{"report_id":"09c082cd-a25e-41aa-bce1-267e981df79d","version":6,"status":"done","tags":[],"date":"2025-10-23T22:28:46Z","url":{"schema":"http","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"172.67.217.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"title":"Si tocil binal main sama driver grab minta di review"},"submit":{"url":{"schema":"http","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"172.67.217.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-27T22:28:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"videeq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"lg.sizzledoutfort.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"23dadea9c3.b60756935f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"assets.ahmybid.net","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-12-26","domain_rank":171628,"first_seen":"2024-12-28T14:10:32Z","last_seen":"2025-10-21T06:48:11.199685Z","alert_count":0,"request_count":4,"received_data":118220,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-10-20T06:56:18.770833Z","alert_count":2,"request_count":2,"received_data":809,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-19T22:15:30.460323Z","alert_count":0,"request_count":2,"received_data":180986,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"videeq.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-10","domain_rank":0,"first_seen":"2025-10-11T22:21:30.512192Z","last_seen":"2025-10-18T23:12:59.338464Z","alert_count":3,"request_count":3,"received_data":72361,"sent_data":1717,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nereserv.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-10-20T07:03:26.913191Z","alert_count":8,"request_count":4,"received_data":1288,"sent_data":2296,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":1,"received_data":39962,"sent_data":527,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1c37f52d4c.0880559526.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-10-23T04:02:06.98344Z","last_seen":"2025-10-23T04:02:06.98344Z","alert_count":6,"request_count":6,"received_data":1700465,"sent_data":2750,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"enrtx.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-07","domain_rank":18023,"first_seen":"2024-11-04T09:19:58Z","last_seen":"2025-10-20T07:48:48.392444Z","alert_count":0,"request_count":1,"received_data":9787,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2025-10-20T18:31:36.47704Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.video-src.com","ip":{"addr":"104.18.4.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":263818,"first_seen":"2025-03-16T16:22:35.847171Z","last_seen":"2025-10-17T07:07:15.104778Z","alert_count":0,"request_count":3,"received_data":167518,"sent_data":1284,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.multstorage.com","ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-22","domain_rank":101055,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2025-10-20T06:56:19.372418Z","alert_count":1,"request_count":1,"received_data":144,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"notification.tubecup.net","ip":{"addr":"88.198.209.15","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-09-26","domain_rank":250980,"first_seen":"2018-07-09T16:06:19Z","last_seen":"2025-10-22T14:54:58.88267Z","alert_count":0,"request_count":2,"received_data":6577,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":1,"received_data":428243,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.251.38.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-10-19T22:39:41.928557Z","alert_count":0,"request_count":1,"received_data":161186,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"23dadea9c3.b60756935f.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-10-23T03:28:37.35716Z","last_seen":"2025-10-23T03:28:37.35716Z","alert_count":1,"request_count":1,"received_data":345,"sent_data":831,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"videq.com","ip":{"addr":"104.21.10.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-04-17","domain_rank":54252,"first_seen":"2025-06-14T10:01:36.793519Z","last_seen":"2025-10-21T21:45:08.026972Z","alert_count":0,"request_count":1,"received_data":1731,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"487a26891a.1ed8ae4970.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-10-23T03:28:35.947817Z","last_seen":"2025-10-23T03:28:35.947817Z","alert_count":8,"request_count":8,"received_data":164270,"sent_data":24709,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pointcontinentrtb.com","ip":{"addr":"136.243.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-14","domain_rank":16265,"first_seen":"2025-04-20T21:33:16.477453Z","last_seen":"2025-10-18T12:31:58.472145Z","alert_count":0,"request_count":2,"received_data":32052,"sent_data":3327,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-19T22:32:41.177271Z","alert_count":0,"request_count":3,"received_data":6891,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"lg.sizzledoutfort.com","ip":{"addr":"172.255.106.53","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-08-13T03:32:50.952739Z","last_seen":"2025-10-16T08:05:02.581896Z","alert_count":1,"request_count":1,"received_data":1417,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":4393,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-05T09:46:26.923303Z","times_seen":217983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/5d64c41c1913b7e7714284325bf8824d.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2311e82f3d189db161218431ad8a4125","sha1":"125ed59cdbf2836a1c1618d3f8d34e48eab1e52f","sha256":"5d8f8bff163c95d8b4f8ea2d276fa6b2cf9fdb9ff4effa13f88b96bf5c7987b3","sha512":"33aa2327bd16176ef127a94636b71afd12e28b00c64d37aa30aaef20e1547f6b305a585d15d48373fb09527a9e02d18a49e33dcc6feb7e5d57b3c4fe715b9469","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWxhMs4hs:JONux6EHOJcFnagwxd+wl","tlshash":"51d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa483dbd54f625380","size":599443,"data":"","first_seen":"2025-10-20T19:02:16.064718Z","last_seen":"2025-10-27T11:05:04.085026Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lg.sizzledoutfort.com/rmPGpYeuWzGQI/121024","fqdn":"lg.sizzledoutfort.com","domain":"sizzledoutfort.com","tld":"com"},"ip":{"addr":"172.255.106.53","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-05T08:41:08.428178Z","times_seen":14845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f891624ad0321e34d77fa46e8643c7c","sha1":"48fab65e61d43024992a30805de8447d0f288c1d","sha256":"542c49af1798d72b3f9812c325cf78e913079da977e40efc3364bf883b636ef2","sha512":"1045bc05e1d6563cf104c69b0b7c9043ecaeb4ad6bfa5cb0c8cb6bcf89d94ce2d6d157e1dc090a3b2a453c5a907a91b797021a7cb19de21827494279dd4cf895","ssdeep":"","tlshash":"3ed0971527bc1230c30215f7488e94082d1099000648b131b14c07c0bf4e33aa13282f","size":235,"data":"","first_seen":"2025-10-23T22:28:53.971552Z","last_seen":"2025-10-23T22:28:53.971552Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRBBHD087X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56a4a645f04cb1daaef37277482f2d44","sha1":"6c34dca73c0beb649553fbbd2a7e56fdeca7496e","sha256":"f5126c08cdc3df93db008e19fe3e29140de94bc5271256739785517c972ec195","sha512":"4c0ee1425d7a0d211df3cca503287075d0bf5089b6de7d9d10efc90f0c1013c61741d5afbca3b350a25179cb043ae7e0b0b721edfa74e6b2173e800d8551a651","ssdeep":"6144:RBjyJBX1c8429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:fWJBlO29Z8nP58DG/mYl5X","tlshash":"d09419ce73d674269396f078503f018ba57b29a2b45cc896f189cce42d74a9a0277f7c","size":427639,"data":"","first_seen":"2025-10-23T19:26:14.907034Z","last_seen":"2025-10-23T22:28:53.94472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/66ab0088b9f87b95f2337f72d5a98dbe.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b52fbcbf866adfb9aec685b26283f5e","sha1":"f548e5f2bdf5c6a35608ec3020b08b9f92da547c","sha256":"cae17bb17fb027384185a2f4ff0a02a0f40f507da4d403e7cada8fd26b37e3b0","sha512":"d21dc100fb1126bf161965d98180d406720febf70199041aee3a28c60c6e74e9133d14c1a75b008bfcd4178aad276c4831c0b8a454b4490d9e9ececb45b97c47","ssdeep":"768:ubVWcprcLsdOKoFiXE9VR4vlbAelZ8JnN2m3sfy2iXqX+dq3KF9x811MS/SO+dtP:WkmOKjE4mM8JTRc5m5vh","tlshash":"69a328cdb7c2707082a7a4ba902f051ab33e29197849442cf965c9d13dae94f9327f7d","size":98446,"data":"","first_seen":"2025-10-22T13:14:11.436076Z","last_seen":"2025-10-24T12:56:15.024127Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-05T09:46:26.923303Z","times_seen":217983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dff58fc1ac88dc66212114d2d13b01a","sha1":"e1b7f90017b99ce23d4400a32b94b66663d02f47","sha256":"2ef67bd1c4444a3f4f737a6d38106d3f754a74a401b7bcd5415149d5f43142f0","sha512":"6ee907119b2f686a5024a9a952ce107861d3d35df836296f87572f4a219c3998c6d84753c62b33d5e8942f57c32a041d3bd8cd09645be8bb4dd70ddaa53700d9","ssdeep":"","tlshash":"86a022330a388af022ae832e238cee803f3200c3e088f20002083c8823c0c8c20f0a32","size":76,"data":"","first_seen":"2025-05-10T11:06:44.868988Z","last_seen":"2026-04-04T23:06:56.911705Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeed368413469275e3ee01f81d506e3b","sha1":"f0b2023738dda3d9f81f01101ffddc539dd5c919","sha256":"4f96b2f1bc98f9dce38413ca59d5fe7c0f994b467965421be18e634d5dfaab9e","sha512":"5d45e1b9ddc293a2a5cf80789d813f91065c721c6e0926fd2ef12c8cb31017cfda2742fc2de0b00aeb16f929963a6325bc764920f77c04b1f8216f343cfcc073","ssdeep":"96:HWJnGHjVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2oDhxf9H9eWQVAhB08TH","tlshash":"22d1f1f6b9bb334d979371ea2d161141500098a903adbc98fa64f2d5fcb4cfe192b350","size":6404,"data":"","first_seen":"2023-10-24T06:38:45Z","last_seen":"2026-04-05T06:35:49.718707Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/4892a76c1e3c6bff2feeeeb7aa9d9bb3.