{"report_id":"09f01de9-32ec-42fd-a4ed-e6a9f2ad85df","version":6,"status":"done","tags":[],"date":"2026-01-27T20:09:50Z","url":{"schema":"http","addr":"wildwingshackers.blogspot.se/","fqdn":"wildwingshackers.blogspot.se","domain":"wildwingshackers.blogspot.se","tld":"blogspot.se"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"title":"Participate to win the prize","dom":{"size":133572,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44321)","md5":"8fe02d0eb50088e6084adadb9b9765c1","sha1":"65313d77d038cb194de1d77d0447e66e4fa6e5e9","sha256":"b2be41fecf099170317d1a4203cf2297c4b30a86c06044bcba8291e63d60b861","sha512":"0ee70d83315c6f9500fcd4f7a1d3392f1d6e5d59ba01d1071353ad8ff11dc91a8944f42a5b31b633aa3a8374f377f32f3b8e8bf5fe4a816b102a6a0780581396","ssdeep":"3072:0PINnIZHLuWayPHhBTidki9AUCgJffIXXIhR7gGEPepATo/hTkb4S0eSEN:0wiHyWayPHhBTiKi9AUBJffIXXIhR7gt","tlshash":"d2d3e71ad1f3012e586e39b2e0d0f7086067f34feab65bd46965526147eaf8e3873b40","dom_hash":"domhash519f0a31fafa4d196fc2668100c1be59","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wildwingshackers.blogspot.se/","fqdn":"wildwingshackers.blogspot.se","domain":"wildwingshackers.blogspot.se","tld":"blogspot.se"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T20:09:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"wildwingshackers.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-01-21T11:34:00.12164Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":29916,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-01-25T22:51:53.926699Z","alert_count":0,"request_count":1,"received_data":97367,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wildwingshackers.blogspot.com","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2014-01-16T22:00:55Z","last_seen":"2025-10-13T21:17:15.896136Z","alert_count":2,"request_count":2,"received_data":182429,"sent_data":949,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Skimlinks","description":"Skimlinks is a content monetization platform for online publishers.","website":"https://skimlinks.com","common_platform_enumeration":"","icon":"Skimlinks.svg","categories":["Affiliate programs"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-01-26T00:35:12.551339Z","alert_count":0,"request_count":1,"received_data":28410,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kqftc.com","ip":{"addr":"104.18.33.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-06","domain_rank":338766,"first_seen":"2025-04-19T10:06:39.376174Z","last_seen":"2026-01-25T02:05:24.645037Z","alert_count":0,"request_count":1,"received_data":127494,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fmscc.com","ip":{"addr":"172.64.150.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-03","domain_rank":56637,"first_seen":"2025-05-23T16:04:51.866057Z","last_seen":"2026-01-23T11:48:11.454821Z","alert_count":0,"request_count":2,"received_data":2385,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eat.comtamdigital.com","ip":{"addr":"104.21.24.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-09","domain_rank":0,"first_seen":"2025-07-08T18:03:21.576933Z","last_seen":"2026-01-25T15:41:27.30147Z","alert_count":0,"request_count":1,"received_data":126514,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"datatechonert.com","ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-12-24","domain_rank":17968,"first_seen":"2021-12-24T16:44:17Z","last_seen":"2026-01-22T22:33:40.396036Z","alert_count":0,"request_count":1,"received_data":481,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.ms1a.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2014-06-26","domain_rank":0,"first_seen":"2025-09-22T23:39:49.860053Z","last_seen":"2026-01-27T19:07:14.473745Z","alert_count":0,"request_count":111,"received_data":596688,"sent_data":47164,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"cdntechone.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-24","domain_rank":31929,"first_seen":"2021-12-24T17:09:58Z","last_seen":"2026-01-21T12:52:55.832298Z","alert_count":1,"request_count":1,"received_data":17277,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wildwingshackers.blogspot.se","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":175241,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_14.DT0hNIxq.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e4356d2d57dab51105f98843d004a74","sha1":"a742376c1ff7c4da6bf03967c0239e322ae2b19e","sha256":"851aadb4fcaa095e1061cae9ecdc6ce911444b1d95cd5cca3a0d24acc81fd438","sha512":"7f30026903f55df8f228d34dad2173441193e6732245594a101e918d317591db44fb34a12a7b865dd52934870fbf7c8c2f5fd2c81ae741d3cb1b76baf164f7d7","ssdeep":"","tlshash":"10f05c466ef05e25403913dcc3926c4176e91462078c2f92e17c063f57adec9a904343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.113427Z","last_seen":"2026-06-06T13:08:46.621752Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","size":16490,"data":"","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-06-10T10:14:25.43275Z","times_seen":9795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47db1356ec70bb184ea19b076fa12048","sha1":"751e61599f98240f4f3c4197e9760c548a481e97","sha256":"155b89df15ecbd95c88c7be26740759b65396a53f24f40885553d1baeb2ba47e","sha512":"9f184e0ac55a169ff9d69a860ff11e2e1dbea12bc6dca65b44558283ecd3d7bab773a6147ce9d1375b1bdc7f64e6a907db4b531854337c2ff9aefdc2dfa320a4","ssdeep":"","tlshash":"72e0720e28d070282ff8107b0a254aec31ac5a081a00cc898d8ec16d7b60fe00afcaec","size":315,"data":"","first_seen":"2023-03-07T12:10:48Z","last_seen":"2026-06-06T07:48:37.54033Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008343.trustedcpmrevenue.com/58/ae/8f/58ae8f59bb8e156b1e414c15667737f5.js","fqdn":"pl17008343.trustedcpmrevenue.com","domain":"trustedcpmrevenue.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e07e519edd9751e00ce313be79209f2","sha1":"210b69b3bc75a14baa1e3881ca8f99abecc0027d","sha256":"ebc6f7d86cc71b0779dfec79793836458b82a7dc05225ffc243d1bc994946566","sha512":"9684f1852d0d8a86c793ff5dbf9ae6a223b41cc6b235ed822092353335b3856253428851b1485e0a32e196e49be055f7612daf78497669b0804ae9df8bab303a","ssdeep":"1536:l9yUBg8XFOUG/AVTesz3WArOwlNyBv77NzxpQ2jFFwb7jIB:l3B91cqpUhxpJwrIB","tlshash":"dc7309487f42b16b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78843,"data":"","first_seen":"2026-01-27T20:09:58.403754Z","last_seen":"2026-01-27T20:09:58.403754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbb7dbae3c20bc81da1b8bf41c13e8e","sha1":"f333d36b1dbecd026483e78eac843bdeb2dde04c","sha256":"eeeffffc79c48f4fbe510fc3fcdae29885a18a48ae121968e03fe502fb48fecc","sha512":"1e82716fa5da363b595ffc7b569caaa347df281bc89fb9d62dd89d2dec789280d9574694f6f78d250922e8d0d3bdc8a637f5748d7c4f4e5cb4e5465106542e0c","ssdeep":"","tlshash":"9ff0998af3c8b623410666e5321b801be67e1851b407a864a0a088e2ac7a449c189f3a","size":636,"data":"","first_seen":"2025-03-04T04:04:04.143618Z","last_seen":"2026-06-10T10:14:25.434704Z","times_seen":4086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DLaR-eDJ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ac5e244cd416cd51e0783240b14bcbaa","sha1":"6cbf6b3bf7f67c7133305aea4d39e2df61239c25","sha256":"a0cb77f9eb8d10f3b078e83ab40f5ae15bb9e3b42f4a54996d2ce7fef9989da4","sha512":"3d48d7f733476978dcd18a16d523f03b06d9429da421d8e029d00e04e7bd4b09fea36931bd5c6efe9b25f82e10d031ed7b5c962c91a0e390e4c5a7ae332192c4","ssdeep":"","tlshash":"0de0e5c69ef00bb58216279fd91a550131a5003b87dc4fa1e139433a1399e8d9908387","size":434,"data":"","first_seen":"2025-12-17T05:47:47.275747Z","last_seen":"2026-06-10T10:14:25.396069Z","times_seen":1792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.D21VqnSW.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"647f0c4b1557485439c363e202db0ee7","sha1":"31be3c4c1821577b91f3af02df71f1ec3f915a7c","sha256":"dff4cbf186ee31d573211364039871277ee8ce71623c6631a112e6c85cb5b62d","sha512":"354895beebdf67bbd9ea9d6f51c559c84511602a73791f9fd0ae87b483ee06f10e11c187508717b2a067e35d41abe161805663d2aa45362453f2a09fe6ffb870","ssdeep":"","tlshash":"8a31f27ae140c7bd881ba3f497e2b2a6136401669f9c4fa2517a483536cec4c5c0f74a","size":1553,"data":"","first_seen":"2025-12-17T17:11:29.081878Z","last_seen":"2026-04-07T04:41:42.144846Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/sweeps-survey.BK-JcaZ7.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8461461ca8c076d99651c5a1afb0c36a","sha1":"dc88517b38faefe788c4c16c17c633e78c03d617","sha256":"893b78a3e3cae95f0a39a2373de2387a747d5cfa1351781a0226501b60e15440","sha512":"a7758e759b584c4625f668fb6ab7c6589e6439f073af642c8ae30ecd437bf4652e0222b8cd6bc9e46902264be31573454a8c3f7a99450772ea99e14dbcb23b21","ssdeep":"384:qOu76uEkhShsn6cVsafgQXX4x6N7sRu4vc2qRJH7A5wzURdOYTg1sBiCH6aln+eC:bRK7YRtQQPmDGqJX+CBelIjd95Yz4","tlshash":"15b24c07d13006bf55068ce8f46a6417cfb1568b6d8a8db4a55deff812e8f4042bf74a","size":24641,"data":"","first_seen":"2026-01-26T13:20:34.649922Z","last_seen":"2026-01-28T07:45:28.751486Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/RewardisShortSurveyWheel.DYMPXTB9.