1972a53dd33d05f2d48","sha512":"ad5b53e34d47335d204c37ac28f7bde3e03994aa3b035067ac04be83302a06244734c794dabed5bd291343c87598959392e08c096358c867b4e5b0ac354d5e0b","ssdeep":"1536:o1dZrBd5jW9ZlypQL6AreKdC/4bU0J5Eg2WJAcGuzarKZUtXXSS697af9j0FkZf+:YGLb3s/4BJ1Ba/XCSblSRd","tlshash":"25d33acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","first_seen":"2026-02-17T21:37:01.370602Z","last_seen":"2026-02-19T19:08:51.902241Z","times_seen":47,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":84,"dns":26,"connect":21,"send":0,"wait":34,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/198-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/198-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"d12a-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 53546\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61ae9e66234d66119cbfacb0eafec866","sha1":"53057c751e24261d97178b049daf655317f8882b","sha256":"702a147b22750f37febdfef14dd3c9bd1a509aa7d15223381fc310e16cd2328c","sha512":"0e07148887837f2a8cf236760b661992c63b9c576e911260798f27a52703ab9d2309738d0cb6211fe93c8c152e211803ef79c639ce49deadb8222b4c9da9389e","ssdeep":"1536:JFWd9qZL3jY06Vktf040xhVVvYiqVLeWEVU/ZV:JFauLg2GVVv3q5eWim/","tlshash":"6133f29b7c947d89d09bf7b508ee539676580707902cc9f72d1a3a1e528c83adb2e170","first_seen":"2025-09-28T06:57:47.567664Z","last_seen":"2026-03-04T08:57:10.894198Z","times_seen":3075,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771396727046\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=361919608.1771396728\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026sid=1771396727\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dtokcnpocket.pro\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2723","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771396727046\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=361919608.1771396728\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026sid=1771396727\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dtokcnpocket.pro\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2723 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Wed, 18 Feb 2026 06:38:47 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":30,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","date":"2026-02-18T06:38:44.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:BF:CA:57:4B:F8:E0:A8:F2:21:31:99:0C:8C:18:40:E5:CD:00:F6","sha256":"AC:AC:4F:5E:FC:5A:BF:23:4B:FB:96:F1:BD:C6:59:2F:FF:13:DE:12:47:1C:3B:14:64:0C:C4:EC:A2:AA:7F:3D"}}},"request":{"raw":"GET /i/58518ef7cff0c8433a35a3a4a06ac5dd.js HTTP/1.1\r\nHost: ob.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44666\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ndate: Tue, 17 Feb 2026 20:29:14 GMT\r\netag: \"1d7a8-9B+mWzjmnORMrJUrq2Gs5CFH/pY\"\r\nexpires: Wed, 18 Feb 2026 08:29:14 GMT\r\nserver: Caddy\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: R80IQcPJBkZ1QV75ZwX1nHLtb2eDfjW48BOB3fBSCxYYUzGJp5bA8A==\r\nage: 36570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":120744,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"84dce395c2dd9bc2555fca96f6841c59","sha1":"f41fa65b38e69ce44cac952bab61ace42147fe96","sha256":"d2ac56393749741d2d89dc077e014fde683bbbdb7aa30e50fe0d4186b2291b35","sha512":"fe3206ee8a0e5568c885ec8ebf4d53ef1b69e264add9ee75f58eb8e837acd2c0d5e4e700061f8c3c68dbe3288ce39ebd6ef9df8df2600a330c15e0c75f51f9de","ssdeep":"1536:5wxeb5bdwL+pdFz9FSUsqLonHNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+JzUVP9ftrdruZ5QZ3fao8r0","tlshash":"85c3d6ddb2e27025439324a5157f410ae27b6e543c4b8294d17ee9d4ac7ce8e807bfac","first_seen":"2026-02-17T21:15:35.404311Z","last_seen":"2026-02-18T08:00:13.837297Z","times_seen":22,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":103,"dns":66,"connect":1,"send":0,"wait":2,"receive":3,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/tailwindcss.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Thu, 31 Jul 2025 06:05:50 GMT\r\netag: \"636ef-63b336ee2eb80\"\r\naccept-ranges: bytes\r\ncontent-length: 407279\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T14:39:23.87835Z","times_seen":46101,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/doordash.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/doordash.