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd591a2c2c6bdf270d8d31d36135f01d","sha1":"b11b5d64d932f017f9d108585b6d48721634b029","sha256":"3464c3af8e70f6157ec0eb94ee30992ac50f6e40f6bf9f76a0667cb622462781","sha512":"5cc9e2110a37ce090b0681d5ad3f3b66d1ba7ff2760e11e995ef2670a189f9f619511d2769177a62f30f9919c94cdb966e9f6824193ab0338232b16b557c924a","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDwpiBG3n58Tq+MFZ1wVYVC2SQpBUL:4Ym45Q7ywdl+iWEpBK","tlshash":"e9346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","size":247513,"data":"","first_seen":"2025-10-20T19:02:16.031787Z","last_seen":"2025-10-27T11:05:04.048417Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/5d64c41c1913b7e7714284325bf8824d.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2311e82f3d189db161218431ad8a4125","sha1":"125ed59cdbf2836a1c1618d3f8d34e48eab1e52f","sha256":"5d8f8bff163c95d8b4f8ea2d276fa6b2cf9fdb9ff4effa13f88b96bf5c7987b3","sha512":"33aa2327bd16176ef127a94636b71afd12e28b00c64d37aa30aaef20e1547f6b305a585d15d48373fb09527a9e02d18a49e33dcc6feb7e5d57b3c4fe715b9469","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWxhMs4hs:JONux6EHOJcFnagwxd+wl","tlshash":"51d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa483dbd54f625380","size":599443,"data":"","first_seen":"2025-10-20T19:02:16.064718Z","last_seen":"2025-10-27T11:05:04.085026Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/3088b62ec10511d231ef1501250015af.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149592,"data":"","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"455735a2f70e36599f8496aaa8256666","sha1":"c2c6c70d37fdd2b8dad10ef1c980c0f7c07bee18","sha256":"0767792960c343fb899e2f9ea57113fecbf91666b125ad9cdbed5da011605e64","sha512":"51ce65873bd8226d874a7c4bd07f8785757123facb9105839396a207084a4c40648b94974dd63ffa5577158360cfb771815ea361deee9c6eb4d43a49da56f619","ssdeep":"","tlshash":"103114577ed106a6079a23a77c3f3586e465fc9e38e45505d02579b97c18020c0f6b7c","size":1673,"data":"","first_seen":"2025-10-23T22:28:53.973954Z","last_seen":"2025-10-23T22:28:53.973954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"feb2b4d7bcc0775b24106439fea55393","sha1":"883297bcdad81a48887b0fa80dded516d4ceffd2","sha256":"6d688c7dc44a164a6c04a179a3ee076b469b9f1cb69acbee4085e00898c6842c","sha512":"5f777380bf1b007a81e5d4193e9a2f5094c05ce2187e667d27ca26d9e02f3b0d36c21540ccb7f1f3e54566869fc1b5cbf1400f31f12f7c009f1de39bb7b4ab58","ssdeep":"","tlshash":"07f0a0ffb9bb25f40a37b134af9e5348b43200072001dd02bd6d49c92fa4e102866ad9","size":480,"data":"","first_seen":"2025-06-14T13:42:55.432929Z","last_seen":"2026-04-05T06:35:49.720542Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35a1e2d69232c9f0a6d0258b14b67261","sha1":"d33de51db12ecab3472e5cd6c5279b26d977a562","sha256":"e826ac1151ab0276e1309e0f89c0a4e4803ab62eb36edfd6c78406abf91609b9","sha512":"d892fe52888dcccf2f53a309edb8ced98add88c30260bc4003c419377a451680288da475d3791ee47ec7085eea8e6827da817b7871c4c9b7f75fb08bcb3fee83","ssdeep":"","tlshash":"6dc09b9c35475cb555e757414b2fb505f147711094d11c31095a73485a20d57a755854","size":139,"data":"","first_seen":"2025-03-16T16:36:52.544017Z","last_seen":"2026-04-05T06:35:49.722243Z","times_seen":616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/multy","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://videeq.com/\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42622\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:34:20 GMT\r\netag: \"6765644c-a67e\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x202, components 3","md5":"4b74ad5ccb083046112cffd63a4335e8","sha1":"673cca7b51ea6cc0f13c8371ead2822827d07d90","sha256":"4b91c0ff427adc8d7c749fbf845e339851b50bc36c15e1c0df9c1871f49d563b","sha512":"8a437f2d04b86c51e1c44a8cedd09c4b8c9b3bb2bc2fdeb0731f31152f0d21ec47138e9a55994c9bb09694950bc26da7c08bd2d2b25286e961df4b4fc0c76e42","ssdeep":"768:rjVYBbrQ7ay+W2bGXksBSPmoUWnW1L5xqV296CZvWYbNfeQdUxYaqnVM5:WEezSTBSHUWnW1v55fz5/n65","tlshash":"0b13f2d29bc1c0d26de644d702d4711c2f529283bde2979944b1b3bbff1058ebb55878","first_seen":"2025-08-11T16:28:38.282328Z","last_seen":"2025-12-21T08:14:57.666818Z","times_seen":127,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":92,"dns":40,"connect":20,"send":0,"wait":37,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NjEyNTg1MDU2NzMsImJ2IjoiMTM0LjAuMCIsImNyIjowLCJjcnMiOjAsImNyc2VnIjoidW5rbm93biIsImNzIjoiVzNzaWJDSTZNQ3dpZENJNkltNXZibVVpTENKa0lqb3dmVjA9IiwiY3RwIjpmYWxzZSwiY3UiOiJpcCt1YSIsImRwIjoiZGlyZWN0IiwiZHQiOjE3NjEzNDQ5MDU2NzMsImVjcGEiOjAsImVyIjoiNzUzNjUxNjUwNzQwMDM1Mzk2MyIsImVzIjoiMTc5MTAiLCJpIjoiNzM0MTg3NzQ6MTg2OjE4MzY3NzIyMzE5NzM4MTQ5MDc1OjgzMzEyOjIxOTk5Njo1NTA2MzE0NjI2MDA0Nzc5NTAxOjE5NTEwOjoiLCJpY3MiOjAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6Ijo6IiwianRpIjoiNmY5N2FhOGYtNDgwNy00N2JiLWI3Y2QtZmRhOTVhNWM0N2I1IiwicCI6MC4wMDAwMjcsInByIjpmYWxzZSwicnAiOjAuMDAwMDI2OTk5OTk5OTk5OTk5OTk2LCJzIjpmYWxzZSwic2QiOi0xLCJzcCI6Int9IiwidCI6ImlucGFnZV9hZHVsdF9ocV92MjpjcGMiLCJ0cCI6MC4wMDExOTE1MDg0NzM0NDQ1NzAyLCJ0cmlkIjoidGNiLWRzcC1oei0xOSIsInUiOiJodHRwczovL2Fzc2V0cy5haG15YmlkLm5ldC9hNmEyOGYxNS0yMzdiLTQ3MDgtOGE5Yy1mMTJkNDQ0MmJmODIuanBnIiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiMDgyODY3MWMzNzc4NWE5ZDc3MjAxZjQyMDc4ZWVlNDYiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg2OmlucGFnZV9hZHVsdF9ocV92Mjo3MzQxODc3NDp0cnVlOiIsInYiOiIiLCJ2ZiI6IiJ9.oeq-B91OjjAwnz8FKpGNhB4xrjlR9Wqqk26dohDRAfU\u0026sp=2.6999999999999996e-05","fqdn":"pointcontinentrtb.com","domain":"pointcontinentrtb.com","tld":"com"},"ip":{"addr":"136.243.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pointcontinentrtb.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 02:36:56 GMT","end":"Tue, 13 Jan 2026 02:36:55 GMT"},"fingerprint":{"sha1":"10:3C:6C:45:89:88:DF:E7:81:55:79:A9:7C:DC:2F:83:4A:46:54:F3","sha256":"40:9B:6D:FB:42:41:0E:7F:8E:6C:AD:17:0E:A1:BD:A6:42:50:01:8C:9B:DA:8A:6E:7E:D6:3F:B0:21:97:20:0C"}}},"request":{"raw":"GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NjEyNTg1MDU2NzMsImJ2IjoiMTM0LjAuMCIsImNyIjowLCJjcnMiOjAsImNyc2VnIjoidW5rbm93biIsImNzIjoiVzNzaWJDSTZNQ3dpZENJNkltNXZibVVpTENKa0lqb3dmVjA9IiwiY3RwIjpmYWxzZSwiY3UiOiJpcCt1YSIsImRwIjoiZGlyZWN0IiwiZHQiOjE3NjEzNDQ5MDU2NzMsImVjcGEiOjAsImVyIjoiNzUzNjUxNjUwNzQwMDM1Mzk2MyIsImVzIjoiMTc5MTAiLCJpIjoiNzM0MTg3NzQ6MTg2OjE4MzY3NzIyMzE5NzM4MTQ5MDc1OjgzMzEyOjIxOTk5Njo1NTA2MzE0NjI2MDA0Nzc5NTAxOjE5NTEwOjoiLCJpY3MiOjAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6Ijo6IiwianRpIjoiNmY5N2FhOGYtNDgwNy00N2JiLWI3Y2QtZmRhOTVhNWM0N2I1IiwicCI6MC4wMDAwMjcsInByIjpmYWxzZSwicnAiOjAuMDAwMDI2OTk5OTk5OTk5OTk5OTk2LCJzIjpmYWxzZSwic2QiOi0xLCJzcCI6Int9IiwidCI6ImlucGFnZV9hZHVsdF9ocV92MjpjcGMiLCJ0cCI6MC4wMDExOTE1MDg0NzM0NDQ1NzAyLCJ0cmlkIjoidGNiLWRzcC1oei0xOSIsInUiOiJodHRwczovL2Fzc2V0cy5haG15YmlkLm5ldC9hNmEyOGYxNS0yMzdiLTQ3MDgtOGE5Yy1mMTJkNDQ0MmJmODIuanBnIiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiMDgyODY3MWMzNzc4NWE5ZDc3MjAxZjQyMDc4ZWVlNDYiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg2OmlucGFnZV9hZHVsdF9ocV92Mjo3MzQxODc3NDp0cnVlOiIsInYiOiIiLCJ2ZiI6IiJ9.oeq-B91OjjAwnz8FKpGNhB4xrjlR9Wqqk26dohDRAfU\u0026sp=2.6999999999999996e-05 HTTP/1.1\r\nHost: pointcontinentrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Thu, 23 Oct 2025 22:28:26 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":82,"dns":15,"connect":25,"send":0,"wait":24,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/show/?tag_ab=c\u0026site_id=31418776\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=388464194\u0026sid=3548688559\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=63.42073893840089\u0026kubik_score=63.979\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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%26bs%3DTVRjMk1USTFPRFV3Tlh3eE5URXhaalkwWlRkaU5UVm1OVEptTmpnd01qTXdabVk1TnpKa00yUXpZZy0tfDR8MC4xfDcwfDcwfDB8T0t8NTBkZTE5NmVkMWFiOGExNGFjZjM1MTg5MDM4Nzk0YTA-%26cb%3De2e_68faac09ae2960.26994595\u0026icons=Ews_FBITWvhYULsB0znBPf5TOxorphaNufXUeYRN7A0FLASHT60Mkci_YjLy9ywp598Zhu3R-LObl4g8mGpdYxoxpMwK1c0iq4rktOoyJamT_2S0-S-yWZ6UUN8l0qVTkyk98admRYXNs2LXcZ2VZl5B-GTUV47ahfqZThtF3ATBOzXSbA\u0026ext_cid=7754042\u0026px_id=121457705\u0026min_cpm=0.03582774418218894\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=1672771399106668381\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.020580311913596824\u0026cpm=0.005870190652505213\u0026verify_hash=99d15ea14b6ba6f9c9f72eb898c448f3\u0026verify_hash_v2=eae089e6b5163abf3494aa2e538f6f23dea7122dc42776eff5e9f835c1799b22\u0026is_native=2\u0026real_bid=0.00048790415729999995\u0026original_bid_usd=0.00048790415729999995\u0026original_bid=0.00042086099999999997\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,4,89,20,27,150,0\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00048790415729999995\u0026hostname=auc-inpage-hz-1-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000004879041573\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.012031442168867975\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=11042872\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=5f67a3b0-551f-4e64-93fb-78600aaa2f30\u0026prev_step_diff=606\u0026st=0.02","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=31418776\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=388464194\u0026sid=3548688559\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=63.42073893840089\u0026kubik_score=63.979\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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%26bs%3DTVRjMk1USTFPRFV3Tlh3eE5URXhaalkwWlRkaU5UVm1OVEptTmpnd01qTXdabVk1TnpKa00yUXpZZy0tfDR8MC4xfDcwfDcwfDB8T0t8NTBkZTE5NmVkMWFiOGExNGFjZjM1MTg5MDM4Nzk0YTA-%26cb%3De2e_68faac09ae2960.26994595\u0026icons=Ews_FBITWvhYULsB0znBPf5TOxorphaNufXUeYRN7A0FLASHT60Mkci_YjLy9ywp598Zhu3R-LObl4g8mGpdYxoxpMwK1c0iq4rktOoyJamT_2S0-S-yWZ6UUN8l0qVTkyk98admRYXNs2LXcZ2VZl5B-GTUV47ahfqZThtF3ATBOzXSbA\u0026ext_cid=7754042\u0026px_id=121457705\u0026min_cpm=0.03582774418218894\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=1672771399106668381\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.020580311913596824\u0026cpm=0.005870190652505213\u0026verify_hash=99d15ea14b6ba6f9c9f72eb898c448f3\u0026verify_hash_v2=eae089e6b5163abf3494aa2e538f6f23dea7122dc42776eff5e9f835c1799b22\u0026is_native=2\u0026real_bid=0.00048790415729999995\u0026original_bid_usd=0.00048790415729999995\u0026original_bid=0.00042086099999999997\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,4,89,20,27,150,0\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00048790415729999995\u0026hostname=auc-inpage-hz-1-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000004879041573\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.012031442168867975\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=11042872\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=5f67a3b0-551f-4e64-93fb-78600aaa2f30\u0026prev_step_diff=606\u0026st=0.02 HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15768\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:31:53 GMT\r\netag: \"676563b9-3d98\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x108, components 3","md5":"2e22068d6c028aae1484dcb188b0dbe9","sha1":"06166176ce916ec30e700a8ef14e2a4e0281a165","sha256":"cf28e006bd60694e75878484f862907a9d9c128d2daae08f098ad33aa08ef267","sha512":"45145af081276c9bc141403ac0319efcf202b92768863ae052d164e63c0e090d3b5ac2ede3316109469f7203f0154cec9e77d01ddbff49b38fbd2e1ba9aa805e","ssdeep":"384:HyfTep7svYXcGF5L5wEpTVJp5Peme8sl84fruMH4M:kQXcW5ZVJ7eLTlzrj4M","tlshash":"e062d0504c6205e7cf68bf0ba4d064a23ece2a27d584e966e904f848f1b2deac45ac4d","first_seen":"2025-08-11T01:48:06.622057Z","last_seen":"2025-12-29T02:51:31.481286Z","times_seen":451,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15768\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:31:53 GMT\r\netag: \"676563b9-3d98\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x108, components 3","md5":"2e22068d6c028aae1484dcb188b0dbe9","sha1":"06166176ce916ec30e700a8ef14e2a4e0281a165","sha256":"cf28e006bd60694e75878484f862907a9d9c128d2daae08f098ad33aa08ef267","sha512":"45145af081276c9bc141403ac0319efcf202b92768863ae052d164e63c0e090d3b5ac2ede3316109469f7203f0154cec9e77d01ddbff49b38fbd2e1ba9aa805e","ssdeep":"384:HyfTep7svYXcGF5L5wEpTVJp5Peme8sl84fruMH4M:kQXcW5ZVJ7eLTlzrj4M","tlshash":"e062d0504c6205e7cf68bf0ba4d064a23ece2a27d584e966e904f848f1b2deac45ac4d","first_seen":"2025-08-11T01:48:06.622057Z","last_seen":"2025-12-29T02:51:31.481286Z","times_seen":451,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T22:28:22.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videeq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 17:07:02 GMT","end":"Fri, 09 Jan 2026 18:06:58 GMT"},"fingerprint":{"sha1":"72:6E:30:16:23:D8:AB:5A:71:0B:32:58:3F:C7:61:74:65:19:FB:8F","sha256":"5B:FB:9A:26:C3:54:56:6E:0A:4B:A6:0C:10:09:65:07:94:3E:14:A4:41:20:D1:E6:3B:19:B9:1C:68:79:F3:54"}}},"request":{"raw":"GET /d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d HTTP/1.1\r\nHost: videeq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:23 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 40189\r\ncache-control: public, max-age=3600, s-maxage=3600, must-revalidate\r\ncontent-security-policy: frame-ancestors 'self' https://videeq.com https://uideo.my https://montok.live;\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOW-FROM https://videeq.com https://uideo.my https://montok.live\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FujiblcwZ7PAXCvC2f9VL8v7MtcAoo1JARuvFqP04w6%2FM5j0WaHHziKq%2FoOFSmxAXMCL0SF6zI24bZ7fhXNMscBqcaF3lBq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9934aac9290eb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (23187)","md5":"5d69d39382037fe7cb399ef36462f6e6","sha1":"a13e34cbfe146fcf47065ff2e116881e87ee82c6","sha256":"66dcca46c386cc4d9416a5f7062e03af054b761ca499185a1ce96f2366c309bc","sha512":"3de541f0b40e1ca1c31faefa5337941068090bba1e028ae2906a292eddb44c101b2679730d14177777f0c7cb68a13ab95de15e3cdb56172a8af2ec1db66450fb","ssdeep":"768:xyWdDb88+/sH32GLGh7f9+xTt9u0svOt60t7ECO0F:1b8vkX2nh7frJvOt6lO","tlshash":"32038cb26d6a262d1753b0d5ad572205c501804b86eebd94f45e7ae0bfb0dfd8c33ba0","first_seen":"2025-10-23T22:28:53.938367Z","last_seen":"2025-10-23T22:28:53.938367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1249,"timings":{"blocked":41,"dns":20,"connect":1,"send":0,"wait":1162,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"videeq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/multy","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2078\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 9033\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80900,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ee2b712430a3b53e7311f4844a06fc22","sha1":"ee4f4201dc0118e33db41f83b69a9b7eae5e2d1a","sha256":"dec0aab01594bca6597417fbd1502349de972800675380aa1869286b22346a58","sha512":"d2621097ddbe53b78460484438d9f0ee8c15b2fecb7c2f2972fd1aa12a700a74f468409647f31bd594742486107ea973435d6dba25e453a07c87bb4d0ce09ff3","ssdeep":"768:FDVmiX3ex1NRmex1NRImiX3ex1NRMmiX3ex1NRQmiX3ex1NRamiX7nmiX3ex1NRV:33fx3F3p3f7b3e3m2Ckc95lRELklk/","tlshash":"c283af8309cb5e5df8d6b61fb249bd8077c4da679fd0849dc9b9442be84e36b204a30d","first_seen":"2025-10-23T22:28:53.939653Z","last_seen":"2025-10-23T22:28:53.939653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Fri, 23 Oct 2026 22:28:26 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-05T06:35:49.702084Z","times_seen":10797,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":100,"dns":40,"connect":19,"send":0,"wait":19,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42622\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:34:20 GMT\r\netag: \"6765644c-a67e\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x202, components 3","md5":"4b74ad5ccb083046112cffd63a4335e8","sha1":"673cca7b51ea6cc0f13c8371ead2822827d07d90","sha256":"4b91c0ff427adc8d7c749fbf845e339851b50bc36c15e1c0df9c1871f49d563b","sha512":"8a437f2d04b86c51e1c44a8cedd09c4b8c9b3bb2bc2fdeb0731f31152f0d21ec47138e9a55994c9bb09694950bc26da7c08bd2d2b25286e961df4b4fc0c76e42","ssdeep":"768:rjVYBbrQ7ay+W2bGXksBSPmoUWnW1L5xqV296CZvWYbNfeQdUxYaqnVM5:WEezSTBSHUWnW1v55fz5/n65","tlshash":"0b13f2d29bc1c0d26de644d702d4711c2f529283bde2979944b1b3bbff1058ebb55878","first_seen":"2025-08-11T16:28:38.282328Z","last_seen":"2025-12-21T08:14:57.666818Z","times_seen":127,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":59,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-819234363%3A1761258505965502\u0026hl=en\u0026ifkv=ARESoU0BpAlnNs73IgmBXvbQos4tVRiaRSMRQU30XqhGohMBsnFz9qCMHaVUj8KIA0vqGTVgKy8I\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-819234363%3A1761258505965502\u0026hl=en\u0026ifkv=ARESoU0BpAlnNs73IgmBXvbQos4tVRiaRSMRQU30XqhGohMBsnFz9qCMHaVUj8KIA0vqGTVgKy8I\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-xAaD-RWU7DLuihhzOzTThw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Mp9mjkH_buc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=aafb908b-bb82-42bb-ba2d-8515e6e713f8\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=1.168.25","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?event_id=aafb908b-bb82-42bb-ba2d-8515e6e713f8\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=1.168.25 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.video-src.com/style.min.css","fqdn":"cdn.video-src.com","domain":"video-src.com","tld":"com"},"ip":{"addr":"104.18.4.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video-src.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 06:32:31 GMT","end":"Fri, 28 Nov 2025 07:32:28 GMT"},"fingerprint":{"sha1":"19:11:8A:33:8E:3B:76:65:59:24:1E:74:B3:A0:32:FD:0D:85:DF:EE","sha256":"38:37:89:64:C4:B5:CA:C1:4E:61:0B:D0:66:78:59:CD:EC:E5:D9:BC:D2:5C:5F:D1:AA:26:BE:2D:95:18:D5:65"}}},"request":{"raw":"GET /style.min.css HTTP/1.1\r\nHost: cdn.video-src.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:23 GMT\r\ncontent-type: text/css\r\ncf-ray: 9934aad1ef0cb4fa-OSL\r\nlast-modified: Wed, 23 Jul 2025 10:02:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880b325-77bd\"\r\nexpires: Fri, 24 Oct 2025 10:28:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 12343\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30653), with no line terminators","md5":"df08ae02ef1527299902f29d6091779c","sha1":"6b9b67be3a44de2963c6dfa314faf145c29488db","sha256":"b872889b10e74aa60e3010b4e14633ca0eab9d7da5c1260f25bd6e7503496a0a","sha512":"27ce102ced7d03b4c8fb9c600be639deb1dd04398b579775a6b82c16f4f80821e2665397d36addbb79bb3433aea705cf83daca5598fa28312b5e55e17a16faeb","ssdeep":"768:pTCdikL60L2HSZJ212PypKBNXUIsppIxHv7:pTsL2HSZMou5IxHj","tlshash":"4ad2b5189d2d126c61fe81a7b4c14feb3539d231d1160fafe53f7aaccdc845a1aa7608","first_seen":"2025-06-17T20:06:29.134784Z","last_seen":"2026-04-04T23:06:56.902369Z","times_seen":393,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":50,"dns":20,"connect":3,"send":0,"wait":14,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lg.sizzledoutfort.com/rmPGpYeuWzGQI/121024","fqdn":"lg.sizzledoutfort.com","domain":"sizzledoutfort.com","tld":"com"},"ip":{"addr":"172.255.106.53","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lg.sizzledoutfort.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 06:27:37 GMT","end":"Sun, 11 Jan 2026 06:27:36 GMT"},"fingerprint":{"sha1":"65:1C:9C:61:17:F1:0B:B1:16:7A:35:19:CA:87:78:39:68:B3:D1:D1","sha256":"9E:6A:6C:72:33:0C:3F:9D:1A:98:66:68:97:75:CE:25:90:05:23:29:49:41:A8:93:C1:3B:0F:CE:50:FC:0C:95"}}},"request":{"raw":"GET /rmPGpYeuWzGQI/121024 HTTP/1.1\r\nHost: lg.sizzledoutfort.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://videeq.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 24-Oct-2025 22:28:24 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyD0LglAYhmHPixyIpHjAodGlVbRUcAnJOR0aGprEQgTxlaP2MfVX2puif9Xa1JYN93DdmqaROQWVDYzQtUPH9ha263sQBShJQXkNmbA6Z1cIBXKWIFVjnLYVWzH3dTf8HPrfECUm66q8WFuu%2Bq7kugUNjWJWDausO0I0UoA6lgRqD6YGcZIzUJUZ0ebzfhX37wA2ovntud%2BtHqCmhe74QfADt0Iqrw%3D%3D; expires=Fri, 24-Oct-2025 22:28:24 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-05T08:41:08.428178Z","times_seen":14845,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":110,"dns":79,"connect":17,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"lg.sizzledoutfort.