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4284fd2f2b705e18c9f6a7400eeb24d6","sha1":"229d959c51df50b1eb9d4bfdf0775ab96ec96628","sha256":"868b103e614ecabb8c07157df30433c4948bf7a8300f390f194438e504721635","sha512":"2c2bd070a5e3777238cdcde0172db7676c4f1f16adff93f45c4ba8285fabc66c8a9ce75304af0f6b113d85ef96ada46b6dd8ee26047480c8088446092fc8da50","ssdeep":"","tlshash":"ed11e5c4e0b07bf9d41e16e9e61d93407132176ec3ddce70b17c05650b589ee7641386","size":971,"data":"","first_seen":"2026-01-21T21:03:17.026963Z","last_seen":"2026-02-19T02:15:56.516965Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/push.CJYB3Ae1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7cf16d101b71373348c42bd765d772a9","sha1":"d44981487275a237d3ce272c0008038f5e6db516","sha256":"037793a3af8b5bc7a92dcfea4148b0fc44e37063eaf95b2a1795fb2b1e9fca2b","sha512":"498846c248bb04d499abb2cfcd451abb3929415b51486e4cfb5ade041f71ad4f615fe77a7b97a79f7b717ae63c6faa152ed2b85768ce3635e9f6bbd89b92ebe4","ssdeep":"","tlshash":"d9017367bfe80b70a146836ff736564111e2103f5ddc27d9d1b68a790344fcd5409b45","size":669,"data":"","first_seen":"2025-12-17T05:47:47.247183Z","last_seen":"2026-06-10T10:14:25.37459Z","times_seen":1951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94ab845e2c9f67c0d97b0d8aaacb2a1c","sha1":"4a1a1aa1d3f5361a28e3ab2d95c181b7b5ae3485","sha256":"1b26ab547c8b13234f3ab4b37ee36cc1199dd00551dad59802b36235eedc3a48","sha512":"181239df5ae01f0994b649ccdfb750f5a3e92512abef5488db6b51a0d2947b76cb23cd55836ee015e38a61014ce3357fb74a37c429b249fcf4ed72b021291af0","ssdeep":"","tlshash":"e1318453131627b9b871f8742eec9809a00b06ab74f5382f1f9a5e5a125964f10fd435","size":1849,"data":"","first_seen":"2026-01-27T20:09:58.405088Z","last_seen":"2026-01-27T20:09:58.405088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DRh5yY0-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"23cd4cac9d946ed49b1068e435eb51b1","sha1":"b147e5809230d440035e78d504f902780ab8787c","sha256":"e5357a071b376622e33cb82fbec95ff16ef756ab6886f2e13b94a64eb362d7bf","sha512":"ed38e5ec359074994041d42c7e4e5559942d0a7b7bc63d0cd10adac8d990c1f1d82e89e7e78e1d60acf612ebca94b58548c03a0976264bd94d97c2824d2450e2","ssdeep":"","tlshash":"836122b6a9bbeed68d169344a724660f53c845a301dcd3e0d838c52423c978657aeb3e","size":3290,"data":"","first_seen":"2026-01-19T12:36:38.252655Z","last_seen":"2026-03-10T21:50:50.096094Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTeenExit.BD5MYCWR.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4cc0311c1c8ac5ee27a0b5934da04110","sha1":"939cbce7bf1beb7d1b7f5d130688a2a2fb241ca2","sha256":"cc7645a9352f7067cc8dce65469d181eeef59e3f62c50874bfb9363fb888a3a4","sha512":"63784f59c19bb3a2e34e7509b5871e622f34da7111c16d0218dee5737e09ce0cb85a6caae9857eec05804c081f3d6f89ab63deed770d4696d3b9772b441c9fd4","ssdeep":"","tlshash":"3931fecfe8308afd802d4dfee016f0325b24126b6749d270856e5d362368a8fb527b53","size":1454,"data":"","first_seen":"2026-01-19T13:02:58.33816Z","last_seen":"2026-01-28T07:45:28.690876Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useSyncMetrics.BcEHtuEX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d3fac7c45cbc72188b570d5185ad16e9","sha1":"4218a0e764a5468ff3f9326ba5639598490bee92","sha256":"eaaf22e6e27d5d0e10c4735b97acf561180ffcf5b97351c0518699ca62fd3367","sha512":"3b6ff62bae8aa42a4a3e5daa1d2439dc809048d6e29da36fad47db87779854315dd0439a806057824109c746b22a51e9e5ea85f78c706e00585e6ee4e5370999","ssdeep":"","tlshash":"ca61586f6262136d566116ecbc7f22032dd6421c6dc7c948b295901d12f8e5122ffbfb","size":3360,"data":"","first_seen":"2026-01-19T12:36:38.281676Z","last_seen":"2026-01-28T12:57:19.819871Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3685e0b97555caf0486b05d7d5cb0de","sha1":"c1392a4421c5822ecaa3757d8f9e6bcd0691f513","sha256":"15710bd91dff8731f557a4cb5ee3652a48ad4ebc83e2866eeb39e3cb0828788a","sha512":"557b843e15ecf5b330c083ee44359dc7a7cce60399f98b7d63cc10e6f73aad242edf8e396f54a64095c603cb58c6c4799320c44e10ac0485bccff92df026ec8f","ssdeep":"","tlshash":"08f0c0b2d5f75f03c42c6866244a321f5ee6a55c8048c82f84dde80897de8c5d4f6aec","size":581,"data":"","first_seen":"2025-10-13T21:17:18.248582Z","last_seen":"2026-01-27T20:09:58.405949Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/sdk.js#xfbml=1\u0026version=v2.5","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T08:17:54.126058Z","times_seen":177375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008340.highrevenuegate.com/e9980ddec67e439d04b71a049a41ffdf/invoke.js","fqdn":"pl17008340.highrevenuegate.com","domain":"highrevenuegate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f59b49761527e0b9448691ec56eefd2","sha1":"ececcb1225f7f303d723aa497ddf04cdfc0cc7f6","sha256":"725610ba9d20d824444e8ce51b3634cc5d6fab8e9c2e687776836b8714113e17","sha512":"ccdf38fd577acf737ee1a72b2755c13294bacd6ee5b61f49af8f5d565334ad134b58ed8db52817498a99f24c59fc38011a703783fd208283d1bef9245f3d8d02","ssdeep":"768:pL+PQP8Og+DGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPIiQI63fX:pc+DR6fCoM4R/Zyw4wiQIc","tlshash":"e513d79a7f91b56c0376b47b043f922ef6399d0260c8c9acd143e8952faca4dc13db59","size":43801,"data":"","first_seen":"2026-01-27T20:09:58.407414Z","last_seen":"2026-01-27T20:09:58.407414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DtMaCpY1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7b12e2853a54d27661f357789104bbd9","sha1":"f34d4a1491654082cb71ca9dc306dfd342c5e7a3","sha256":"e8f934e2f84e3f49de25fb949dbcce3b651d4d4760d4793604b3177e14243aa4","sha512":"9653752aa925af4b49110ba84f4b1424624722d41c823891f78e5205d5ff045d4d7b59ad2c23770b9cac819f2ea94e2f550e6097d940d67cb5d6f93a42c6640b","ssdeep":"","tlshash":"1b41cd60a5a6ee37623d00ec82b9330537ae495111cc5e01b37a417ac2f5facc1fd285","size":1877,"data":"","first_seen":"2026-01-21T13:41:03.124528Z","last_seen":"2026-02-23T21:01:55.511832Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DkAT5Gqw.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ac5ca98a3bfb5d96c72bb947a9c217e6","sha1":"3ad829afacf5349eb00e51f05e908b0e0cfd2e54","sha256":"1e1cc95533c0ec48397f9f65025416af342877e6ec180058d7ebe2dbee42c970","sha512":"3f7517cfd9ca305511344249fa43e4468be49c667a5e88ede90b6d9f58f2ebea4df38e0d2cea2a36c9d576e2e73a876c0ed8d5912b7dbfb9e77ba81c969dd89f","ssdeep":"","tlshash":"0101c0d315f0a940843f276feb1a26b42645006507ee5a5ee1386324655efdf501fb86","size":691,"data":"","first_seen":"2025-12-20T22:10:21.295507Z","last_seen":"2026-03-15T13:01:24.694898Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/cookiesLogic.D9uCIJIe.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cbaeb699b9fa379f5188f0e8b18107d2","sha1":"89705b4a99648e0163645717f62e6bf5a3b9dc16","sha256":"73e6a53735c59d93551e244c1a94b9f6e551cfea5813d98d85cfee3728cb4d56","sha512":"244e8b9e70a25e5c2106d5bcfe658a073fb237d4441bab410c01e7b6f40e5d553603106cf0ae90429b06439f26275e4f365679dc010a54a54b2dbf8394e06408","ssdeep":"","tlshash":"e1517283f130c1f4418a98ddcb21b12963b147aa36d4c5e4d0a99c2827a9d8f6f3f35a","size":3136,"data":"","first_seen":"2026-01-19T12:36:38.254739Z","last_seen":"2026-01-28T12:57:19.816926Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getImageS3Key.C__IkANT.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"099b67b4d19bf5ba7ba2d83414076b4b","sha1":"5560fce4282c44ae64216501d636e423cb2eaa2e","sha256":"947e401194ec518fcb297c8c2486dfd2e2529c1b15a3111cc4ab41a217f03def","sha512":"f992b8e87f90b604217a40d97a41299243f26cb8d0e03080473a3c1a7b47d64dfe57171b00c85a84a5a93a875d5d068facd469879f439bdb7fd821312f141598","ssdeep":"","tlshash":"e51123c2a3e12462839f059cb8262601bf0c3177a64d4b41c27e5a661355ccec036605","size":884,"data":"","first_seen":"2026-01-19T20:29:12.723677Z","last_seen":"2026-01-28T07:45:28.773412Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/setIdLocator.CA8I0KwB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e4da40dd4e2f442fe5d0399907c2bf53","sha1":"9df179bf27dd84e9af3df61f1d90ae59ce9938e8","sha256":"698bba5f3d1ea1e093ed226ad92958df5a8a73d8ca55a259bdb9b59443109357","sha512":"953ebdd2d981a41cf5372abeb2d3a24e887064d2f66286bd1895a2c5eba5f281aea3d8388624f091cffc9b236204f90ea78ad3bb9a95e900525ad914a38e0a1d","ssdeep":"","tlshash":"c2e0688a9af01e14800e2b9dd206248131880663538c8fa1b2780a3ab39decf9c05383","size":377,"data":"","first_seen":"2025-12-17T09:40:52.758568Z","last_seen":"2026-06-10T10:14:25.397154Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_26.DUsvWkBR.