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"7a8-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1960\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1960,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"a2aa24db9097058ecddf0c21616dc32b","sha1":"8507e1b050de8427ddc817bd414fcab8b057e7e1","sha256":"4ceee7903b0ff3777b243339047fc545a66d52122b1e14166cf92b432864d96e","sha512":"d0a0c4b8edcc7065d0cad188a2b87218c0c5c987022e0976af61e5977d0693ad11011d643b4cb11643387a997782a71c6a6dcb12ef5c5826a56a2b7d9f7b537a","ssdeep":"","tlshash":"c4413d99f3593d47cbd997f4c3700e91194c5c6926d04044b2431b7a60fbf67d648c01","first_seen":"2025-07-02T03:33:37.417807Z","last_seen":"2026-05-23T23:19:54.861044Z","times_seen":3316,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771396727046\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=361919608.1771396728\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026sid=1771396727\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dtokcnpocket.pro\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7736","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62h0h2v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771396727046\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=361919608.1771396728\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~115938466~115938468~116988316~117455676~117455678\u0026sid=1771396727\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dtokcnpocket.pro\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7736 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Wed, 18 Feb 2026 06:38:52 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T06:38:45.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /?cid=99998\u0026d=tokcnpocket.pro HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dynadot.rsocdomains.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:45 GMT\r\nserver: Apache\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; expires=Wed, 18 Feb 2026 08:38:46 GMT; Max-Age=7200; path=/; samesite=lax\nwwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D; expires=Wed, 18 Feb 2026 08:38:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":41302,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f5689746e3f73d847499fa81e77735c9","sha1":"4f4f4b0b9bc425d52065e7b0dc12ececb63e6fe9","sha256":"40e9b73c066d6224f136ba2e644061cfd476932d14aecb97e58a433f0e16d341","sha512":"300a797df4f3277e8282f9e1148111a8b2ad73ba9bca508eb8949980297248b01147d7d735a49ab3b9cc7c0b7b32ba793cb1b9d53f4a0f9702e922f38d75c449","ssdeep":"192:u8xD4wxmppiV7+g3dylfliEyzRbMRQNnL2aofXu3hNljCqDgmwRBRxOJLz2fTPAv:uTQ7QKySUaEW2fTPAbf/y2Hbn7x","tlshash":"5b030fb3b5f034ef1347829e19227a2c9982705fd603a98cf9bcc55adfd1d4e8a13169","first_seen":"2026-02-18T06:39:12.21251Z","last_seen":"2026-02-18T06:39:12.21251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":331,"dns":1,"connect":154,"send":0,"wait":253,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-7eb53\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nage: 5353688\r\nx-served-by: cache-lga21936-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1208, 1005\r\nx-timer: S1771396726.321896,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 122789\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":518995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-07-22T10:12:37.035705Z","times_seen":3555,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":69,"dns":17,"connect":15,"send":0,"wait":14,"receive":30,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/231-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/231-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"8188-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 33160\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef40c42b96a47242b52338bb98ede227","sha1":"48ca23b340cfd519c105bfcc824ba2d5742900f7","sha256":"aa1fdef6533652c99b0ddec88475ba75eff15f0869f1dfaa7f035c8283ee7098","sha512":"950562cc0b20737231e79b6689346b20c06fbfe3852281192675b0befb24706108204a86986cc2c4c8334cfa134ad411653c70804b9894003bf815ffef7ed4f8","ssdeep":"768:49KWPdGboJZUu1bl7TcaBQOn7deI6EHgKhjEhr/Q:dWobMUur7THde6AK+No","tlshash":"27e2e1fc272a3bb4e8b387f156a1faa05681297e8248772c14709c879c6d6cf09546cb","first_seen":"2025-10-24T03:34:30.908124Z","last_seen":"2026-04-04T09:28:43.674282Z","times_seen":3065,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126defc43cec4088989225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d57128c6d2117071a10acf9f29f674e8bd7d8032d3d48ad787100d533d96bc25036532a9307095c64035a92bd3d4977be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c7942715603a4897e652e04f6f31f7adeaef42897b258711d2ffff2f69cca25b6cfc248b5038e523b67c4e19abdea26d59ebe799d215695bd896f1209e83526f6c1403baac6b937d055ab19efd5419c0cd59c20992760ded97e9a30c4ddbcfecbb0b84a74b670e5e0af6d4f74fe8c718ca616e6574c00cb4f18d08192c5cdbcdd639a7880c4fbc879ae243b18a93865d494d116779ea864a841bfc503d667a879455b44cb26ff559c87e03fb98d789f5cf182d5da6b9c544564fa4858416e443e89ec6fb751dfc98432ae9369bdc86cd6c2a7be788c91e95461729ec2580483f7461a4cb4e8e215f863cfb41896b43cb86ebd2389419648c5a257c61a27e6a68e622322610122174114a2e69071d104b35953