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 10:18:16 GMT\r\nexpires: Fri, 23 Oct 2026 10:18:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43808\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-05T08:58:23.340724Z","times_seen":16309,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.multstorage.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 02:54:50 GMT","end":"Mon, 22 Dec 2025 02:54:49 GMT"},"fingerprint":{"sha1":"A7:F0:92:B0:60:17:0F:89:16:0D:51:27:DB:FE:C6:A0:D9:39:15:0F","sha256":"D8:BB:7C:8D:91:E4:6A:95:F9:86:5F:70:CE:DE:E9:AA:14:7C:0B:84:56:FC:96:09:E6:62:FD:5E:68:8E:E2:11"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\nalt-svc: h3=\":50944\"; ma=2592000\r\nserver: Caddy\r\ncontent-length: 0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":99,"dns":38,"connect":1,"send":0,"wait":21,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notification.tubecup.net/med/info?tag_id=114039\u0026rule_ids=593327","fqdn":"notification.tubecup.net","domain":"tubecup.net","tld":"net"},"ip":{"addr":"88.198.209.15","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"GET /med/info?tag_id=114039\u0026rule_ids=593327 HTTP/1.1\r\nHost: notification.tubecup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/66ab0088b9f87b95f2337f72d5a98dbe.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /66ab0088b9f87b95f2337f72d5a98dbe.js HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 22 Oct 2025 11:38:54 GMT\r\netag: W/\"68f8c24e-1808e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Oct 2025 22:33:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b52fbcbf866adfb9aec685b26283f5e","sha1":"f548e5f2bdf5c6a35608ec3020b08b9f92da547c","sha256":"cae17bb17fb027384185a2f4ff0a02a0f40f507da4d403e7cada8fd26b37e3b0","sha512":"d21dc100fb1126bf161965d98180d406720febf70199041aee3a28c60c6e74e9133d14c1a75b008bfcd4178aad276c4831c0b8a454b4490d9e9ececb45b97c47","ssdeep":"768:ubVWcprcLsdOKoFiXE9VR4vlbAelZ8JnN2m3sfy2iXqX+dq3KF9x811MS/SO+dtP:WkmOKjE4mM8JTRc5m5vh","tlshash":"69a328cdb7c2707082a7a4ba902f051ab33e29197849442cf965c9d13dae94f9327f7d","first_seen":"2025-10-22T13:14:11.436076Z","last_seen":"2025-10-24T12:56:15.024127Z","times_seen":38,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Fri, 23 Oct 2026 22:28:26 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-05T06:35:49.70008Z","times_seen":10786,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":106,"dns":39,"connect":19,"send":0,"wait":19,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRBBHD087X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-RRBBHD087X HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\nexpires: Thu, 23 Oct 2025 22:28:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142163\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"56a4a645f04cb1daaef37277482f2d44","sha1":"6c34dca73c0beb649553fbbd2a7e56fdeca7496e","sha256":"f5126c08cdc3df93db008e19fe3e29140de94bc5271256739785517c972ec195","sha512":"4c0ee1425d7a0d211df3cca503287075d0bf5089b6de7d9d10efc90f0c1013c61741d5afbca3b350a25179cb043ae7e0b0b721edfa74e6b2173e800d8551a651","ssdeep":"6144:RBjyJBX1c8429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjMc:fWJBlO29Z8nP58DG/mYl5X","tlshash":"d09419ce73d674269396f078503f018ba57b29a2b45cc896f189cce42d74a9a0277f7c","first_seen":"2025-10-23T19:26:14.907034Z","last_seen":"2025-10-23T22:28:53.94472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":178,"dns":0,"connect":22,"send":0,"wait":44,"receive":59,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.251.38.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://videeq.com/ip129jk?id=6665686b717563376d736f7a","date":"2025-10-23T22:28:24.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"57:4F:37:52:35:3F:6C:48:14:D9:58:C8:25:71:FC:8E:BA:C6:9D:D7","sha256":"12:75:2E:3D:26:85:EA:B7:93:6B:DE:18:A4:AB:5B:9E:10:E7:92:FC:4E:D9:FD:CA:D3:1C:9D:72:D0:73:84:3A"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://videeq.com/\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\nexpires: Thu, 23 Oct 2025 22:28:24 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 14019180321247881510\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54301\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":160395,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4830)","md5":"68ebb810e55113d628765870304ac5af","sha1":"a0439936913ef0721d56cd08f4fa5b8feb292ec7","sha256":"b10c13b76df1e5669b3296e1cddb963e32dec7e6a3ede8870634a4844ef56d96","sha512":"30f7694258ea2839df5df74f8e7955c8b271d5c5f2322ec5983051b62e66a41f8778afa071a6b7ff81c86586d43be10977f9a29d9f9de673bc13409c13a44563","ssdeep":"3072:hy4PIqhFzNPPiSHugJhXU5D6+tqiZwBbTwVMkuLxrKF/WcXZD4SnsjeDC+h5sr/U:hy4P/hvPPDHugbXU5Dn0iZwBYmkulrWZ","tlshash":"20f3f9d971a2bcb38b6399e5006f4107b42da863f00cc8b0f1d8ddd97a2496552b7fad","first_seen":"2025-10-23T22:28:53.946298Z","last_seen":"2025-10-23T22:28:53.946298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":102,"dns":1,"connect":20,"send":0,"wait":38,"receive":30,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/9ed6bb09d5a0575e67911182869e6090/114039?version_name=c\u0026domain=videeq.com","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /9ed6bb09d5a0575e67911182869e6090/114039?version_name=c\u0026domain=videeq.com HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Thu, 23 Oct 2025 22:33:24 GMT\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"221b4aee51e3a2dfd7eaad05cd8d2dd5","sha1":"46321ccd0fec514c1f1aafc529ff132fa71ae95f","sha256":"b4f3d933d53c4680bf8a6dd7adebf5441721160427ffa4a937b447170bc1ca85","sha512":"8b0884d3278744c8333bd378f4cf96c3ab4dd290fb1f04bc714437a663ef7cbadc7d00def6a2078763cfec9d8d2c449c7ccb2b09f4e614a6a9858ee87e3c92d6","ssdeep":"","tlshash":"bd7188e09ab0c8f6c1f0038758c73f4955ad126b60c4b98af57e89ac09ee9561f5e11b","first_seen":"2025-10-23T22:28:53.947418Z","last_seen":"2025-10-23T22:28:53.947418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/multy","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2078\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 8788\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80698,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d1008e5f14341ac823dc7b8c9b4ff077","sha1":"0a79c4d5e241c3b040c5e1a0333a6dc37055d803","sha256":"216b62030392f495d89267d0f52b785f40e51ba2c8ce8c37720bd8af75393b32","sha512":"3e86401b31488cf72740e6382845b6a3f516db183c69c66ec2ebe47c5600c47f1990faf56733fb99cb96e90397a6c1c6ce1c104da3244cdc5d5405b8df35dab7","ssdeep":"1536:OO7jQ787A7yYh7G702aVZ9VXVrVdCLVsVO:OOAo8+Yhqbz","tlshash":"1473af920a8b9d2af0de211ff24978913bc4e71bdfd540ddc9b1812bd5ce367218a64e","first_seen":"2025-10-23T22:28:53.948497Z","last_seen":"2025-10-23T22:28:53.948497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/show/?tag_ab=c\u0026site_id=31418776\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=388464194\u0026sid=3548688559\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=63.42073893840089\u0026kubik_score=63.979\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT1odHRwczovL3R1YmUtdG9hZC5jb21cdTAwMjZhdWN0aW9uX2lkPXslYXVjdGlvbl9pZCV9IiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiMTU1MDg5NTU0MzJiMmE2ZTM0ZTA4MzU2MmI0OTYzZjAiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg2OmlucGFnZV9hZHVsdF9ocV92Mjo3MzQxODc3Njp0cnVlOiIsInYiOiIiLCJ2ZiI6IiJ9.bN_1hUwKlRkVBT9NeVHqYsdxpAxSm5cx5kICiispvJk%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=drkObwlgnkjcKRRMgri_QlKSs6fefCZwXfG5gXi8rMBXf4zJ9-E0C2xHNPYZpv_eaFBwBx3SHZj2qGpCX0Ir61qGdJ9m2rBFO5WrF9lamgeaisALmxWpwvkFxoh0uLq9ZjMSXOWgk9byFm24A3lzPdl7RwNN0QSH90UXqy7K7vbISMu2W54QXnl4MAppSNdSUY7-tjz9z4_lnMcZtOykY_zX4LDbYJl5ri3_1kffJijfCHduPoXN1s-1ZgmVs2lVwnOxSrXVC2jdfh-WRGkqA4KJERzNAxLGH_sCFAtPkNO4rVqXse4Ry2wnhn3zdyhCyH207RW4HYDepbhADZG4rtrN1majTTAKTTtIMcbHTe6OvPd0VzjpDXk7GDG0eSxU6cHpox5oVUZmYBbb23iXw44IIHN-Re7OCFV2zXVYELWXaxCmIYcSmmRt_iBBiVZD9q5bB9sLQS7jKYY1WBnlDqeQZP8Gx973ZHWYJ3otv4_BQIUyN5Ztdv5oBtNHayd0pLU3e_VJRV_x920foo7-NmhKXLFDvPj7M6re2Wi3tdqw-IgcqgpGAK8kbosES6-hdyTTp_eHRAAXbFRjyp4n5_RwSVeuLYba_uyzDROYaxATHJrKwvg1OcdS5w1uzP5caybfaXRspggthJxhaKOxwOG1gMIRcJfFA-VFfaeNP18pBoP_ATbqzrietC5anjImwiGZe6lYRl_tDwXhif0ac-i6v2dRU3PYL3fd01hAH2bMQ9kFlbndS_1Xaps8XEYS8BnzzQoy_eL10L2KXWauMjQqzFtTtu8ZyHxJIYS7kya7bFJz6eIJi5yBINVE6p4h9qRA-157P2kvzvXDC1Lqz3BplmyyZgNEvvkWoYrfsHstKsdgRaZwM8p7_ONTj6a5do-_zbKF-gjrr_MoBTuaSVV4QJdeVGuixrPg1DLhCIqnLxUdIPdtQhTlJF6zfA5SCsqlTI5vuiZYlnLYxeZGviKR812TzE__5y2dDp4Uc-WsTFTBgOrhlN1eZROu5oKB9gboIlqvvXZFcLPxbs23vUG1ya88osrkq0xC4a7EN6Zn6f-yDz6VTZZzs0vFWXCOJPLczqLJXAsdIAR6DFieK1hYO8dHA-dyIlqN96onVf_mYC0nUEM_sl-aRB6mw9BsFg3nTo3FaovGyb-GC7TdWIrh8QZiTCAl77vMqVYyvBkXNM3PGv7qdDEP13zSp95I9bM2cbmWO7rY8uLb0ADLVoNF-lkR2cPmmIF_qG4gY-ipE02tkV0PIjiJXht9q_dEjdiPeRtyoWVibl_O0EidYaeE1lo6hR7REZ1lPOCgUgOT458kA-sO07JoHFK14ZioYpEZwsGnc8DrWc5v6Koyg4962_LKpT_6pwXroufM8RB6S0SpnWqD3IyTO8MdF5Y1rs2ZlqIhU8um58BDw__6ePfafOB5RXKSIFYVrkyXgs3fwC8r7XsVu9aGpj493L3U32kFrrIo1X37H651HMMbo_NKv31AAdVauWertCsBmpLjerhjkqTX9PaW0fJ2vF8cdZAurCnaghP48EyRx2GrDOC7olu_mKiYZOBgyo2LOTBtyk2TazZqcRupfqaIP3nJ55mj3aKYBY0R94Fch1K6jh6-OnQlojkW9nERVTY6nfLz2aNWcy0eVizYuISH_RG9x0TlaBXpG4D-sjn6TsCUY2fCDDaeik0H_dR_CSE8AIispDqvzQh_p-uM-A5FV7SJOPHrIR40zWfnJAUupkNFtfRX1DRkRqtjz6fcda5oVdvJmrjlKyLCn_c\u0026ext_cid=81347\u0026px_id=73418776\u0026min_cpm=0.005720033030846881\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=1672771399106668381\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00017310006406140183\u0026cpm=0.00018182779419443094\u0026verify_hash=c6585d9de23862776c230fe7cc99120a\u0026verify_hash_v2=a42faebb2335e8aa912f5cab6356ae95eac61ce6de7ee2621f5a4bc291c60450\u0026is_native=1\u0026real_bid=2.570400059