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dea85180b65840a4fcc6e72927f5017","sha1":"3deb4f8ffc5db602c99df764f1505cca79c4714a","sha256":"fd34c848f5162970a1d4cd82d4b5833424b7d77c04c69f197b0a11f3244c746a","sha512":"c24a18ed08aa048723a996002ad8f7c09dcf87025d7fa83f736315554619047d975f68af5e7fa43a86548e675fd075031fc7fa41879f61351982153cfa29ffd0","ssdeep":"","tlshash":"f5f05c9556f1991c852d12dce152a5137a990923d6cc4f11e23c4f3b239efdd88a0343","size":447,"data":"","first_seen":"2025-12-17T17:11:28.970079Z","last_seen":"2026-06-06T13:08:46.651396Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_39.C6YIrucu.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7631ce74113ca18ed407735e30007c1","sha1":"8f0eb7a8fb8b342cae4a4c7dfc64c4b8cb6cc2cb","sha256":"0f5df2bb03d2743249d82359c9eee597a829371202c3c670ada855ffd39bf0dc","sha512":"df3e2aa41434e2cf5fa7b372cf67ac57e73684131800a8e5fa5124977794002e85ac1b8283539d294ad72a47f58d3a3915bade8d576a0dd00995f7ff8c12c7f4","ssdeep":"","tlshash":"93f0a38597f479658036139cd1571a0275d8023747cc0f12d2bc0b77439da9dec18243","size":447,"data":"","first_seen":"2025-12-17T17:11:29.089068Z","last_seen":"2026-06-06T13:08:46.604355Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/managed/js/adsense/m202601220101/show_ads_impl_fy2021.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c21ac80cc64cd6a032ab7af127a3a3","sha1":"a1cc24025d06012ea0fe4a3693717611626b4593","sha256":"0d92ab7521516dc0fb07b5070a9441d7d63a524ed4201edc206e96400a08b1bf","sha512":"b373b45778c3d96a114e46d50008c13918887d4647af6c63ed8e11431942cf183bdf840d248658930cd8b5c90bfcd49e73fe8b30f1a640792189a0838d24e22a","ssdeep":"12288:UmRAbuTILS5TWaxE8S3KHuh7Wj7CfdTV0BhSkUpG8+KXlI42cJxXyOF1QynfHxCh:UmRAbuTILS5TWaxE8S3KHuh7Wj7sdTVw","tlshash":"f6c43a9972a274b783a384ea406f0147b125ac52f00cc8b8f6adddd97d2486553b7fbc","size":551804,"data":"","first_seen":"2026-01-23T07:22:16.812081Z","last_seen":"2026-01-28T23:31:14.798542Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useZoneProps.9Cqwoqkz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d598d3b0f66de091c9df44a78596f2d6","sha1":"ac4d91e584f99cfd360381d79d9091a80846fe4a","sha256":"6628732126e54a611bed803bc7f12a6066a20debaa7d2ed41e20329642c212b5","sha512":"9ab7755f4430c32b77a18c0b18e81593dfd4bc0a03d3b069937219ba574d8f10e8b759fd8bad74a27f9b2f9864ee6a62a025aa728efeb66d53f12cdbc7fac95b","ssdeep":"","tlshash":"e151df9fd12610590ed4cfb9b87929173ee7c22939868d4823c4e83c41e4bd6227f7a5","size":2960,"data":"","first_seen":"2026-01-19T12:36:38.24978Z","last_seen":"2026-01-28T12:57:19.8084Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCurrentDateLocalized.la0jVmAa.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"feaa5781ac5e372d0dbfc870be45d25b","sha1":"d6c776ecaafdf3a535ceb6313f6df124a2510a16","sha256":"6d396afe9f02df91b7c3f3952dee9234b3e9a3f44aa2dfb7906547afbfbcb9e2","sha512":"5cf0cb32adc3b585ff9d9508e212497e67df11f53ce77d9b4866dc47e2bbe0ce903b564e5e7afc85ce88c9c34cc0133c6b15eab1271e9f8ad3d3e969afbd6b96","ssdeep":"","tlshash":"04f027c28ff02b59801f13aec6765501354841bb2adc4f62e12e073b63d9a8a460538b","size":462,"data":"","first_seen":"2025-12-20T22:10:21.29088Z","last_seen":"2026-06-04T02:36:04.681063Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Button.CSkHk7jI.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2eacfb3ddc734cee7d2a5ad34228c393","sha1":"499cb323d8d267295a7d9e0bf229cd4d89b3daa8","sha256":"bf48ea1bf4158a400f75fe53be640f65728a229e93c7d9f1c4ea9c614b1d2004","sha512":"095f8827d36dfcc581605d5856564228df8434d1cb4fdcc6c77724be3718527159abd0e14bc5e52ae8cc1a853c1beb4df39791dd4d78a1faa0f92e2a051ee747","ssdeep":"","tlshash":"1521405cd1b002ad490b10bde27e600a7c960233cb8e8b51e5bda73e079a09d8805fc1","size":1236,"data":"","first_seen":"2026-01-19T19:03:20.219865Z","last_seen":"2026-02-24T12:49:50.895506Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008340.trustedcpmrevenue.com/e9980ddec67e439d04b71a049a41ffdf/invoke.js","fqdn":"pl17008340.trustedcpmrevenue.com","domain":"trustedcpmrevenue.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2cb59dfb4bdccdcebbcca8a2505215a","sha1":"04423edbc2ea7bfc0b515866f6dea675a7881e3e","sha256":"f69ae7036b47ae9f3096d5e8b03e79be096e5405b571a9920c1d7451217e50bb","sha512":"4e4321388840b3806af5e21373364ede9490a349ff9ea206b72ee95a5ab4740f06c11460237a2d18dc456dcc3e52e1755d1432fdd458de733ff5a1c9523c80bb","ssdeep":"768:pL+PQP8OgLDGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPItrIV3fX:pcLDR6fCoM4R/Zyw4wtrIx","tlshash":"c913d79a7f91b56c0376b47b043f922ef6399d0260c8c9acd103e8952faca4dc53db59","size":43757,"data":"","first_seen":"2026-01-27T20:09:58.409591Z","last_seen":"2026-01-27T20:09:58.409591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fed0955c79d3659a48d6ab493d4d15fc","sha1":"5967231931edd2637c0977012cb7ca90af0b3731","sha256":"d0b67fe2b1334de9a82a3d03dd277705e6834554bbbb7e6e2036784753fa09fd","sha512":"10a5c836aab8e163d80ec87bbd6bbd7fa6aa700a5705d6b9dbbb580eade7f7650413d732f964e30ab36557d24442a5436d4f4ba1fee5562bf79a0007323b3311","ssdeep":"192:X8RBGWxkxSvZqGTAo4CBzYJfQLJUOmjl2:X8RBvkxSvoGEWiDjl2","tlshash":"4cd194e5b2d3493547fca2aef18a7200e37d0a45b87c8418f01e9960395e80be370fb9","size":6398,"data":"","first_seen":"2026-01-16T12:36:18.509941Z","last_seen":"2026-01-28T12:57:19.838654Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20fa52c18ee6013352a79d504ced72df","sha1":"f85e22339244f3ed6182e636e8345f9254e6abd4","sha256":"d226514c3bf52e2ff43eb6327b56cc01cd7b1995078f4c8f16185207f6a0d821","sha512":"3c51fd75e91fa6642c97db5bbece85a09cb6a67461fc8aa954921b6c256eb3e9551b3c5ee09a99927d79ee2ff6eaeb79f8f1ffa555573660f57504bfb0aabc68","ssdeep":"192:X8RBfH6HNViIsmvovC6bjcc8vBzqE1ANnoDU1IW6BVNmo4d9W:X8RBiHN8F+YC6bj8vB2E1SJ1IHBLmC","tlshash":"a332e9bda189839847fd61ebb445b320b23c0d457458e0d8fa794616e17fd0f4bb2ba8","size":11606,"data":"","first_seen":"2026-01-19T12:36:38.304796Z","last_seen":"2026-01-28T12:57:19.839566Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DS6wA2VX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c286166fb6f44c0a7aef4ce2a9b9338c","sha1":"91599b7cbabdcfc14535dd3d022bcf1296942072","sha256":"5c30ec81142e7070f0b19d2d89a41efa7c98e6da111b0ebafcc3ecb60880f9d5","sha512":"307704a1dd37a8773ea4481691a31760abb3f0060b775058b99d749f71759882703c701488b671a2c7d52de8199634f58d39fec8f137794ee8989faaea874362","ssdeep":"","tlshash":"d3e02bcd5ae01bc4801f22add51a1109b944043366de5f51e13c07b4539fdcae808343","size":398,"data":"","first_seen":"2025-12-17T05:47:47.226096Z","last_seen":"2026-02-09T18:12:22.058301Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useBack.BVvk0rPx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7b89b65057b2f19fc2f5dbd0d11433f4","sha1":"9ffecad320afb81c2e7694180a438faa791ffc23","sha256":"c2308480712c9254f10e09eedd4682741517cadff6d8d638f0830d0a068a5140","sha512":"1a3d27ca13989ef1823d9c248ec5819c879d39adc35235b13c592be5103a6d54e457a3dc142816f6af051360332a7a903f89fa91ef3b577e537493140d056e46","ssdeep":"","tlshash":"b85193de90f044b0c0e95adcd225f6323ab9157b3a8dae91f26e4e30137dd8280b4766","size":2544,"data":"","first_seen":"2026-01-19T12:36:38.297186Z","last_seen":"2026-01-28T12:57:19.805456Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/preact.module.CNj8Tr9T.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"851e5994275aef055ac14c016675d704","sha1":"8dd4d404400449d0bbe21258e18f3ceadb1ff9ae","sha256":"7810c90698e69225620b1d6da1466b6cd41acb7c2a200b1b845a67859492ad45","sha512":"0dda246a2c35bd24c36526ec9bd07ae91f6c8bd6bc4f031cb2ffb5401201d4e997db9d81e91bf88bff480c19fb9de0e18cb6e4b6dea1f7db5069c2422073cce9","ssdeep":"192:Sg+DMdFKBpA5a4jLj1Swpu+9GB1/Ak5VpkH+Zd/AiXdo2HxuSrmM2Yg8lQdAlMVt:KDi+ejv/fG//AL+Zhui2782Sao6vNT","tlshash":"3632ebb83c20f0609aff116171bf1c0bb37d092fe488446066499dee29b45ad664bfda","size":11836,"data":"","first_seen":"2026-01-08T16:18:19.730324Z","last_seen":"2026-06-10T10:14:25.409424Z","times_seen":1599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_13.BwQIzDLc.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d92beb29e1dd5997f174f1e7331b2f","sha1":"c768478c8c36ca59e7b215ec5711d6a09659f8ec","sha256":"913277a4c7db50935b196163f0ae26abd4c34324b84ac36ec4b19ca28e0fcd97","sha512":"6d7f992f35ebf65836a4b0474773e2bf1d18ea8aa1d4f758da83676b36979613093234f37d5928541f9e7e52f0be53de5b9cbf37bb0b0a200b05236e954d8f82","ssdeep":"","tlshash":"72f0558aa6f04e24512e12acd312380176992133d7ecaf21e3380b3e935dacdcd19343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.007954Z","last_seen":"2026-06-06T13:08:46.666563Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data963.click/cd0a00125e82331701f1/97d4a8142d/?placementName=yx_tag\u0026user_param_yllix=846527\u0026user_check=425788317","fqdn":"data963.click","domain":"data963.