452bf8a852d8991910e3bfdebea071c4ede5919aeafbb4121b2ef15586b25838d717624885660b223aa02dac711bc4ef90318f61857383a32e9cee098b671d62655b280196d2e5c53d7c529b1b4c93d4dbbfae895764c5f8bc74f1cd2f288d87637c03eb8dcb1264ee7397558d1bfd3e9c15dacb1afebd30e685e8a0df0d25e6a9491aca23f1edb1fe458e70265445c27a493bdcbf4dcda84dd8939ad44699d6c362726814ef79f25af437e7d630c96c512b40266f2bb4189c8b3255b96dc8bbe775849e5f86756fbd512179ddfadb0b5aee73fd92029a5a731240bc273eddec8439d95d3e86974ce28c88bd9248c75c572a09e0286601de82065db835e3f9c8319d8aba5b4f76a376325947dd1d55e69aee1c0d8220358ad1954bcdc8a8970a30b022bf0f784ade17600695a2581ed88dba88b5a019b76bfa2d8068\u0026cri=plLzleyVHP\u0026ts=490\u0026cb=1771396725197","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=tokcnpocket.pro","date":"2026-02-18T06:38:45.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=plLzleyVHP\u0026ts=490\u0026cb=1771396725197 HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.041fdd7cb5fcfff37264ab51bf882af4; _cq_suid=1.1771396724.s4Qkx19W2lceeApZ; cg_uuid=79da412cc064b8695d6f90e93a75d3f6; _cq_pvid=4.c60a837b5c3b9f3b5167b3303ddc8bb8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Wed, 18 Feb 2026 06:38:45 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-24T14:45:58.95827Z","times_seen":411236,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-logo.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-logo.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 11:56:08 GMT\r\netag: \"7f8-63608a2216600\"\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cec769dd78f575508f8e4c2fc6b1552","sha1":"b542a31312251bfb5e48815297c5f829be295908","sha256":"1d6df4ff0aaf1c9c6c240e29983b7a6c226776b3637f787afe1b7f72076e4005","sha512":"1628a41902ff99c9737c74137b6914306d03c9b5723faf5fbf656f67b3596835bd384745b0f41f076649dc12597dd30474042c01aaf7369a1de9a06f232693b6","ssdeep":"","tlshash":"6a41dda74269cbbd5ffe96388e49bd1a32d17cc2e433d2c53ae61049c2250f1a01d5aa","first_seen":"2025-07-02T03:33:37.451098Z","last_seen":"2026-05-23T23:19:54.657953Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/walmart.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/walmart.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 25 Oct 2024 07:41:48 GMT\r\netag: \"8be-62548405d6700\"\r\naccept-ranges: bytes\r\ncontent-length: 2238\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c55dead6c1f0b6dcc6881facc0944fc5","sha1":"2fa841a393a2381632a362c2db2623c56be3aab5","sha256":"753b210ea1db70579a22911976c61c21490d239d18994268cce03af0fd8d7c78","sha512":"4df5152d646327f3f1aac2c9cd5502acc8cc125222f82fcfb24e663dc07b5207ef2732c4e2030438ef6e94c5602721d8bbccec8b6e4c187c09e364a04d222585","ssdeep":"","tlshash":"244109c118e16e1bd916363d7feb1b402a26636f500652043b11b827db87610e4ab2c7","first_seen":"2025-03-15T23:41:14.383382Z","last_seen":"2026-05-23T23:19:54.750592Z","times_seen":3319,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/sams-club.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro","date":"2026-02-18T06:38:46.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/sams-club.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=tokcnpocket.pro\r\nCookie: XSRF-TOKEN=eyJpdiI6IlhLOHlCNENKdzJDaEFGeGp5ZW1Wcmc9PSIsInZhbHVlIjoiV3RBQlV3VnNiRFA2VXIvMytxdjc5YktlaEJpenJyZk4wYjdWY1hxMlBSSDZtUWZ5NjVnNzZBVmhkREtIUDArck1ITkRMamJqZVdvQUREbVZoL204SmxCSzZENFNNN05vTFdBUXQxdElJaTg0Y0NDS1pNNjJDV1ltWHROYVQyV0wiLCJtYWMiOiI5NWNmMjNjNGJlYWVjZDRlYjYxNjI3ZjZiMWRjMDUyMDMwNmRjNDZkMDQ4NDQzZDFlNzQxNDEwNWU4YTU0OThhIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6IlRvY0tvdlR0NDlEb25GalhUTWFtckE9PSIsInZhbHVlIjoiSlRsSWtmYnEyRnFkdVp0RW5sY1huSmRlWnBkaVFDMmlzSi9ZSmttZm5wd2ZNdXFTNUJHSHVXVmdxZ3BDZmRxR2ZPZkpWVFViR243Y2REUm95UmI0Zk1nWG15YnlNN1dSOWR6M1lJdzdLamMrQ1N6UGxuRW16UUppcFU4QkVlYlEiLCJtYWMiOiI1ZTNjYjNhOTQzY2ZkYjZiZTZlMjA2YmRlMTAyZmZlNDU4NjE4M2M1MDQzNTAyMTRlNjlkMWMzYzVlOTU2NWM1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 06:38:46 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"12db-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 4827\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"772f2fd78bfb39c468fe810628a49dd8","sha1":"a2954af1ffb3e977e70b430d40d35d4355cf9dc2","sha256":"05e62c55992587f973cbfd930165b34d67e8665635e75575dac8b3738bf01c45","sha512":"d7ec04451d609e21d9cbb86c4261e218ac6b607a2a08ad76c9a5c637c0aafa8389510041cbabe3954e3ac2d459f0e64455fddbe0603b5a450c57ca498a88baf6","ssdeep":"96:jkPCFhYNmLZcLNMrNk+f62cS674veBtkVuJQkUPSwp+U:QPGhYNm1P53yP4veBWVu0boU","tlshash":"a6a1ae6861492395a000eeccb46f0caa16416d4e2e9b4ad3d730aaf4fdd3dbc95f834c","first_seen":"2025-07-02T03:33:37.45503Z","last_seen":"2026-05-23T23:19:54.789182Z","times_seen":3315,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}