223177e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=98,70,4,90,148\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761344905\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-1-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002570400059223177\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.006734362747941888\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=7342825\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=85f35548-c614-4961-9376-c53fef208f54\u0026prev_step_diff=606\u0026st=0.02","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=31418776\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=388464194\u0026sid=3548688559\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=63.42073893840089\u0026kubik_score=63.979\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NjEyNTg1MDU2OTEsImJ2IjoiMTM0LjAuMCIsImNyIjowLCJjcnMiOjAsImNyc2VnIjoidW5rbm93biIsImNzIjoiVzNzaWJDSTZNQ3dpZENJNkltNXZibVVpTENKa0lqb3dmVjA9IiwiY3RwIjpmYWxzZSwiY3UiOiJpcCt1YSIsImRwIjoiZGlyZWN0IiwiZHQiOjE3NjEzNDQ5MDU2OTEsImVjcGEiOjAsImVyIjoiMTY3Mjc3MTM5OTEwNjY2ODM4MSIsImVzIjoiMTc5MTAiLCJpIjoiNzM0MTg3NzY6MTg2OjkzODE5OTM4ODI0ODI3ODA1OTQ6ODEzNDc6MjE1NzIyOjEwMzg3NzM2MzQ5MDU2NzEzMzI1OjE5NTEwOjoiLCJpY3MiOjAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6Ijo6IiwianRpIjoiNmFkNzU2ZmEtNTk0Mi00M2QwLTg1YzktYmJiZWJmNGEyODY2IiwicCI6MC4wMDAwMjcsInByIjpmYWxzZSwicnAiOjAuMDAwMDI2OTk5OTk5OTk5OTk5OTk2LCJzIjpmYWxzZSwic2QiOi0xLCJzcCI6Int9IiwidCI6ImlucGFnZV9hZHVsdF9ocV92MjpjcGMiLCJ0cCI6MC4wMDE0ODIxNTc4NTU5Njk2MzgsInRyaWQiOiJ0Y2ItZHNwLWh6LTEyIiwidSI6Imh0dHBzOi8vcHVubWV0cmF0cy5jb20vNC8yNTk3OTk_dXRtX3NvdXJjZT1odHRwczovL3R1YmUtdG9hZC5jb21cdTAwMjZhdWN0aW9uX2lkPXslYXVjdGlvbl9pZCV9IiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiMTU1MDg5NTU0MzJiMmE2ZTM0ZTA4MzU2MmI0OTYzZjAiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg2OmlucGFnZV9hZHVsdF9ocV92Mjo3MzQxODc3Njp0cnVlOiIsInYiOiIiLCJ2ZiI6IiJ9.bN_1hUwKlRkVBT9NeVHqYsdxpAxSm5cx5kICiispvJk%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=drkObwlgnkjcKRRMgri_QlKSs6fefCZwXfG5gXi8rMBXf4zJ9-E0C2xHNPYZpv_eaFBwBx3SHZj2qGpCX0Ir61qGdJ9m2rBFO5WrF9lamgeaisALmxWpwvkFxoh0uLq9ZjMSXOWgk9byFm24A3lzPdl7RwNN0QSH90UXqy7K7vbISMu2W54QXnl4MAppSNdSUY7-tjz9z4_lnMcZtOykY_zX4LDbYJl5ri3_1kffJijfCHduPoXN1s-1ZgmVs2lVwnOxSrXVC2jdfh-WRGkqA4KJERzNAxLGH_sCFAtPkNO4rVqXse4Ry2wnhn3zdyhCyH207RW4HYDepbhADZG4rtrN1majTTAKTTtIMcbHTe6OvPd0VzjpDXk7GDG0eSxU6cHpox5oVUZmYBbb23iXw44IIHN-Re7OCFV2zXVYELWXaxCmIYcSmmRt_iBBiVZD9q5bB9sLQS7jKYY1WBnlDqeQZP8Gx973ZHWYJ3otv4_BQIUyN5Ztdv5oBtNHayd0pLU3e_VJRV_x920foo7-NmhKXLFDvPj7M6re2Wi3tdqw-IgcqgpGAK8kbosES6-hdyTTp_eHRAAXbFRjyp4n5_RwSVeuLYba_uyzDROYaxATHJrKwvg1OcdS5w1uzP5caybfaXRspggthJxhaKOxwOG1gMIRcJfFA-VFfaeNP18pBoP_ATbqzrietC5anjImwiGZe6lYRl_tDwXhif0ac-i6v2dRU3PYL3fd01hAH2bMQ9kFlbndS_1Xaps8XEYS8BnzzQoy_eL10L2KXWauMjQqzFtTtu8ZyHxJIYS7kya7bFJz6eIJi5yBINVE6p4h9qRA-157P2kvzvXDC1Lqz3BplmyyZgNEvvkWoYrfsHstKsdgRaZwM8p7_ONTj6a5do-_zbKF-gjrr_MoBTuaSVV4QJdeVGuixrPg1DLhCIqnLxUdIPdtQhTlJF6zfA5SCsqlTI5vuiZYlnLYxeZGviKR812TzE__5y2dDp4Uc-WsTFTBgOrhlN1eZROu5oKB9gboIlqvvXZFcLPxbs23vUG1ya88osrkq0xC4a7EN6Zn6f-yDz6VTZZzs0vFWXCOJPLczqLJXAsdIAR6DFieK1hYO8dHA-dyIlqN96onVf_mYC0nUEM_sl-aRB6mw9BsFg3nTo3FaovGyb-GC7TdWIrh8QZiTCAl77vMqVYyvBkXNM3PGv7qdDEP13zSp95I9bM2cbmWO7rY8uLb0ADLVoNF-lkR2cPmmIF_qG4gY-ipE02tkV0PIjiJXht9q_dEjdiPeRtyoWVibl_O0EidYaeE1lo6hR7REZ1lPOCgUgOT458kA-sO07JoHFK14ZioYpEZwsGnc8DrWc5v6Koyg4962_LKpT_6pwXroufM8RB6S0SpnWqD3IyTO8MdF5Y1rs2ZlqIhU8um58BDw__6ePfafOB5RXKSIFYVrkyXgs3fwC8r7XsVu9aGpj493L3U32kFrrIo1X37H651HMMbo_NKv31AAdVauWertCsBmpLjerhjkqTX9PaW0fJ2vF8cdZAurCnaghP48EyRx2GrDOC7olu_mKiYZOBgyo2LOTBtyk2TazZqcRupfqaIP3nJ55mj3aKYBY0R94Fch1K6jh6-OnQlojkW9nERVTY6nfLz2aNWcy0eVizYuISH_RG9x0TlaBXpG4D-sjn6TsCUY2fCDDaeik0H_dR_CSE8AIispDqvzQh_p-uM-A5FV7SJOPHrIR40zWfnJAUupkNFtfRX1DRkRqtjz6fcda5oVdvJmrjlKyLCn_c\u0026ext_cid=81347\u0026px_id=73418776\u0026min_cpm=0.005720033030846881\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=1672771399106668381\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00017310006406140183\u0026cpm=0.00018182779419443094\u0026verify_hash=c6585d9de23862776c230fe7cc99120a\u0026verify_hash_v2=a42faebb2335e8aa912f5cab6356ae95eac61ce6de7ee2621f5a4bc291c60450\u0026is_native=1\u0026real_bid=2.570400059223177e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=98,70,4,90,148\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761344905\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-1-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002570400059223177\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.006734362747941888\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=7342825\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=85f35548-c614-4961-9376-c53fef208f54\u0026prev_step_diff=606\u0026st=0.02 HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=114039","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"OPTIONS /fp?tag_id=114039 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://videeq.com/\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Thu, 23 Oct 2025 22:28:25 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://videeq.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":92,"dns":8,"connect":28,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:37 GMT","end":"Wed, 24 Dec 2025 14:35:36 GMT"},"fingerprint":{"sha1":"45:9C:C5:B0:D8:76:3F:BA:4B:3A:7A:47:93:65:30:95:DD:92:AF:CB","sha256":"31:5E:7E:B1:E0:22:CE:95:3B:A8:33:71:E6:32:80:DE:88:EB:4F:25:93:F9:66:CE:01:A0:31:61:3F:B3:A9:52"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:OSBpFyVGiAEl53gc4VQWqmJZLkgLYg:kmlbPTn7T11Gyb6O; Expires=Sat, 23-Oct-2027 22:28:25 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-819234363:1761258505965502\u0026ifkv=ARESoU0mmBZ9o8LH43HpC_u2Mco0WGnuL6iAZI88sOZ6jhmSXhOKjsi1yFtkgjeTpS8lC4D-_Z6X0Q\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: script-src 'nonce-g-0EeK98ukZflHPwVp1N1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":110,"dns":0,"connect":28,"send":0,"wait":36,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/show/?tag_ab=c\u0026site_id=31418774\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=357529620\u0026sid=3429276779\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=68.14498795679906\u0026kubik_score=68.808\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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--%26bs%3DTVRjMk1USTFPRFV3Tlh3eE5URXhaalkwWlRkaU5UVm1OVEptTmpnd01qTXdabVk1TnpKa00yUXpZZy0tfDR8MC4xfDcwfDcwfDB8T0t8NTBkZTE5NmVkMWFiOGExNGFjZjM1MTg5MDM4Nzk0YTA-%26cb%3De2e_68faac09a94b34.37257283\u0026icons=iMyBk6yxVYrIRobgvVWVRJBFHFwbicn9LZzArZjhL17KJb5wtxcf-BezjRX0IMpv0qhJkzmbryoT-NPHWyKDPDcoHWDPX5YCseoeh0nDoGjQ4Q4ERCUfwZzXWInix2arV4hpNlfPMDe0eE9HmqpSk2_TC3R6-4EQZMaEhA3LV_-V0bfdwA\u0026ext_cid=7754042\u0026px_id=121457703\u0026min_cpm=0.036408737368128816\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=7536516507400353963\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.02091404827515824\u0026cpm=0.0009776666892986666\u0026verify_hash=8d4db118eb8717ea9715bb354ddf614b\u0026verify_hash_v2=2f2a1516a6b961d4dd3aaca1350b604634d047a4d3a91e2eff4c12eed7c4e0fb\u0026is_native=2\u0026real_bid=0.00048790415729999995\u0026original_bid_usd=0.00048790415729999995\u0026original_bid=0.00042086099999999997\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,89,20,27,150,0,108\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00048790415729999995\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000004879041573\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.0020038088929369875\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=11042872\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=f584dd9e-a468-48e9-b1c9-3b31191dfb16\u0026prev_step_diff=434\u0026st=0.02","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=31418774\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=357529620\u0026sid=3429276779\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=68.14498795679906\u0026kubik_score=68.808\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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--%26bs%3DTVRjMk1USTFPRFV3Tlh3eE5URXhaalkwWlRkaU5UVm1OVEptTmpnd01qTXdabVk1TnpKa00yUXpZZy0tfDR8MC4xfDcwfDcwfDB8T0t8NTBkZTE5NmVkMWFiOGExNGFjZjM1MTg5MDM4Nzk0YTA-%26cb%3De2e_68faac09a94b34.37257283\u0026icons=iMyBk6yxVYrIRobgvVWVRJBFHFwbicn9LZzArZjhL17KJb5wtxcf-BezjRX0IMpv0qhJkzmbryoT-NPHWyKDPDcoHWDPX5YCseoeh0nDoGjQ4Q4ERCUfwZzXWInix2arV4hpNlfPMDe0eE9HmqpSk2_TC3R6-4EQZMaEhA3LV_-V0bfdwA\u0026ext_cid=7754042\u0026px_id=121457703\u0026min_cpm=0.036408737368128816\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=7536516507400353963\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.02091404827515824\u0026cpm=0.0009776666892986666\u0026verify_hash=8d4db118eb8717ea9715bb354ddf614b\u0026verify_hash_v2=2f2a1516a6b961d4dd3aaca1350b604634d047a4d3a91e2eff4c12eed7c4e0fb\u0026is_native=2\u0026real_bid=0.00048790415729999995\u0026original_bid_usd=0.00048790415729999995\u0026original_bid=0.00042086099999999997\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,89,20,27,150,0,108\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00048790415729999995\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000004879041573\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.0020038088929369875\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=11042872\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=f584dd9e-a468-48e9-b1c9-3b31191dfb16\u0026prev_step_diff=434\u0026st=0.02 HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enrtx.com/get/","fqdn":"enrtx.com","domain":"enrtx.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder-base.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 07:32:10 GMT","end":"Thu, 04 Dec 2025 07:32:09 GMT"},"fingerprint":{"sha1":"50:EA:C1:7E:9B:20:00:A4:62:CE:FD:F9:FD:D2:E9:BE:77:FE:08:47","sha256":"81:9C:C4:CA:23:66:01:BB:6E:7A:21:04:B3:6B:69:EF:E7:F2:C5:8D:CB:6E:F7:3D:A2:3C:90:1F:BE:0B:6F:48"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: enrtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://videeq.