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"201f7de047f314f69e1cec518457ba3b","sha1":"8bc74443b06db8aeaa76f435b1b2213f1d6ddede","sha256":"b961614a6a7134d924d8ba9637bcaae62e46e87a17fc6167d753936c339f0f0c","sha512":"856b9d6a09bb0b0904b34ae47db3cbf843552fae0dc547887a12e8e566b592031ed9ab6f2e029b3c324b04437380c0f05f74bd1d0c371d8492a89401b932ba1c","ssdeep":"","tlshash":"a9d097810542cca02a8388f381d2511c32b1064f26ab7b90b24d78b99b6e52630ec8d0","size":248,"data":"","first_seen":"2026-01-27T20:09:58.411439Z","last_seen":"2026-01-27T20:09:58.411439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/client.Czw-GXNd.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46da7429e128698961b28514af5153fe","sha1":"a0a7aee64213729d4707e69185911f3b7fecd1c1","sha256":"f400d14a0cede70e1d4c55a52cbc8afc5582c4ea5c5c7d94be3215d36bc1892d","sha512":"6fc74d3b9decff0767101aee2e414b926360fc91fb6e8746eaad4ea0a9ad4c5a63d8253fe463f064de9a69ac10fbde1dceb6058604a7215e9f5d52440c1d7a30","ssdeep":"","tlshash":"0c3176f861b04db1406f6abd8e6510629db82166718ee59091accdb8076ee894986f0a","size":1677,"data":"","first_seen":"2026-01-22T11:57:24.437178Z","last_seen":"2026-02-06T08:40:49.480077Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/urlParams.DlRCYo1B.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ddeaed7cdbfddec0f4586c62fdacb7ab","sha1":"c3930c3749d04d36983270ff0bf19b329b27b734","sha256":"c975fcd99bd3f389c0119b4bebe02239aef83da5b0cccc4ac58b41cc61433b7a","sha512":"642a42f6089ce08ca30cb5ff59252a1de7550185ade21a43c214d545036a9271f054c679f1a5e46a4bc0936047939a94150a71668740e2f625c5e4f992ecd9d5","ssdeep":"192:qZdoLRmRIvVvw8wyDfWrjIapX+sXq4UvTvrLO6BUU2e2zUb:sf4Viwu+2q4E7r7Ifob","tlshash":"f10246accd69e28c1ab511d42208af31632e4b1f6045e3a4fb715f5fd36ed7aac82354","size":8751,"data":"","first_seen":"2026-01-19T12:36:38.271649Z","last_seen":"2026-02-19T13:37:04.231969Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/syncMetric.Bb1bRc_L.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e6ff546de1aeff18ae461bf0a1390afa","sha1":"53e18b6503aeb4ae2b285349178995e7327474ee","sha256":"33ef1c43c426c4d8a43e2508bf3d26458221cc5ae5c845087e281235da74478f","sha512":"19489a856158d57b634ee323c56516bfb3cfca14bee1000335ed4c9e932695c7586a1a79676000f306f612d5f8bba4736e17031b6dedbe293c0c7fb8160214f6","ssdeep":"192:XftDJSjsb64dFGe/RxOsfOvxseqRlGjKMPRmFGl1aiS:vJJSC6Qz/RgsfOvxsRRlOKM5mgl1aiS","tlshash":"91f1f99a71d1972451ba93ddb2112612e33c960638dc4a74f02a8e2536cdc4fa3b7bf6","size":7614,"data":"","first_seen":"2026-01-19T12:36:38.270533Z","last_seen":"2026-01-28T12:57:19.786Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Reverse.en9uc5Er.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae6bf5e838acaacea5fdb8398d3e3944","sha1":"e7f4713425578bfe85b90f502397ce36cab54dcb","sha256":"404a4e1546ed74c707b7ba2f9526b7cdd0da3e3cf328eef8ee7affb036c3cb99","sha512":"09d9caf390848abb6f8a08aa3a372d848628e88426d2615012965a2fd042536695ce75aeb34bb02d91f09b516821de03a372d17748d8c5c96cc266cc938695b4","ssdeep":"","tlshash":"5e4111dfc56047f9808684ede219f6312b7602ab938cab45d1ef5a701739c9bc21ea47","size":2019,"data":"","first_seen":"2026-01-19T12:36:38.25692Z","last_seen":"2026-01-28T12:57:19.784965Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/types.BGMreeeV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","size":1135,"data":"","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/preload-helper.CDVdm_vr.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bde6731db5b37e240ebb6245f05cfef4","sha1":"32e76cde423fae50bafd263090b454bce92059b6","sha256":"d8d70ffacf7707dafabf1ab58bc04e52c202f3577257a43b90dd7cdb7febd309","sha512":"8ab9639575e5c260af75a73693c421497738a79c42abab9595bb1f11dce2f829379b675b12e09e5ae77c6212080d0e6afad486bd94aa699cb0656cad4d7f4a50","ssdeep":"","tlshash":"8e31b7c926e0a032920c1eddd07ba313f5e0246364481891b12e4dbbab2decfd5e4f51","size":1508,"data":"","first_seen":"2025-12-17T05:47:47.282137Z","last_seen":"2026-06-10T10:14:25.433653Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/hooks.module.BC3kwcJz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"14410470376457c83cc0955f3fdf6373","sha1":"e9442a5de4e26ecf73423d37dddaca7bb73ea00f","sha256":"312cb3b9f56f3b38187f3f1ca4039a671a483d65eb18c84d9612f94cafae07d1","sha512":"239187a26fde0627924f5a284a5b3de8b131f6e0f85df190589597d80c90b0b67a2578cf1f9592205066a133e86754df91ab7106803eacb69ef8cef66abddbff","ssdeep":"","tlshash":"11712cec75b8b03183ab7a3b927f0a1f73366816588ed890712af1d42d7442d6253f9d","size":3789,"data":"","first_seen":"2026-01-19T12:36:38.263326Z","last_seen":"2026-02-24T12:49:50.927865Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/checkCrossDomainCookie.DwO9LtWS.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6f3eeac07a27a62725eb932e85f63c6e","sha1":"fdd2d24e1e7f6196e9b87931a4e70f32634fe6ef","sha256":"963858d6abca7349617da203745034cc397b950356124a35860140e433abe86a","sha512":"dfba3d64c380a99cba3e477f1a297e4ab25d52e3c00c0a432906eee473d99593501b03083a81577e26884822f37461cd836aadda79f530ec0005933c47601d03","ssdeep":"","tlshash":"532122c1b2f2a4b806ba56dce0263701f5148a2563cdc7d192aa02352e94eafec3161b","size":1392,"data":"","first_seen":"2026-01-19T12:36:38.268051Z","last_seen":"2026-02-09T18:12:22.024741Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/adex.DCbnRdCY.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a22eb774cc9d4019e1b74ce2efe8c67e","sha1":"152e6c6ee469e5a58a837004fbabeb109341ca8f","sha256":"8e8d7b4ec5643a579d2db9cb352e823e928778aa5fd22a4b86c16b8093f457c1","sha512":"48cc88a9c77e0ac8745414fe72dcaaef810f7468dd48cf0286f66e6d4d9703cce7c77628025024de69ae23b5c8eebe8c7310859d16f1b03e9745c772ff4cf7d0","ssdeep":"","tlshash":"6711c28957f61bfc6246938dc06f6203604860579edd47e1d22543783b58ddf931475b","size":855,"data":"","first_seen":"2026-01-19T12:36:38.282541Z","last_seen":"2026-02-19T13:37:04.206788Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getExitDomainsFromLandData.BZMixR4t.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c20cb5713f7b211270c9cf48e1e51250","sha1":"2f0c0d3e6c6d9f8448d784334d7750b977fa71e2","sha256":"1f328d28a142c15e12dc58adf662eb82dd890ab8a99bfadb2dc03727e10685c4","sha512":"27b11492b855cf53ad49355bfdf21c4ad5b6162d464d45b15e9de42f7ae033595a044844a823322e7bc1992ec0d321dd136a98ca5ae0d129619fdca4e5f0b740","ssdeep":"","tlshash":"81011b0a8ef4456640c52bece40636002a60747e90cea784f92b123bbb9c58a9925709","size":724,"data":"","first_seen":"2026-01-19T12:36:38.251655Z","last_seen":"2026-01-28T12:57:19.807059Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/jsxRuntime.module.C9kflq3K.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b62944649b89e4a5f0ae1e8b9e397fb4","sha1":"992a51ba17d0e5330f8c01a2713f95734f07a092","sha256":"df78226d877b2ea9bb05292589efe50aa17eb9d658c91e86f5c87d176a4c142d","sha512":"b8bb9d039e976688bbe6c038c5b2dc0d4729918bb555651765402d77a6e8f59475393f378c65878784847de24ac0794d752241ed91b9108cfead869099bad865","ssdeep":"","tlshash":"570125d575b0d193405a13dfc117190332ac2123518c4b55533eca6563e1bdbc6c4703","size":767,"data":"","first_seen":"2026-01-19T12:36:38.248758Z","last_seen":"2026-02-24T12:49:50.928602Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_17.DerJGWkV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e942e7fc67e903b537554a86c97e53d4","sha1":"81922a049a738bda60fc5b8c29c4991379e6c347","sha256":"367c271af72084962640bfca9958c33c029cc0fbb7ffdcc3657b2e760836c54f","sha512":"5a2b188d84f8086306381d80d7151900aa3e55ec552c1e49c940e0752f1801fb6a34fd5653d7ff8a0c25347b75293e52e4440612925237cd5409e36b6ea5c513","ssdeep":"","tlshash":"d8f0dc8463f45e09416913dec351304275b9012a02cd4f42e17c873e43fedce6800343","size":447,"data":"","first_seen":"2025-12-17T17:11:29.011603Z","last_seen":"2026-06-06T13:08:46.605363Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_42.b3pwpx1q.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a4b6641c435ebac91b1cb925a90626","sha1":"548b43cd0439fadf072865438ae359cf4da93181","sha256":"83196178a0ef7703f363284548471f2689e0a0fe3032cf2acf6288f81fa4f8e3","sha512":"ecb64aeb57ad87c8b2df0789ecf6db4d0a9aea0e6159d7ea5ae6e2abeed4efa429194072f30c53b0e58f1e331df969443e94a32728445da094dfd2a6ff2a40c1","ssdeep":"","tlshash":"6df05c809ff05e85403622dedb115509769a613b428d9f11e37c477e534fecd9e00347","size":447,"data":"","first_seen":"2025-12-17T17:11:29.104396Z","last_seen":"2026-06-06T13:08:46.577246Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://5b5f54c6-08b0-4949-9cbc-c0d24fd6c380/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T08:17:54.128402Z","times_seen":182875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useAndroidWebView.BcNsw6uj.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"20a6189c877c1cf2bcc2c58600dbfcf2","sha1":"bde0673417c1fe4f929ba918e869bafe6c808d27","sha256":"3cbb6111e59ed5306cf7e5321074af107e5d8d0d02f0cd93a6bace6ad47e8922","sha512":"9f6d6a2dca3543c959d72a911832154f1990496b778aac3ada87d6d0798877363cef68ecfdb0977baba6b703d361d30f9ce203f4b0faba37993bd43f84ac2c7a","ssdeep":"","tlshash":"fff09e8959f05675e0052faec2523262bb4404bba3cc9fd1f13d0f3d13aaacda944b13","size":516,"data":"","first_seen":"2026-01-19T13:02:58.379918Z","last_seen":"2026-02-09T07:08:44.346863Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/sweeps-survey.Dw43WPRD.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c963365a4abeed3ff6f0434c512b042e","sha1":"42ada1ea709d9509199d424755247f0edc1aa9eb","sha256":"4e0e8f7d7596ad633a3d133ccecddc68375d09ec95feb196934b4be9cb8954e1","sha512":"1639c41b63d04ec5fda0e2b34e573dc361f613ae648c70ff6f6462ded141f078ac93a15bb84cd339b8925b665a6fd769fae23c79a51de7c4d5c06674c83f6ce6","ssdeep":"","tlshash":"d941ab67d2614297004acdf9f016d5316d7300670bc8cb31d1ef977a13998fdd46a587","size":2230,"data":"","first_seen":"2026-01-26T13:20:34.602234Z","last_seen":"2026-01-28T07:45:28.686413Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTimer.a54wJQQB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6dd1e2615f8a44ea06ef544f35aaa9e5","sha1":"a4428c85721aa9282367bb8ba935c737c9cf1c98","sha256":"4021a00a31b1a3300c4cd00a596d48c06805238c48b0d19e3a06f4d7296b20b1","sha512":"dff8e8e765b36f17a5137ac844848c1673c1d73543e4b48d81744eeada6c75b2b6305ff6598d91a2332208cecc394620a88d5807f51482c83a2b499175a09a59","ssdeep":"","tlshash":"1b11ef8913e61a4a901916ecc40125003b58a23235efdfd1f1bc19772baeeeee20cb47","size":887,"data":"","first_seen":"2026-01-19T19:03:20.253308Z","last_seen":"2026-02-23T22:20:45.21965Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BxM4jVp-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d822060ba1d3ae3aa43792d37006a663","sha1":"f034f9b1ec46f006b108005822e3d8ea6275c56e","sha256":"7c43394841be7a55e63617419d7e52dc697ad6decc07a42fc9a8ea1338e2f24c","sha512":"1f6a9209ed8d345bedbe6449f535d3824284281349adbb530bee7c865fda64f3c2e42e3731d2f6bcbe12dab5e0d8766f8284ba88bacd010ea13dfe395be18110","ssdeep":"","tlshash":"17f04e829ee82f2a6126039dc55707b62a66103987cd5b01e27dcf7db7e99cf5018393","size":650,"data":"","first_seen":"2025-12-17T05:47:47.28952Z","last_seen":"2026-06-10T10:14:25.432251Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e672ac06bdcd71c5a345ffd3ec48277","sha1":"0a8b378b7fd2ea97c7e7f547048fa3a88270ec61","sha256":"0b93fccf5668ce12ff94da097ba4c2d0bb4b74f390d12fbdc0636b42e098d38c","sha512":"83ace440db5aa74e0e46cad3a9d61c42cbcc5223126863dfd221a3ef4abba20e54008865b4414e567cdd1eedf2cb815b1524587a63076fe6f3e08d174c0db44e","ssdeep":"","tlshash":"c8c0809dd120d38743f700564151b545216201d53955d04125559415d526f1b07c75c4","size":150,"data":"","first_seen":"2026-01-26T13:01:54.0748Z","last_seen":"2026-03-02T07:54:51.391695Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.Yu0NQmxg.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"324a49ec7efea5e8e13822c2b0cde5a5","sha1":"c19b428f8bb44507322b07293b82f9e7cb11fcd3","sha256":"4d0a9bcabd2544286120503e9f9f02442509d49926fa3a0d52c07ad2243b6274","sha512":"f2e2ce727114e174e000d412291f873c8cd61246f25e6dcff1b404e53b89c1243ca419b094518fd95021fef317cd3ca49e9884e164714fec1d3f3d850f092fcc","ssdeep":"96:VHNWhJeSeVvY5n42z+o3gtVtHCN3cfTSJA0q4bm7qfqLue6Dc6u2yPb0RU:DFdY942BgDTKacBZDcgyPYRU","tlshash":"65c1958476a9e09e01f72496692f1c47f1f0815560adc4a5fa11f2f238b4d8bce37b67","size":6051,"data":"","first_seen":"2026-01-19T12:36:38.276314Z","last_seen":"2026-02-09T18:12:22.058809Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useGetExitDetails.CtCVX7wx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2ed119b3645cf8836883f2ade9e6b613","sha1":"9faa0fbba0be65d339aa243d5cc51e59bdf93bcd","sha256":"76b6136088de46fc4cd635bb7b5849da73d6e0ebfc54fd5ab51e5ac152af6361","sha512":"03186cf59ae10cab51f89b300483a6b0038d2f499bff6f9f73e2ad7c998c1a16af37e69951edab480b564d38c3b37d2cf7b22ac6631418ed09006d00480c6499","ssdeep":"96:zb0nTfoMga8C0hBZA6Z89Ga+ddGdK9FNIjKtwy+52+EPONL1GdNFPJNFR4fDBMtv:MTfoMOzAl9Ga+TGqLkEPONLWqBMtou2u","tlshash":"63c1b3d1a0c6d5fd06cb6cde5a90d02173240f13398d9e64f1aa4c2667bcc0ba2b774b","size":6121,"data":"","first_seen":"2026-01-19T12:36:38.275184Z","last_seen":"2026-01-28T12:57:19.831301Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_28.BVDXIPjz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30b981f4f46ccbeaf776be2127883a7f","sha1":"c706f36c3f6b94c555c79a6597d19229c1eb1c6e","sha256":"d3cdedb02ba34eb20d8d59e2bc94984c579634dd4a414a607f1bf7e8c58e74db","sha512":"db9483777a74f3effed2bc96db93f7b403ae58fa735eeac65efa51a0bb8c91ca586a40f14e9a58a00901fb7893af515f4e64c05104e656125675d93f8e78853b","ssdeep":"","tlshash":"2bf05c85bab05e55403d53ded286650335850533b1ec4f05e1b94b3653aa5d98624342","size":447,"data":"","first_seen":"2025-12-17T17:11:29.074537Z","last_seen":"2026-06-06T13:08:46.560792Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Adex.Cf8ErWNV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"129f99cebb3bb73e523ec17bc53a54ff","sha1":"186762fa54a080dd8158293910fdee1c8cd36e63","sha256":"7cab2bb948e3e074077e634611db58a8075ce9ef9abd2539465befaaf60d06d3","sha512":"0e49997379ad0b40893a8ceec9149e9745705a2a4b09d5e2a8871c8acb0f7d85361dfa469f199ff75364d1ea12c5ab83e7f13e50087ec61b0674b0d262845367","ssdeep":"","tlshash":"8d51c67b84a498ba480e66dee235e3262c3414227c45c6d1a0bdcd2d17e28d5f53de27","size":3089,"data":"","first_seen":"2026-01-19T12:36:38.272715Z","last_seen":"2026-01-28T12:57:19.800522Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.YIixcX8d.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96dbcd83b452b3f0b66cf102c8cddbd8","sha1":"97629e42763b87a5648f5a9cb058d100e8bb80c7","sha256":"82c55b2b380dfb7dd2867072626bdc7d0de4a8030ed864d086ec7ba56f75eeae","sha512":"f9131444c305f43941594b3ad8b9d6c567cdc8532d1d282ad25e02a61bcf727f51aaa41fb4af1e5fdd11fde3dae9441ee1d869e8dfa770d0ef95b9e649b909d1","ssdeep":"","tlshash":"3e316688a16097b8d45e148ef1ac5107ff927359cb4e89e0e17c5637534d8c57a0bf82","size":1855,"data":"","first_seen":"2026-01-19T20:29:12.689272Z","last_seen":"2026-02-23T21:01:55.579093Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getRandomIndex.CEP3EF32.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2d7b3f71c11dbe119ec76b5442ef5e2f","sha1":"628510b7dc4f31c0c37406a296dd1991f75da434","sha256":"a59e870cf8f0084faa7e8674fe8e1a0af3e717e29949dbb940d3fed8fe649c82","sha512":"6b557507dae5cdc28b640f8b2d0a3c23e16e4df7e311aaafb36035f680efdcca7911df16ac3b9bd95c059ccc3abe67302d944f0354d99f5cfa1e048d635c63b6","ssdeep":"","tlshash":"46f00e84bbf02a540017226cc1ca2102344c81b34aed0f61e13849687378bfed128a83","size":488,"data":"","first_seen":"2025-12-17T05:47:47.255695Z","last_seen":"2026-06-10T10:14:25.356342Z","times_seen":1502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-06-07T08:09:46.269043Z","times_seen":108164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/buildNonProdAttributes.BXOIAHer.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"288673570a996ffb82c7a73876dad4dd","sha1":"e1f9a20f7e7740e8058cacdbcf3a6e89ebc4a87a","sha256":"89c46392411bed9ac1dc2ac634543c192e666600bfb09f56fb648e53543c73cd","sha512":"5823a12dafd38b0bc29ed845ce945493ef057dad001da461be8dafe0fefe905166bd9c4497ec0b482118628524ee9d93905567401a83a8cfe52ce27fd606e202","ssdeep":"","tlshash":"3ce092c5dee1ca1a820a236fd21a6a5174c4042782ed5fa5b27cc62933899ea9414246","size":380,"data":"","first_seen":"2025-12-17T05:47:47.254741Z","last_seen":"2026-06-10T10:14:25.422629Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.C75TZuz1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"398587b2538ecc0d51d25ab09aa0d083","sha1":"d8e8c861225949516b1915d83f2244b380b88612","sha256":"2db2eb4743a83b491e4f6aa2d36fe836140940683b28822ea444d920dd922385","sha512":"2b953a5f5455503a49108111fe6a714a94f53b9bf18fd68235fcfe846d65f1d651ab484f59b3ad1e0a0af1ef7670bfbb3474ea07c5afda8100a3985a39d584b5","ssdeep":"192:7ANR+wBKtL7Quu8TeSdlxADc8XGhyLI0veo/MTPU27Pm:sGw4tHQuug7lxAQkkyEG","tlshash":"2fd1a653e07141b6648d8cf9e0509632ab3705ab4bd9cb74e0ffdb340398c95a16bb47","size":6768,"data":"","first_seen":"2026-01-26T13:20:34.641758Z","last_seen":"2026-01-28T07:45:28.784651Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/zones.Cc9SE_k2.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d22cee2b03bdc5633e795320e4d48e20","sha1":"83f44d436a3619930ea1ff523b0f12b096996162","sha256":"8907dd0ecc1f209a283157cd42bfa31e32eafae62d313c6116df46e7a740dd49","sha512":"cf532d32403eac03ee8ae6cc0f0abc15a27d1cea8babef70284a825da122a2dd4d8227dcc4fc5ee9e8febbe23786d76266a3db3572c9229331efae702f5d911c","ssdeep":"","tlshash":"e901b1c47bf2d2f1815e17ddcb2911017529057f168c6f90f16d463ca7169eae418357","size":811,"data":"","first_seen":"2026-01-19T12:36:38.300494Z","last_seen":"2026-01-28T12:57:19.795084Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/footer.CLXArp8_.