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1816\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 3030\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9408,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da1230bc73d03f415e1e9fe044fa8c3f","sha1":"71dda38ee5b348789e1db05a787c06855831ee34","sha256":"843e8e4dbf96e0eb875e5cfe619e7556298cc9479b9c4c419a520061d2260023","sha512":"39acc91e0824519a722ca8afa8458d63acc88c4b3229c37f3b2249cd96dee5649d293d1288541e4088b0eaa3c301d0c0789aecdf556f58a59e1b2bf0bc72dfeb","ssdeep":"192:pDzXXbyBetPcLPG4XXtcsyLPG4XXRDzXXbyBetPvcs+:p3XXbAbK4XXysyK4XXR3XXbA7s+","tlshash":"461229435997de316abeb4c7e2f7ea248383d5b21a43d9dfe8a35958884875500c6f0c","first_seen":"2025-10-23T22:28:53.94996Z","last_seen":"2025-10-23T22:28:53.94996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":107,"dns":27,"connect":25,"send":0,"wait":234,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.video-src.com/bootstrap.min.css","fqdn":"cdn.video-src.com","domain":"video-src.com","tld":"com"},"ip":{"addr":"104.18.4.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video-src.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 06:32:31 GMT","end":"Fri, 28 Nov 2025 07:32:28 GMT"},"fingerprint":{"sha1":"19:11:8A:33:8E:3B:76:65:59:24:1E:74:B3:A0:32:FD:0D:85:DF:EE","sha256":"38:37:89:64:C4:B5:CA:C1:4E:61:0B:D0:66:78:59:CD:EC:E5:D9:BC:D2:5C:5F:D1:AA:26:BE:2D:95:18:D5:65"}}},"request":{"raw":"GET /bootstrap.min.css HTTP/1.1\r\nHost: cdn.video-src.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:23 GMT\r\ncontent-type: text/css\r\ncf-ray: 9934aad1ef0fb4fa-OSL\r\nlast-modified: Wed, 23 Jul 2025 10:02:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880b325-2095b\"\r\nexpires: Fri, 24 Oct 2025 10:28:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 36\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133467,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"90a5d23b522931f395c29781a8e9340d","sha1":"1d4f487027cc96b25900c5f48ad14bd646ec5584","sha256":"038e3cb6a8bdde488fa440cf253446d672db75b94763eb5e23b997cfd6d9955e","sha512":"331b3b71b01346a775543c2ba6c45200c9fa2a8221d4ee79c23dbe8833e87aae01c0b0c6e9b5ac3553de3cf4dd3777369a9df16d29e7629c0bc21dd4d2b2f650","ssdeep":"1536:l61ZIJUUAX8aqEBsENWcuQWZfcrK/gxgLw7UM7asa+FB+LGHUtZI:lOGVqWZffuglM7asa+FB+LGHUta","tlshash":"c7d3b7a6f5a0312de5a7c65da4d0bafa052f8255d7220ffbf427276447891cb0a73e0c","first_seen":"2025-06-17T20:06:29.12338Z","last_seen":"2026-04-04T23:06:56.900001Z","times_seen":393,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":55,"dns":21,"connect":1,"send":0,"wait":11,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/3088b62ec10511d231ef1501250015af.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /3088b62ec10511d231ef1501250015af.js HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 10:58:05 GMT\r\netag: W/\"68f615bd-24858\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Oct 2025 22:33:24 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":119,"dns":70,"connect":21,"send":0,"wait":41,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/ip129jk?id=6665686b717563376d736f7a","date":"2025-10-23T22:28:24.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 9934aad48bc57131-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 161328\r\nexpires: Tue, 13 Oct 2026 22:28:24 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cGs6QA9ioS9tKLfcvaZfvqApiWTjqvlVnBIpnDU7maqD0MfmSBWr6xNIFfWMg2nrsmcz5GdTmjmCAUBG77XLjI691w%2FykZ7wmqrYYnQLROTjCMS0D3LlMTerC54i8ljvvlcF4Q6W\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-05T09:46:26.923303Z","times_seen":217983,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notification.tubecup.net/tags?tag_id=114039\u0026timezone_olson=UTC\u0026version_name=c\u0026med_script_id=82\u0026page=https%3A//videeq.com/d/zosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd","fqdn":"notification.tubecup.net","domain":"tubecup.net","tld":"net"},"ip":{"addr":"88.198.209.15","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"GET /tags?tag_id=114039\u0026timezone_olson=UTC\u0026version_name=c\u0026med_script_id=82\u0026page=https%3A//videeq.com/d/zosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd HTTP/1.1\r\nHost: notification.tubecup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 1248\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5887,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1ad659b22e4c265dd7f2f3c670ca8353","sha1":"2d80c2d8b4e0545c691359d20025c25eb5c455f7","sha256":"edde346cb9ff0dd92c4ef0695ac9a92a6b526d6cd5e34231932ae6c712474875","sha512":"f3762433abfd65d5f57cc9659370fc29dffa05adce0f6b3df816054a54ae4f951bf5d9ed9f1d762b058f22ac27a2e7a1cafe5831a02b1ce0d7ee76e01103390b","ssdeep":"96:Dhn/zQ5BNjgNdXqKSX3JYHT5BNjgNdXqKSX3JYuBNjgNdXkKSX3JYHvBNjgNdXkl:Dhn/zePjUdeJsPjUdeJlPjUdYJmPjUdC","tlshash":"1bc198a09ab4c4f7c1f00387a4ca3b4a95ad11ab60c47d4af47ec9a80dee9561f5a117","first_seen":"2025-10-23T22:28:53.962302Z","last_seen":"2025-10-23T22:28:53.962302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":128,"dns":45,"connect":25,"send":0,"wait":50,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"23dadea9c3.b60756935f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDkzOTc3Nzk5NDk5NTM0MDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjExNDAzOSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjU0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjF9","fqdn":"23dadea9c3.b60756935f.com","domain":"b60756935f.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"23dadea9c3.b60756935f.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:47:59 GMT","end":"Sun, 18 Jan 2026 02:47:58 GMT"},"fingerprint":{"sha1":"A8:D9:A1:05:5C:E4:55:7D:FA:60:49:7B:12:7A:F4:D0:5E:F2:7A:32","sha256":"CB:84:4F:CD:07:CD:AC:0A:40:48:A1:70:EA:D1:C4:8B:07:F7:8E:0D:1F:07:EC:C9:E3:21:AA:B2:5C:6A:40:1A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDkzOTc3Nzk5NDk5NTM0MDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjExNDAzOSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjU0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjF9 HTTP/1.1\r\nHost: 23dadea9c3.b60756935f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":147,"dns":97,"connect":21,"send":0,"wait":51,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"23dadea9c3.b60756935f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=114039","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"POST /fp?tag_id=114039 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Thu, 23 Oct 2025 22:28:25 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://videeq.com\r\nSet-Cookie: id=916206059277603675; Expires=Fri, 23 Oct 2026 22:28:25 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-05T07:14:52.513577Z","times_seen":6000,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":13,"connect":24,"send":0,"wait":25,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/5d64c41c1913b7e7714284325bf8824d.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /5d64c41c1913b7e7714284325bf8824d.js HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 14:10:40 GMT\r\netag: W/\"68f642e0-92593\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Oct 2025 22:33:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"2311e82f3d189db161218431ad8a4125","sha1":"125ed59cdbf2836a1c1618d3f8d34e48eab1e52f","sha256":"5d8f8bff163c95d8b4f8ea2d276fa6b2cf9fdb9ff4effa13f88b96bf5c7987b3","sha512":"33aa2327bd16176ef127a94636b71afd12e28b00c64d37aa30aaef20e1547f6b305a585d15d48373fb09527a9e02d18a49e33dcc6feb7e5d57b3c4fe715b9469","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWxhMs4hs:JONux6EHOJcFnagwxd+wl","tlshash":"51d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa483dbd54f625380","first_seen":"2025-10-20T19:02:16.064718Z","last_seen":"2025-10-27T11:05:04.085026Z","times_seen":25,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.video-src.com/embed.css","fqdn":"cdn.video-src.com","domain":"video-src.com","tld":"com"},"ip":{"addr":"104.18.4.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video-src.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 06:32:31 GMT","end":"Fri, 28 Nov 2025 07:32:28 GMT"},"fingerprint":{"sha1":"19:11:8A:33:8E:3B:76:65:59:24:1E:74:B3:A0:32:FD:0D:85:DF:EE","sha256":"38:37:89:64:C4:B5:CA:C1:4E:61:0B:D0:66:78:59:CD:EC:E5:D9:BC:D2:5C:5F:D1:AA:26:BE:2D:95:18:D5:65"}}},"request":{"raw":"GET /embed.css HTTP/1.1\r\nHost: cdn.video-src.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:23 GMT\r\ncontent-type: text/css\r\ncf-ray: 9934aad1df08b4fa-OSL\r\nlast-modified: Wed, 23 Jul 2025 10:02:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880b325-8db\"\r\nexpires: Fri, 24 Oct 2025 10:28:23 GMT\r\ncache-control: public, max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 31696\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2267), with no line terminators","md5":"504eba00908d13eb47133d1f92f8048a","sha1":"e0bd11d81b09ebd41f5e26548534bedacb34cee5","sha256":"4ca2d870794ea0d5902ed97a4c515f4462b63555a5d4e8a2ccca6e1011dfe4db","sha512":"f511eb4d109d2525574a220da3b22a3985b0d7eac3bd4850111abb0bce964cfd03d15f50630c7d95bd96862a5d5c075bdd3bee7b38b75a745cad32fdf6883580","ssdeep":"","tlshash":"ef414542bf481079b03be6956661a36d423c8089e3530f6d3079b3b087c78e6217774a","first_seen":"2023-12-31T17:45:35Z","last_seen":"2026-04-04T23:06:56.900937Z","times_seen":257,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":42,"dns":19,"connect":1,"send":0,"wait":15,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:23.