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4b3eafe60e0de2be3cffb6141fb95153","sha1":"86c7f897ef5670590f50482564d2a06168ca895b","sha256":"d3cfbfaaa44ef59ee37f651e5de0ed0ec0c9e6b0465cca0e9a7d791718cbfc6c","sha512":"c0e07282e5f0c6b3d0ad00b8e8c468f9022f16804bc3a3dc7bcceb1780815b858966ac6243a74d4eaf2099b281f43d723c213a75936b88336bd1ac9870339611","ssdeep":"","tlshash":"ba2137d7cbf553540108177ccb1795e5e206202bb7cc8f52f86c02e41359bd49b39b55","size":1235,"data":"","first_seen":"2025-12-17T05:47:47.236515Z","last_seen":"2026-06-10T10:14:25.382457Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/detect.D2bPH3YX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4cf155fac53209a9039a448a4cae6312","sha1":"4501464f321f1ff9d7671123b7721d8836e18cb1","sha256":"96b2fc6fb20b975349134ab6c9e5641a51eef4841fe004583978ccd84a6b432f","sha512":"f5c2351b36467f2eee6342de0644b6094199208bfbf36d71c04f66778c574b18c1300a0e0163ee721cd1ed895fdd28fabfc9ee11458fd76d8256ae2f4e8f14ee","ssdeep":"","tlshash":"f671c61c426c206990dc8aff79324e8dbbb5605aaa8c6894fcbb4ced064dd8dc11f57c","size":3766,"data":"","first_seen":"2026-01-19T12:36:38.244861Z","last_seen":"2026-02-13T13:02:45.864502Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCity.BRO2d9v-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"908d12135e2ed5f2b0d3465409668178","sha1":"62ad60a3975a8c1ebeea5618eefe664abf655b13","sha256":"9a0c635b4fe535e3286c52ae4f5d93477ac8496f0292239b35c14a74f33f2ffd","sha512":"d313561705b25cae6b0c083e11144e35d0998ae76e81ab8f7df8aa6484f2221a987e7346702faa05d492ac4e152e5480f992b8e556ff66e27d8eca16fc97d103","ssdeep":"","tlshash":"4cf08bcd4ae056a5d45803acd013a202a7601427db8c8f51f36c036f2b16eced908287","size":552,"data":"","first_seen":"2026-01-19T20:29:12.719122Z","last_seen":"2026-02-19T02:15:56.471678Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7688ca9eb3ca1c878821b1e3fe2c23d7","sha1":"2c41fd7e9f8312d6fed18b21e1a0589413e35553","sha256":"793bae9539499e6e02187febbd2e20fd17dd40260033f5175dbfc2f294440d9a","sha512":"2c8eb7f338f85c2fb760cf69c062669cf5b75609e12799b55dfa6994bc9be6fb16695c8d6ad5fb53ca45ea30285b37ef17beadf62bb41480a61dc0fe5339032a","ssdeep":"","tlshash":"9480002888308020000bc30c0203c8c202320c0f02cc2202ac02800802e03200802c23","size":27,"data":"","first_seen":"2023-04-10T15:53:31Z","last_seen":"2026-06-11T01:21:54.791859Z","times_seen":84416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTabUnder.CQqOaAAZ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"76195b78f72a6f34a6ca57efdb6fbe69","sha1":"703666ee03e7dbba69f5eaf3652410322e202dd6","sha256":"5accb843b18bf306a4a16c1eded813e1c8d8bffc85da069a95cd773863e016f1","sha512":"e8da737a89634b7f621e2dcc94297d2dd25c2a77db6bbfb8cac67927b441ea97f16cc5f700163427904b5e8caf2f11f1d93ac2a3ed577efed980c6db99245220","ssdeep":"","tlshash":"8031408ac27051fd419e09edc1a5ea3323251667b68897e0617d4f39173eecba12b703","size":1723,"data":"","first_seen":"2026-01-19T13:02:58.325318Z","last_seen":"2026-01-28T12:57:19.794115Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/replacePlaceholders.CZI-Rb_A.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5240aa57010f91f99c3dffdb749d0a17","sha1":"5730e0baf929b9eaa313e220cfe01821023b9d37","sha256":"3ccd5d01c4f3986a4ffcc28a8e18ba78e19c9c9733299db0e4276497a396129f","sha512":"9245fb7d742f8e96794a9b686b885aeba23e6cdd98cf48714f8bbc80e3c48d974a6a4b16714f01b5b0a4b4c1a419d31ba8f6b24dc8a9a202530197d08d16ed54","ssdeep":"","tlshash":"eef0e18512f16bc5911d234cd2663200b6a8511b2aec8f50f17d0776632ecdfc840647","size":565,"data":"","first_seen":"2025-12-17T08:15:43.350692Z","last_seen":"2026-05-06T13:02:57.297079Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/countries.EcOHYHd5.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"068296d9fab7713289aebfeb2dbd9078","sha1":"cff02a72b77b715fc52bead630a91f8f3d4d152a","sha256":"e14e0e7cd74140856d78f3e305439c995f779ae032868059f774d1810a763a88","sha512":"764471a66929335ee14d86cb4e4a75481f757937a3f4c688b5d372cf2991f9f7dec02613b824b5fd4cc5124afcf8cf5bc6b610c5eaa210bec243aedfb6438005","ssdeep":"192:4ca6CN+ABBnT3Q5WbuQMZdHfXfBoRfQvP3s2wQWJGPEIuCxg4en97jF:4mTHfXfO9kPhCJGq4e97jF","tlshash":"9f622f8ed3520fdecdb31b5cb85d2ca0e22a1d19ce4a6235dccb0b961a385d0613e79d","size":15163,"data":"","first_seen":"2025-12-20T22:10:21.214891Z","last_seen":"2026-06-04T02:36:04.733937Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BmU-GBoP.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca0a7efce5af5d02627e372d42d10fda","sha1":"a6785b95ba8a07a96d61471350ee5d94f4e6151c","sha256":"329de31354ef9e97807b719c2eb3c351250c30a717d16ab39180995209c62546","sha512":"3dd8681b3fb575effe56ab1980d5069d09da95ada6c1b4623f42b4795a08038c1ecfaad31301d792284b7605084f4c4967ee064a7ce15013d68b579c131caa78","ssdeep":"","tlshash":"d451fd53d27242930409cef8e066e1325a33506717c8d775e6ef873a17d84fed16a643","size":2511,"data":"","first_seen":"2026-01-27T19:07:16.904826Z","last_seen":"2026-01-27T20:09:58.357445Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_50.BPGELZtB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a987cff217c7217a4cb9c965b1dc43","sha1":"a75fe719ea5e3fd900afdda15166de227bcbf662","sha256":"2e61a3539a5df15c8d7db49ca70b8eceadbf537940e22e485bafb30d24348333","sha512":"715727e5d659c8e46ad9ba4217f3cea63ce5222bdfcff126acd4895b21ae3f5b92e0cf7688bf90b7db41580adcffafeec385dd150f29e418dcbfead88cb6845b","ssdeep":"","tlshash":"1af0278566f06954412512edc24651813ab8126362cc1e61f378062b83997ddd850783","size":447,"data":"","first_seen":"2025-12-17T17:11:29.058276Z","last_seen":"2026-06-06T13:08:46.558732Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/html/r20260126/r20190131/zrt_lookup_fy2021.html","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe6cca5f2c79a148a4539653a375870e","sha1":"280433b667202426b7b99c7989544e688a561ce4","sha256":"d0fdd569f037fb64eb79c0d0a6f4e6b4f9c877f4ea7369534c8e83e69ae62f12","sha512":"9e441eaf5778d96541b2f57af215d30fbf5291042646ae86de1576b93215f5625eb7e8bf27cd31bceff7716a3b1f13d13e68661843d14332c07b2ad171144d7c","ssdeep":"192:AWA36uZ8g3WsczaBMcnRQmOE6cSuTX8/fTdb/roK2lzoU4f:AWA36uZ8qkzaBMcnsE6ITM3NEK2NoU4f","tlshash":"8a02fae9b771646753f394a6003f2902e163a612f808c49ab55cdcd7295475603faffc","size":8523,"data":"","first_seen":"2025-11-13T10:59:30.905684Z","last_seen":"2026-03-18T09:51:46.609316Z","times_seen":1798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008340.highrevenuegate.com/e9980ddec67e439d04b71a049a41ffdf/invoke.js","fqdn":"pl17008340.highrevenuegate.com","domain":"highrevenuegate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"812f75241eead2084aca3e0ed6301f49","sha1":"f5fca23819280319af8d23d4baace7ba31be82fd","sha256":"0482444fe14aa7db7dc5fb0e606e7732e83ddce5b62522969a26f2583b53426c","sha512":"d69feddd3f1b4cbb4595e8ee8f7a968c9a5dc922cf23f460554942366dc9bad121cf27cad6b3de4c073b2edcf9dbb6d0a848c2a3f0f4d861653a12309dbe9fda","ssdeep":"768:pL+PQP8OgUDGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPIgkIW3fX:pcUDR6fCoM4R/Zyw4wgkII","tlshash":"8d13d79a7f91b56c0376b47b043f922ef6399d0260c8c9acd143e8952faca4dc13db59","size":43781,"data":"","first_seen":"2026-01-27T20:09:58.415323Z","last_seen":"2026-01-27T20:09:58.415323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-06-11T01:00:56.581319Z","times_seen":12850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008340.highrevenuegate.com/e9980ddec67e439d04b71a049a41ffdf/invoke.js","fqdn":"pl17008340.highrevenuegate.com","domain":"highrevenuegate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"15ceadd2457e2a4f10713216f077e4dd","sha1":"c2dd22abf2474f7485f9acfc8016701650e59ec3","sha256":"60a1b9dd4a26d47d8c6072582b7fcc45c0855397369ace77e70d37aac7d51d30","sha512":"0f329bd90e744055f1f6c8d7be6b2aba49ec69d745993c08484a9298011a1a2311fc7daebac09ee3809f1d048a0ecc5201279cd66ddfb7d27988be5a4cbe76d5","ssdeep":"768:pL+PQP8OgODGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPIegI63fX:pcODR6fCoM4R/Zyw4wegIc","tlshash":"6213e79a7f91b56c0376b47b043f922ef6399d0260c8c9acd143e8952faca4dc13db58","size":43801,"data":"","first_seen":"2026-01-27T20:09:58.417048Z","last_seen":"2026-01-27T20:09:58.417048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-11T01:01:35.675292Z","times_seen":18583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useStorageService.ChE-3xBz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"285e167259e2acb49381e0ceb5143841","sha1":"8c5f3175bef91a92c316fbbcee2d5c6376422900","sha256":"e87b0f7c274c0e3f9f3e8e41e577e062de0c3e0ac2c1ebc3815d1229c06456c6","sha512":"add54c1b408622743d83e6f2c2ebd558fadeba5d642d7fbf2ef04e6143ef462798d401fbff37b33835cb565a2d1649d5b505aa28c77e13cc654a9151beddf09a","ssdeep":"","tlshash":"8d31338d2af12971802c18ecf67731c1f17b10aa718e5590d12d4a767ead9cfc27668f","size":1791,"data":"","first_seen":"2026-01-19T12:36:38.277743Z","last_seen":"2026-01-28T12:57:19.814026Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8ac09e515f03d3f18fa1c3e124ed806","sha1":"5e15114e070ccdad80101efe2f87e396699e699b","sha256":"d180abae782c1846f7e1162c889f7aca43baaadb1c0aae062391fbab3de00925","sha512":"e1cdd1826bac1e54104aff2427381a4fda6f19c17a25ff8b65bcf63c97a71aaf8aa3717813f3c5c5fcc60265b85662d6412dc0f508ff14e0b3cb0ad7f9aa45bc","ssdeep":"","tlshash":"8ae020db4815f9d891b1c4a1dc3dd251e734c81dab155877a4fd442f41c8668445659c","size":350,"data":"","first_seen":"2025-10-13T21:17:18.277491Z","last_seen":"2026-01-27T20:09:58.419102Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.CzPYwE_S.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41476cc77514a439435e2777dbcf769c","sha1":"a6f52ac0e72eb2cf0be2fdc54a0af09b2702ccf6","sha256":"e76522b9f99771fe8b6f3b902c9cb6540fc786cdc58b13d6427b33428c79ebb7","sha512":"589dd431fada5b917116acd0b29e6b7d0faf83982b2963481be35aa5eb66e6caeefe26b2d57873828b515160f276cbd20a6771bba6b23fb2a5ffe9dba65416f6","ssdeep":"96:jc6qaOut7qMxOnpeiEI9MmJ3uM4wBuKEWAw0UfI2WXv8VehUf0tckkgHoz/zSSSP:I7aOutGeI9Mif4YpA0Avv8iUMk+oz+S2","tlshash":"87c1842de2b95179b41b8ddcd13a122767353222e98ed7b0a0bd2e201389b8453c77a7","size":6103,"data":"","first_seen":"2026-01-19T20:29:12.758558Z","last_seen":"2026-01-28T12:57:19.801271Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/OnLoad.1QM8fFPu.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe30d9c802bdefc75d772f29c3d42d71","sha1":"f45523681d0820e07cce1636d59158cf0cebfa4d","sha256":"4ab09488650782c0c668129e7f879b282dda14310d3072f6f3fed4b25145692f","sha512":"c839bb807a02f40be39bb5941d973f5445ed5e6deac164d5b33963db55183d01eae661f127df938224eca2864017ede43452dbfd83db41730aa4b6b7e5af021b","ssdeep":"384:quugOsq7n6cshHxfZ4v5Vca3qRJAwzGSvg420BXXmEcNLjZFeo2zBL9dnYSLuGq3:o85X9mLjZco2zBL/A9CC9I854BKEH2Cu","tlshash":"2d825ac9f183643c82a79cfde06b1011fa3e2914b48d8484f28dcdb415a9945d2bbfaf","size":18413,"data":"","first_seen":"2026-01-27T19:07:16.858064Z","last_seen":"2026-01-28T07:45:28.767471Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008343.trustedcpmrevenue.com/58/ae/8f/58ae8f59bb8e156b1e414c15667737f5.js","fqdn":"pl17008343.trustedcpmrevenue.com","domain":"trustedcpmrevenue.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e44f2c463558629f68cb738162dab912","sha1":"c45e1020bc74b4b4693138f5bd655c7d5aae2cd3","sha256":"e783ac19f84700cca494a90aca2a775bbf02a754550525dd6b96191d3633dc10","sha512":"545d3030161bf3d5fc710eb70032dcba1e8276ebb2689fd45180db5c7710744bfcd41e82d0ef1047c433afda6b4b7264a802786e97ddce31b1c8c3f3e39deabc","ssdeep":"1536:k9yUBg8XFOUG/AVTesz3WArOwlNyBv77NzxpQ2jFFwGXjIB:k3B91cqpUhxpJw2IB","tlshash":"f67309487f42f15b5352a073626fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78863,"data":"","first_seen":"2026-01-27T20:09:58.420025Z","last_seen":"2026-01-27T20:09:58.420025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvaaa.com/mobile_redir.php?section=General\u0026pub=846527\u0026ga=a\u0026desktop=1","fqdn":"xvaaa.com","domain":"xvaaa.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e32a6781b1b3fb1275e3e4a374b2732","sha1":"df875b5da010b7b59b7812a3ac16e5ada920f97a","sha256":"afd57de0784b88af50b229234b7435d8889476f20bdcca3d60c4dbdcc91c08da","sha512":"60f027d0007b92a2a3c57209ab23ffea2cffe9fdcf7956e883a966529880053c6ef9a06de66f1b682576f04144afb6a810f98557855223e4a3bca3473721b9fb","ssdeep":"","tlshash":"98d0224e1a2d03b0971e900b167dc9506870016ab655f20d72ecde0fddb4ed6582bde0","size":220,"data":"","first_seen":"2025-10-13T21:17:18.314774Z","last_seen":"2026-01-27T20:09:58.420903Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/CookieSync.D7xsoEnZ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d76010e2343feaaf8b5a6b20267330fc","sha1":"e08c7581f22c99d91724e6aa37ca56249325ff28","sha256":"4680e35a64672fe76bd7de2bf9fb62286cd6200f1cbafca45bcf632a1b71a1a4","sha512":"0934ec8787757034aa25ca26f0e77517cffe65f983161fe559be605101d58f624e6e2fbe9b6c04559c016bf6a190801a63e8d22032ca14a040fa9c2a4001ac8b","ssdeep":"","tlshash":"51217505a3f051b2c14516fdd115113028774976179c9b02f6ae1e302bfea6eea3bb63","size":1333,"data":"","first_seen":"2026-01-19T13:02:58.375702Z","last_seen":"2026-01-29T21:33:30.860515Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_33.BzY8EPZI.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a72877f6984da8c14704a152f815a4","sha1":"9457b49fea646c0d243f2aa704d0bdbb5817c59a","sha256":"2e212c97e339171f1dc6f7e4ea4f7958e00c6087cae0f1413ee8b966fd6cdcfd","sha512":"f53c998fbd5bffdff18ffaa9349e09e9f9262d44790978aca964c0e4190ec028c1720e4290655c93d995aef79e1063a242cea87e032deb00fdaf687fbf1405d4","ssdeep":"","tlshash":"d0f0abc4b7f05e58402a23ade36253013b98112353dc4fa5e27c873ba39eebec900283","size":447,"data":"","first_seen":"2025-12-17T17:11:29.039195Z","last_seen":"2026-06-06T13:08:46.664953Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/NonUnique.Ix368N3T.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc558024c0821cdef9720a0b4fbf560a","sha1":"379d52ea81dc1cef51478bfee5505a830a53d06b","sha256":"23809c55a39c07482415fc4f43eafa7708bb34b5ff619c55358a1fba155a401c","sha512":"f6fe005dec7650a7087bdc9dbbcfe32c5606b47cc3cca78e33a1f58b347f0da5bc1af867c87ae110cf0fae2025db88a9dd4112dd8bfb1e4125c7962002ff5aa2","ssdeep":"","tlshash":"5551604fd8a0c5fd80698dfed115e5311b3a165b67c8c720c48faf350361acaa22bb13","size":2590,"data":"","first_seen":"2026-01-19T12:36:38.299366Z","last_seen":"2026-01-28T12:23:04.01924Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_47.CwpzDnD6.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d385c1b8bf4dffcc98154b3e7e68651","sha1":"8bbaa905e2105f6f111897312f2df892d1420dbf","sha256":"d7f9334a09918647099799e701707172d4b4a7ab40636bb84fa80fe6d8a2e077","sha512":"ff4b40299ae4a98d38ec74c26176ffc26502e3e17ee3a610e942201e6fe58600b8f166357f5bcbab0f1c623c27a2df92fb8cd2628ce5ae9e718552538bec63db","ssdeep":"","tlshash":"38f0a34666f49a8b806d225fd759550175d7013396ed5f11f1bc0b37935cd8e98003c3","size":447,"data":"","first_seen":"2025-12-17T17:11:28.992872Z","last_seen":"2026-06-06T13:08:46.620068Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_37.BW3Ax322.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b20c918e9522915b5f42e08baeaf8281","sha1":"f26705a80e30651d5de68442494003c7729cfe1e","sha256":"a396965c64b5eceef4a9cbffa42bdd14f675c2755beb65d1270025290abec575","sha512":"6134bc371c2c61db4a6ee42e0f680e132c7afc8eb7e026411d0dc8a457228f571bc8fa967e0092b3c2b3026f8305656b9b0854560fbcf3d48a4c94358e3407b9","ssdeep":"","tlshash":"5ff05c809bf07e18c12a22add65525823998027357dc4f51f37d473a43adbce9a04383","size":447,"data":"","first_seen":"2025-12-17T17:11:28.991969Z","last_seen":"2026-06-06T13:08:46.610042Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"80c6db0e48bed7c758ae848bc4fe37c3","sha1":"bc107a2654886aad6f0e92c8e6a8888b0c0b8cf9","sha256":"34eec28e09758b865d06ee1a02d2d748fff2022fe7d60e4d0e387d51b10bf39e","sha512":"ef0a18a7b34cbd6ae6207cff732905b6202aec4e1d6539731bebc75a03cf38d642dc162f867c2069a5bc0fb2ec6f6c4ff53731b7c4c9baafd1440a5d0d4945d8","ssdeep":"","tlshash":"8690029a5160d9aa2b01503cd6461155ac0025a44130ee48d44cc8c00014820e02eef3","size":54,"data":"","first_seen":"2025-10-13T21:17:18.281232Z","last_seen":"2026-01-27T20:09:58.421806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/searchParams.CUKc6oJM.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"38d22376fa27393f1fae0fd844cb793f","sha1":"26201ef95038de938b285e1689f8ceb9adacd777","sha256":"e139dea388ce56cefeac2b4588cd43d97763b8bb7c02a7a9a58c3af94347a2bf","sha512":"c2c94d179492f833809a81448792713c4900e4e27e584f642e6a87d2a0171763d29f2ad428125abef64e42ff3d704b651f4f0ff2b4239aebafae92df33e4e87b","ssdeep":"","tlshash":"5731b54a53f0c0eb60be1adc801a2761313d0127392deaf5f2380ba2225ed4ec826b95","size":1853,"data":"","first_seen":"2026-01-19T12:36:38.258781Z","last_seen":"2026-02-19T13:37:04.217071Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/customEvents.v14Jg-B0.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"18dd3e2310cb2955a2151cadbc33e54e","sha1":"74971b2de3328b6c1efd65c85fb826999fff1843","sha256":"c6c042261e0672a12367ebeda37d071974920245abb0f995a1c5927c01987647","sha512":"68ee00f13e06f918d2594ada705c478c72cc31cf53f9c3ebe020d77582581444fe4dc1f9839501b3fa133fe82ed950e5fdec8767491832a1e55550a3a4a9f83d","ssdeep":"","tlshash":"ebf0024f3ab41bf0506d236ee6ae590228c94067538c9fa5a13c4b39339dfc8a419643","size":640,"data":"","first_seen":"2025-12-17T05:47:47.217414Z","last_seen":"2026-06-10T10:14:25.383186Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useCustomAutoexitFunction.DX0XNDpv.