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 9934aad19a577131-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 161327\r\nexpires: Tue, 13 Oct 2026 22:28:23 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g29YGbJPZWdhKO9EWCDGJ%2BZ6KU%2FbbdA4EdnUgsdEGLhxQzHuv1Fg1d3JlgGvIeYWZukQ0a7PwCaekQJJUhg1hQf068764Y0lI%2BDQggLcrIJj5ha4w1GUUZ%2FmoWQeXdngXdqcyBC0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-05T09:46:26.923303Z","times_seen":217983,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":13,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/911","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videeq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 17:07:02 GMT","end":"Fri, 09 Jan 2026 18:06:58 GMT"},"fingerprint":{"sha1":"72:6E:30:16:23:D8:AB:5A:71:0B:32:58:3F:C7:61:74:65:19:FB:8F","sha256":"5B:FB:9A:26:C3:54:56:6E:0A:4B:A6:0C:10:09:65:07:94:3E:14:A4:41:20:D1:E6:3B:19:B9:1C:68:79:F3:54"}}},"request":{"raw":"POST /911 HTTP/1.1\r\nHost: videeq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 15\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 28\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlcwqB1gDFidMljBNElA%2BBF3zMaOqINzP%2ByXcqBKkDE1sohgFk7wo5ks1YKYftmdD5UQCUQndiZs78%2BrXGt4jJYP2Mkvlei5Oek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9934aad42a9bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"49eeec0ce0b4c0c20ebb81f0d3c07b40","sha1":"e0b98a3a942787bc973ba82ffe98d7ca3642138e","sha256":"a09fb90f685ff72f1e17c651327ca2c2220fac845a58b2f99f8fef7fa09845c9","sha512":"d4a63b81aacf329b9be1041a5c39093a1d80a064c6a09be31747a14b9c41e377aef09b551f84badf41fa3cea564ceeb471076b1a4b1cc29eac56220b828a50e3","ssdeep":"","tlshash":"ae8000a880ac00b00088cac808008002003a0c2000c0282228820ca2a8828a2bafb82e","first_seen":"2025-10-23T22:28:53.967744Z","last_seen":"2025-10-23T22:28:53.967744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"videeq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"videeq.com/ip129jk?id=6665686b717563376d736f7a","fqdn":"videeq.com","domain":"videeq.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videeq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 17:07:02 GMT","end":"Fri, 09 Jan 2026 18:06:58 GMT"},"fingerprint":{"sha1":"72:6E:30:16:23:D8:AB:5A:71:0B:32:58:3F:C7:61:74:65:19:FB:8F","sha256":"5B:FB:9A:26:C3:54:56:6E:0A:4B:A6:0C:10:09:65:07:94:3E:14:A4:41:20:D1:E6:3B:19:B9:1C:68:79:F3:54"}}},"request":{"raw":"GET /ip129jk?id=6665686b717563376d736f7a HTTP/1.1\r\nHost: videeq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 29932\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=3600, s-maxage=3600, must-revalidate\r\ncontent-security-policy: frame-ancestors 'self' https://videeq.com https://uideo.my https://montok.live;\r\nx-content-type-options: nosniff\r\nx-frame-options: ALLOW-FROM https://videeq.com https://uideo.my https://montok.live\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkTxmR2iWV2LXOor39oKFfA6Cbrt84xy0kuq83h24VcOFYF3gUje9J%2BcD3U1NLpN%2Fk7ffFxLlNZk3batOAmS%2B3aeUi18yXgFX4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9934aad44b07dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":29932,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (22153)","md5":"a846d00a3dffec568c7f10bbe88064fb","sha1":"4bafc398406e5bc370b166c37ec3832709a52160","sha256":"829582650c1f32216f09d9f09324d8c4388b4d38f3f1799f80503465175ae723","sha512":"79017991408a3d500b9e1b25ad6afeb88fcb2948c38ea5efc788151ff4067a0b7df31796ea06630b10f0e2bd1d96cd01816635647b6cf6669139578fbd4096dd","ssdeep":"768:QvF5RNBIsb88+/sH32GLGh7f9+xTtFRyxcK:Ib8vkX2nh7fz","tlshash":"add2bf511f8136a42796ce37aba32587f542558fde858e05f41ef8c0ffa2914ee229b0","first_seen":"2025-10-23T22:28:53.96891Z","last_seen":"2025-10-23T22:28:53.96891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"videeq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"videq.com/assets/img/favicon-16x16.png","fqdn":"videq.com","domain":"videq.com","tld":"com"},"ip":{"addr":"104.21.10.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 07:25:05 GMT","end":"Sun, 04 Jan 2026 08:23:37 GMT"},"fingerprint":{"sha1":"1E:57:7E:AE:3C:ED:DC:EC:AE:85:0A:6D:12:5C:71:0A:4E:13:01:0F","sha256":"4D:34:C4:09:FC:CC:94:EB:DE:58:AF:16:5F:69:16:02:BC:46:B9:01:E3:3D:3E:51:D2:9C:AA:5A:85:53:05:39"}}},"request":{"raw":"GET /assets/img/favicon-16x16.png HTTP/1.1\r\nHost: videq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 976\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 10:19:02 GMT\r\netag: \"68611316-3d0\"\r\nexpires: Sun, 09 Nov 2025 04:55:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 1186391\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAH7jXXyXHd1%2FsAjHKxHESubIbJ9qZHvXjSEuND28CdyNNVbBjYYQSA6%2FqE68u7VlZIK76%2FNWCnC4JWwTuF8bZVeCpNyI%2BI%3D\"}]}\r\ncf-ray: 9934aad5dcf65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"238bf986035fd018356a90d0509af205","sha1":"590b9a39fd8fcfdf3f1d628ca5b25dbb9a186299","sha256":"71fd8dfe281dd7b5777eaade4162d7292646e5b6852a98b6cdc1994cc33d558f","sha512":"2514394139518cc7a3901af01fff8f288554ec986544a8b4718fadb5fa0a82e2c8fc3af75f582d2db1caae2576a7af8bafed397ecaabde5fe605481defb84ec1","ssdeep":"","tlshash":"a11194e3f072bdb2c2ae12402aa61900ee11494b4a8d8f0d3d11e0f4611c7746bf0bd1","first_seen":"2025-06-30T21:41:03.438816Z","last_seen":"2025-11-09T13:45:53.998335Z","times_seen":490,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":20,"connect":5,"send":0,"wait":8,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/5d64c41c1913b7e7714284325bf8824d.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /5d64c41c1913b7e7714284325bf8824d.js HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 14:10:40 GMT\r\netag: W/\"68f642e0-92593\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Oct 2025 22:33:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"2311e82f3d189db161218431ad8a4125","sha1":"125ed59cdbf2836a1c1618d3f8d34e48eab1e52f","sha256":"5d8f8bff163c95d8b4f8ea2d276fa6b2cf9fdb9ff4effa13f88b96bf5c7987b3","sha512":"33aa2327bd16176ef127a94636b71afd12e28b00c64d37aa30aaef20e1547f6b305a585d15d48373fb09527a9e02d18a49e33dcc6feb7e5d57b3c4fe715b9469","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWxhMs4hs:JONux6EHOJcFnagwxd+wl","tlshash":"51d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa483dbd54f625380","first_seen":"2025-10-20T19:02:16.064718Z","last_seen":"2025-10-27T11:05:04.085026Z","times_seen":25,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=01917339-e0bb-430e-bcaa-ff57c3a338e8\u0026subid=357529620\u0026sid=3429276779\u0026spot_id=418774\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=7.478.1-b\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=01917339-e0bb-430e-bcaa-ff57c3a338e8\u0026subid=357529620\u0026sid=3429276779\u0026spot_id=418774\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=7.478.1-b\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/show/?tag_ab=c\u0026site_id=31418774\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=357529620\u0026sid=3429276779\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=68.14498795679906\u0026kubik_score=68.808\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=219996\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.uV-18mOnXV91hi1w-N2q5tVz_MwoKbFFsIfO33YaakI%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=RuldnOsvWKPuUivh9vwh6iXnP6JIeyACikRiJOlPQCdvvavOYKGR-PoDFgHzy6vMLJvDp9JhEA74bTGlI8wRmpg03X56JLKjfIbIm3Ca6SSiqcfwfYbx5Hzhx1jJSQaUVhnVcpH0mi9UsARQGEei4bJkruwHdEkWy7Pg3KM_pDd-HJJ3kLyiQbirM-9yqp3XgMI3hD2So_Kegn0RrrxxqI8j_KMZj-4bAFMILchRovVDr6RbiLR21kxSkkVoEHzzCyxgZHBdxmmrtf3a_Zp_1A9Z6WpbBi_I6Z9Ngv0sV6DIPmzBYVYXCM1hanp5aaehnOQzAHKSLHvJiWMd3RO8L6Y-LJQi13HiXrjie1gYyDOxMKut79TmE6oTax3GbANaN2Ux10GxgcapMeCq_aC7Mf79UYML0pUwNTFMzTxR56tLhsBPxdNYGrSCFdRfxaJVCPMFyhOy3w1dUAaYc0rL2oS7YUrIhB8_fU3x08rV-Bvlk0213ts0BoB_aeaflk5I0ogC6xr36Uo7lKssD8OFkZdJqqLhyxS-StW7Nit_TOdVv0rDdQa6fN-pbj38vK-amDvTgvZGV1Jtj0SSb0gMB3BK9Cxekb35A0YOFBGwB_MReo9TNbHlijnQWiMjeKIkoG83osGOMbGQj4mB4NI1bpGmKH7FdQWlTxGlMa4iAwmyTVzzvjj3CxJ4T1Yf0J6nUwg2N_KYWeKiu_hF7uQyPDa2tOKumF-PGqB5bLtRL9HfKqeXrqGuZHLb4rHF0XyH-Co5ozjZBmKCbn1OZKN76jcP4fXoaPkYgOlp8NhXQN9j9mt-PykQC0rza5iqkzySjxRbXWk8x2645cJ8LeodSm9d-idtFCAUhNMDfQ-rl3gnmQWTroFBkE_M6xqi7J2hz5KLrZtzITYvrIN5uh9D42Nk20SEkJRzw4I8EJoSCp660X0jujlAT1T1XXUeYxIGSdNjwZWvcv1Q2Klwy2H2Rx5Kkh4-J8PUqGkLx7B9Bh0-TX1ZVVzBKYT-XFWAjF0WZp3vx-0d_7zv8Yrd2qR0zwslWnjr1l0gXZ7AgIe2aopyPjQ5in7_GyBEqb-myMHAsyzrILLO5_IpD2D3tyMGLX2UIaEs2bbAx89FNUFIzYGrkNbEQeuZzZe9n-cLZ8xfK44AsqeTLG6RZZhcMwCwkmF2OgQxHpl1KpIZQtUhcCenxvvc5pVG23WPQD1Ce-l48aYAenh4WoFtl-r1Dftu5h2P1FN-IbMEfhRxDhayYPaUXnap7xwCPQzdZPdXgVgaEU2B1MIXjyy_4vefFf8zyBNk-3ww05NxUVZQp2oM_LWHqx1NHrN83KA_Dl6jNaDjtWSbijZP6aZg41E1Hx1foXvzvUQ0FxX4YQ4R7FwHS9ckmN08nlrjLIPFooDNGDPjo_g_UXDmpVLHNhUq8AzLfWqrQzRCnUSfMbjBqEZUakEjkG1iQ_x2XGXOVlCFI6RHK-PjGhevkNovmXcl6h7rsgdGOXm8UFhWdj9V1jPeZZupIHXMgfATm6UXyizkYHjPtO639xyHKY6vBYS0Zi09im8VWjWxbiTDppKPxBhnnTaEmIEzHotZRkW3_CmXsZ9h6Q3HJOD1uA3Mf_ZJiwIkZVfHz_XGrjbUAeN7MCqFxvPaCu55BoxXngazRRzdqTyL8aFGR0Sg8aszdUjcv9PxDIZwMy7SQz4ZALfowYdvnlMatEh9cG6uvYWQVHP7yAwkKwEaquzHJokd8wuInk0PF0wTlPtd1repPQIoZNMGO-Kev7jXfVzVkz4A\u0026ext_cid=83312\u0026px_id=73418774\u0026min_cpm=0.004638024865370856\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=7536516507400353963\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00014035625266226913\u0026cpm=0.00014743303511386316\u0026verify_hash=f5d4c750bc9fca9e35461b57320c6012\u0026verify_hash_v2=113f3d32650df54f09b21748645b00d9c3d2833d5011a2a318e1ec49f2e67973\u0026is_native=1\u0026real_bid=2.570400059223177e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=70,90,4,148,98\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761344905\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=83312\u0026is_webview=0\u0026client_price=0.00002570400059223177\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.005460482781994932\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=7342825\u0026user_click_counter=1\u0026lv_id=2\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=3e0fa3e0-6910-4993-888e-cc268d96d5f3\u0026prev_step_diff=434\u0026st=0.02","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=31418774\u0026adblock=0\u0026testab=2\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fvideeq.com%2Fd%2Fzosm7cuqkhef%3Fid%3Dzosm7cuqkhef%26path%3Dd\u0026refdom=videeq.com\u0026auction_time=1761258505\u0026subid=357529620\u0026sid=3429276779\u0026tcid=0\u0026ver=7.478.1-b\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=68.14498795679906\u0026kubik_score=68.808\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvideeq.com%252Fd%252Fzosm7cuqkhef%253Fid%253Dzosm7cuqkhef%2526path%253Dd%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=219996\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.uV-18mOnXV91hi1w-N2q5tVz_MwoKbFFsIfO33YaakI%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=RuldnOsvWKPuUivh9vwh6iXnP6JIeyACikRiJOlPQCdvvavOYKGR-PoDFgHzy6vMLJvDp9JhEA74bTGlI8wRmpg03X56JLKjfIbIm3Ca6SSiqcfwfYbx5Hzhx1jJSQaUVhnVcpH0mi9UsARQGEei4bJkruwHdEkWy7Pg3KM_pDd-HJJ3kLyiQbirM-9yqp3XgMI3hD2So_Kegn0RrrxxqI8j_KMZj-4bAFMILchRovVDr6RbiLR21kxSkkVoEHzzCyxgZHBdxmmrtf3a_Zp_1A9Z6WpbBi_I6Z9Ngv0sV6DIPmzBYVYXCM1hanp5aaehnOQzAHKSLHvJiWMd3RO8L6Y-LJQi13HiXrjie1gYyDOxMKut79TmE6oTax3GbANaN2Ux10GxgcapMeCq_aC7Mf79UYML0pUwNTFMzTxR56tLhsBPxdNYGrSCFdRfxaJVCPMFyhOy3w1dUAaYc0rL2oS7YUrIhB8_fU3x08rV-Bvlk0213ts0BoB_aeaflk5I0ogC6xr36Uo7lKssD8OFkZdJqqLhyxS-StW7Nit_TOdVv0rDdQa6fN-pbj38vK-amDvTgvZGV1Jtj0SSb0gMB3BK9Cxekb35A0YOFBGwB_MReo9TNbHlijnQWiMjeKIkoG83osGOMbGQj4mB4NI1bpGmKH7FdQWlTxGlMa4iAwmyTVzzvjj3CxJ4T1Yf0J6nUwg2N_KYWeKiu_hF7uQyPDa2tOKumF-PGqB5bLtRL9HfKqeXrqGuZHLb4rHF0XyH-Co5ozjZBmKCbn1OZKN76jcP4fXoaPkYgOlp8NhXQN9j9mt-PykQC0rza5iqkzySjxRbXWk8x2645cJ8LeodSm9d-idtFCAUhNMDfQ-rl3gnmQWTroFBkE_M6xqi7J2hz5KLrZtzITYvrIN5uh9D42Nk20SEkJRzw4I8EJoSCp660X0jujlAT1T1XXUeYxIGSdNjwZWvcv1Q2Klwy2H2Rx5Kkh4-J8PUqGkLx7B9Bh0-TX1ZVVzBKYT-XFWAjF0WZp3vx-0d_7zv8Yrd2qR0zwslWnjr1l0gXZ7AgIe2aopyPjQ5in7_GyBEqb-myMHAsyzrILLO5_IpD2D3tyMGLX2UIaEs2bbAx89FNUFIzYGrkNbEQeuZzZe9n-cLZ8xfK44AsqeTLG6RZZhcMwCwkmF2OgQxHpl1KpIZQtUhcCenxvvc5pVG23WPQD1Ce-l48aYAenh4WoFtl-r1Dftu5h2P1FN-IbMEfhRxDhayYPaUXnap7xwCPQzdZPdXgVgaEU2B1MIXjyy_4vefFf8zyBNk-3ww05NxUVZQp2oM_LWHqx1NHrN83KA_Dl6jNaDjtWSbijZP6aZg41E1Hx1foXvzvUQ0FxX4YQ4R7FwHS9ckmN08nlrjLIPFooDNGDPjo_g_UXDmpVLHNhUq8AzLfWqrQzRCnUSfMbjBqEZUakEjkG1iQ_x2XGXOVlCFI6RHK-PjGhevkNovmXcl6h7rsgdGOXm8UFhWdj9V1jPeZZupIHXMgfATm6UXyizkYHjPtO639xyHKY6vBYS0Zi09im8VWjWxbiTDppKPxBhnnTaEmIEzHotZRkW3_CmXsZ9h6Q3HJOD1uA3Mf_ZJiwIkZVfHz_XGrjbUAeN7MCqFxvPaCu55BoxXngazRRzdqTyL8aFGR0Sg8aszdUjcv9PxDIZwMy7SQz4ZALfowYdvnlMatEh9cG6uvYWQVHP7yAwkKwEaquzHJokd8wuInk0PF0wTlPtd1repPQIoZNMGO-Kev7jXfVzVkz4A\u0026ext_cid=83312\u0026px_id=73418774\u0026min_cpm=0.004638024865370856\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=7536516507400353963\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00014035625266226913\u0026cpm=0.00014743303511386316\u0026verify_hash=f5d4c750bc9fca9e35461b57320c6012\u0026verify_hash_v2=113f3d32650df54f09b21748645b00d9c3d2833d5011a2a318e1ec49f2e67973\u0026is_native=1\u0026real_bid=2.570400059223177e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=70,90,4,148,98\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761344905\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=83312\u0026is_webview=0\u0026client_price=0.00002570400059223177\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.005460482781994932\u0026social_network=\u0026publisher_id=42825\u0026advanced_pub_id=7342825\u0026user_click_counter=1\u0026lv_id=2\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=3e0fa3e0-6910-4993-888e-cc268d96d5f3\u0026prev_step_diff=434\u0026st=0.02 HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1c37f52d4c.0880559526.com/4892a76c1e3c6bff2feeeeb7aa9d9bb3.js","fqdn":"1c37f52d4c.0880559526.com","domain":"0880559526.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1c37f52d4c.0880559526.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 02:15:00 GMT","end":"Sun, 18 Jan 2026 02:14:59 GMT"},"fingerprint":{"sha1":"B5:B2:13:50:76:33:1F:01:A8:5F:C3:97:3C:83:2C:8E:EB:EA:73:4E","sha256":"0C:08:D9:19:96:81:B3:0F:FF:E6:6E:87:22:D3:40:0A:D3:01:8C:2F:04:95:DC:63:48:2A:08:24:9C:E7:2C:D1"}}},"request":{"raw":"GET /4892a76c1e3c6bff2feeeeb7aa9d9bb3.js HTTP/1.1\r\nHost: 1c37f52d4c.0880559526.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 14:10:46 GMT\r\netag: W/\"68f642e6-3c6d9\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Oct 2025 22:33:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"fd591a2c2c6bdf270d8d31d36135f01d","sha1":"b11b5d64d932f017f9d108585b6d48721634b029","sha256":"3464c3af8e70f6157ec0eb94ee30992ac50f6e40f6bf9f76a0667cb622462781","sha512":"5cc9e2110a37ce090b0681d5ad3f3b66d1ba7ff2760e11e995ef2670a189f9f619511d2769177a62f30f9919c94cdb966e9f6824193ab0338232b16b557c924a","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDwpiBG3n58Tq+MFZ1wVYVC2SQpBUL:4Ym45Q7ywdl+iWEpBK","tlshash":"e9346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","first_seen":"2025-10-20T19:02:16.031787Z","last_seen":"2025-10-27T11:05:04.048417Z","times_seen":27,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"1c37f52d4c.0880559526.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=aafb908b-bb82-42bb-ba2d-8515e6e713f8\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=1.168.25","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?event_id=aafb908b-bb82-42bb-ba2d-8515e6e713f8\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=1.168.25 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":96,"dns":13,"connect":26,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=a706d8f2-cdc0-4dc4-80b1-2211f1f99114\u0026subid=388464194\u0026sid=3548688559\u0026spot_id=418776\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=7.478.1-b\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=a706d8f2-cdc0-4dc4-80b1-2211f1f99114\u0026subid=388464194\u0026sid=3548688559\u0026spot_id=418776\u0026created_at=2025-10-23\u0026timezone=0\u0026ver=7.478.1-b\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://videeq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":78,"dns":1,"connect":26,"send":0,"wait":32,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"487a26891a.1ed8ae4970.com/in/multy","fqdn":"487a26891a.1ed8ae4970.com","domain":"1ed8ae4970.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:25.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1ed8ae4970.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:04:19 GMT","end":"Sat, 17 Jan 2026 14:04:18 GMT"},"fingerprint":{"sha1":"A0:B5:54:D3:E9:2C:F7:47:E1:63:04:A7:AC:91:80:A0:E6:99:04:1C","sha256":"DE:1E:D1:7A:3A:BA:E7:F3:9A:A5:75:54:D2:67:EE:1F:3C:67:A1:8F:B7:7C:3C:35:E2:63:2E:8B:08:B0:06:8E"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 487a26891a.1ed8ae4970.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://videeq.com/\r\nOrigin: https://videeq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Thu, 23 Oct 2025 22:28:25 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":127,"dns":67,"connect":25,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"487a26891a.1ed8ae4970.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.jcmZo7o8Bq9yBqXNyAUbyVL_HxRf31E1kVQHCfZnBj8\u0026sp=2.6999999999999996e-05","fqdn":"pointcontinentrtb.com","domain":"pointcontinentrtb.com","tld":"com"},"ip":{"addr":"136.243.25.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pointcontinentrtb.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 02:36:56 GMT","end":"Tue, 13 Jan 2026 02:36:55 GMT"},"fingerprint":{"sha1":"10:3C:6C:45:89:88:DF:E7:81:55:79:A9:7C:DC:2F:83:4A:46:54:F3","sha256":"40:9B:6D:FB:42:41:0E:7F:8E:6C:AD:17:0E:A1:BD:A6:42:50:01:8C:9B:DA:8A:6E:7E:D6:3F:B0:21:97:20:0C"}}},"request":{"raw":"GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.jcmZo7o8Bq9yBqXNyAUbyVL_HxRf31E1kVQHCfZnBj8\u0026sp=2.6999999999999996e-05 HTTP/1.1\r\nHost: pointcontinentrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Thu, 23 Oct 2025 22:28:26 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":68,"dns":4,"connect":24,"send":0,"wait":24,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-819234363:1761258505965502\u0026ifkv=ARESoU0mmBZ9o8LH43HpC_u2Mco0WGnuL6iAZI88sOZ6jhmSXhOKjsi1yFtkgjeTpS8lC4D-_Z6X0Q","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:26.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-819234363:1761258505965502\u0026ifkv=ARESoU0mmBZ9o8LH43HpC_u2Mco0WGnuL6iAZI88sOZ6jhmSXhOKjsi1yFtkgjeTpS8lC4D-_Z6X0Q HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:0EuOs85W4y9eO4h7nYofflIHw-Q-Zw:L1rJQWNf9GWuzu3L;Path=/;Expires=Sat, 23-Oct-2027 22:28:26 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 23 Oct 2025 22:28:26 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-819234363%3A1761258505965502\u0026hl=en\u0026ifkv=ARESoU0BpAlnNs73IgmBXvbQos4tVRiaRSMRQU30XqhGohMBsnFz9qCMHaVUj8KIA0vqGTVgKy8I\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-Z_DNeZ6uW2TWqSscIsJnGQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 415\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://videeq.com/d/zosm7cuqkhef?id=zosm7cuqkhef\u0026path=d","date":"2025-10-23T22:28:24.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.video-src.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Oct 2025 22:28:24 GMT\r\ndate: Thu, 23 Oct 2025 22:28:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3707,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f694f62bd417d30718eb8cb17a4c35ff","sha1":"798240e40c85b73afea129b1634d10ab81ff4da2","sha256":"da38e9809c4d7f004a9a8a11bb06f39d56c9ae7e06d8f7b68a6c7cdb3018eb47","sha512":"e084ed28ab8fb45cff0cab59ba50060a21c87398364a618e8f6e06a4b17896ee90f9de3a20acd13468935ce4a982024e463e86569fd1500811bbdbd5d522eaf8","ssdeep":"","tlshash":"5571acd1045bd100aa472dc267cf7e36ed4e61517424c97aebfd98a8ecabc236224b0d","first_seen":"2025-09-17T15:53:14.372232Z","last_seen":"2026-04-05T05:00:08.024776Z","times_seen":1986,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":121,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}