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8cfe302b591bf7ffb2f004d281b986ad","sha1":"8bdd6f13062ffd24dd8aad8f62748a0ec45eda6f","sha256":"b36817f05d3ccaec5828d6fc96666066b5cb5e0709aca798a2ee3995394e23d4","sha512":"ae5c0c6e24fecdcfaee6bafdf34d298622f8711867e5b93e9ac99d7591329f8e1cb4b9206605f54ff5973f954548bd6d57ec42d01862ea0e7b7bea1635c0a49f","ssdeep":"","tlshash":"fff08bce65f016a3404e27eee21a10232649013f96cccf90e03c533917a9ece530af57","size":554,"data":"","first_seen":"2026-01-19T20:29:12.703292Z","last_seen":"2026-01-30T01:06:48.47679Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useImportImage.CvxTYdxx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4fac861ac402fbe4c9cf72076b8fd1d4","sha1":"e2d968042aec357bc7b50aae300bf64cd6dc5ecf","sha256":"79c263700037c6ec213543a84a79d800d026cbc02fdee96c6d65f6a9cbe23cbd","sha512":"50cb2ae007c143f35c1f832c0178814ee3122c96d9fddee17e60790072c56eb19d0e9c499213a17db1a34e1a65d39502c36518a66b1db2704a3e673cadef0774","ssdeep":"","tlshash":"b301109492f1274ac02827bee128600172440069dbdcefe0f27cca3f538e9daa560b22","size":723,"data":"","first_seen":"2026-01-20T01:05:45.730096Z","last_seen":"2026-02-24T12:49:50.894335Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-11T01:37:05.52959Z","times_seen":29836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTabVisibility.WLLoZryE.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6d19a2591be046dcce63321b8f463c03","sha1":"d02a95ddeca94fe2ed71b18bb33d8f6ec8e00c40","sha256":"292a56d270b56a83d6782d1827d86864de2b003681c982358b677e57c52b3712","sha512":"4873e97f26adfe82fd2076e51b783d459edc39fe8b32d2471369eeb5345906d6cf5d336ad4a4ade80b91506cd5f0f3c1c93bbd2096e57b732047f89b921fc95b","ssdeep":"","tlshash":"ebf0a2f959f01975804a939de27577c13dac00f2a18e6b61b13d4bac1349edf9710e87","size":637,"data":"","first_seen":"2026-01-19T12:36:38.298256Z","last_seen":"2026-02-19T18:18:18.331241Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/InAppOverlay.D161Ck3l.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7ad0a1584a018d396a594be251860d","sha1":"43a53257c3902523e5c9e3edac920492735ab706","sha256":"694d835eba5b261a96997c7b6f0fcd353af9232ffc5143ef1dcd7cd8a9e99476","sha512":"b9f5c656bddfb91d76070c0e862198e8f7318128033f995114e0e81931d2bad7211b1a1cf840b6f5514f7e317072a6105b5682c2657874f9fea269ca685e605a","ssdeep":"96:WMCXfpHH/+celOTJyIyfyXXsy78tbmNMfyp6A6CLyNisdOUCF2Y:Wzh7wOT7ZL78taNMapbPyNisEUCF2Y","tlshash":"51a185dbe05081bca4d9cdecd132f2312a3521d57288e7e0e05e4f3647a9d9791aaf0b","size":4858,"data":"","first_seen":"2026-01-19T12:36:38.285797Z","last_seen":"2026-01-28T12:57:19.82664Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-06-11T01:00:56.580782Z","times_seen":10919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.RjXfrkDn.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"57ea00fa53317344f16b88dbc6b3213f","sha1":"c1c98bbadec949ab8dd3122f362ea8d3d753c0c9","sha256":"aaf49bacf9b122d3efa0f5fd73d062e57d6eb3e388afd0c80d4aa78966325fcb","sha512":"78ace10dd5c0a5d8595808fcbf919d682e64c14008f20b4b0e6ff12a44e9cb0bdb14b49ad704b985f17dbac112d2a1279258fd009351e6d6dbb47c3af8693b4f","ssdeep":"","tlshash":"ea017b9047f33b4ed28d16aec1594f223a8e907bc49c8ee0f22a86781259fec4444377","size":695,"data":"","first_seen":"2025-12-17T05:47:47.221393Z","last_seen":"2026-06-10T10:14:25.366137Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getDataName.DnPNqumQ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a45cda1a3034e96848eb98a3986ab51a","sha1":"f7957faec443e306ad3e6cd34c53823fdb60cec5","sha256":"6d7d0694d19b46d1c6c14653327c6cfee89eda545d58ac2a3f13c6f559dbdeaa","sha512":"6dc895a360f2ecd658e218055ff2acd3588cde36d44d12f8355c3688d98278b49409b4155e7bec6f82d0483f635e230bf21054b500bfe625d8b353ac9cff5f62","ssdeep":"","tlshash":"32e02bc95be01a6940592a5dc3ab169135d9013353cc8f51a1391339179eafd9628287","size":417,"data":"","first_seen":"2025-12-20T22:10:21.232611Z","last_seen":"2026-06-04T02:36:04.647605Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Image.26XKGhRe.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f9fa56e7b0e9502f44708ce63dcd5d06","sha1":"e136cf107223b032171b6b3ca46e3be6330a1208","sha256":"2db7e17bf5a19f91b6907dc68fff297342055d558571ace6a9e6b2d0536afe8a","sha512":"12d3735085da9395cb6d278b1c01555392ec7270d9c58d57e833204e0640a2ab41fb3c6f4d03f1cab274c64d7f94d4f3227c9c00ffe5f7e51278c5e91c92f412","ssdeep":"","tlshash":"ef31b58cd820867e043a6afde11900226f15377f53e6c701e1fc793a23a9acea513743","size":1833,"data":"","first_seen":"2026-01-19T13:02:58.352482Z","last_seen":"2026-01-28T12:57:19.813194Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.3hhz8FD4.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1b67bd2573295d2d424099fe33ee7170","sha1":"8ea004745c22468f93b3d9753ce6d27e9e285b91","sha256":"cd0c103dc4fec8a44cd7d83440b52814b00ea029d160de737981d60d64f61404","sha512":"45bb8280a326ca94ba1595f685556760f06be55192dc3145adb6c9b104d814321fbb69ae7ebae7b31bcd3b0ce31b190a23dcfb9e675c35bc4eb4f0d25b880c1d","ssdeep":"","tlshash":"df619558615223fd90374599e9cf844d7a0667a1cf0e8f9ab1fc612b07c8089bb1a35a","size":3453,"data":"","first_seen":"2026-01-19T13:02:58.350432Z","last_seen":"2026-01-28T07:45:28.777394Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6794290122359041\u0026host=ca-host-pub-1556223355139109","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32eb48762b77d0ed56a9a5f00570f83b","sha1":"7b947d1d0fcab7fd70117725262349abc8ac827f","sha256":"824564ab46861836ab774040ea74367fed8e8edf09ad482dd0a0903a618da26b","sha512":"64afc6f96fcb575df028491bb37997eba74ad4024732d3bbf4da4dd01c364d81fee2a2211d6d939e913f33fa7d6ae6ea34f7fbb4b8655418b28badbf917dac66","ssdeep":"3072:6LOf8nuk1wvWZp3K7uUJw2+gFLmPCGbtGs2NCMAAfSvflltEpfsXCQbjeWoFBKJW:6LOf8ukyvGp3K7uUJwDELmPCetG/NCBG","tlshash":"3bf309d971a2bcb3876389e5006f4107b02da863f04cc8b0f2d8ded97a259655277fad","size":164605,"data":"","first_seen":"2026-01-27T20:09:58.423264Z","last_seen":"2026-01-27T20:09:58.423264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/iframe.C_XRmVXc.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39d2275ea9aa072b7da2154001cc2077","sha1":"317e49e2f89f74f94870f2c37959c21d13729ac7","sha256":"85570a328ed058adb79debfba2a1c14bb3dc232b775f0d5cb9784167a2c927a4","sha512":"b4bf1598807971f6538cca1fac53e65d57abc68213e113cae860efc402bb7ef208851a864163419762ac31a5e66cbf670c400a8c7649e5b307696d3b0935af1f","ssdeep":"","tlshash":"5e1102ce85b06664801a15efd35fb32034250957a74e8781e17d4e7c1729d9b8249fcf","size":1000,"data":"","first_seen":"2026-01-19T13:02:58.329677Z","last_seen":"2026-01-29T21:33:30.826458Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.hTYXdQBy.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cd5cec381cc2aa93b6ce508b6d05cd7e","sha1":"164f392f79ad6e7368929e034d0a0b62a06a2107","sha256":"238996283ffac56bff045748710d6454fd493172c0f4c3291c6a162d0dba1957","sha512":"4e5b531b2a36dbb8b18d228dd0837463520f603fb6f04111e50855c59e72204cda8b38c588c1e8964b6fab59e23b1bb732ef2621d3e203f04d2b755c819f5a1a","ssdeep":"","tlshash":"a911e3cb1ad2514b522b93bfe2175a10b663523b129c4f10e27a0b39369d56ec601797","size":888,"data":"","first_seen":"2026-01-08T16:18:19.770401Z","last_seen":"2026-06-10T10:14:25.381764Z","times_seen":1599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/helpers.Ds-gnqbQ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b786eb28ebd11fa6e719b263a6ecca3e","sha1":"7b5daf679df749e127a39ee0e43c0996442c4584","sha256":"685a75648a177dcfa9de303f2845462f615bcc231d1e2f3a12fe4ec2ec33149f","sha512":"dd209ed1756e098f2cc7d99ec24e87ed286e11bfaee299ccbd0fc8923642f7b955b015020ce53d555c6408187aaf080cf038700818c169a1d43e348bfe7e9090","ssdeep":"","tlshash":"9c41739988a4c875f20d15dcb22d5b6311b916577598cbd1f2ae4b74172cccf822372a","size":2211,"data":"","first_seen":"2026-01-19T12:36:38.260813Z","last_seen":"2026-01-28T12:57:19.810235Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCookieValue.jqm7aO47.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"659311a2a9a1023544730235ab8f12c1","sha1":"9c0dbdae43900b506fbe1827a45458af321ddb6e","sha256":"88c77ec9fd09c1ef8291381863b9b89be9db8948d4b002193c2b4a039195f32f","sha512":"67c79503c7061a2cd076921d1eeb98df63059242fab1956c670511a863dd583462b807d6a05e50144516d02ed34ca639e09c49afccb515b8fa24376c9ec66c2a","ssdeep":"","tlshash":"24019e4a02e01bd0805a258cd108747239594637178d8e62a078772e779fddaf820753","size":660,"data":"","first_seen":"2026-01-19T12:36:38.296078Z","last_seen":"2026-02-09T18:12:22.050316Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.C7jWxJL4.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8fb181fb34226f34c88aa08bc9fe9b7d","sha1":"fb31d2ab061f14f24a79db41c7dd73122ed6945d","sha256":"7bdc55d16f68fd6c3ba4082d8f216251a9f32a8cfc0907d700e9e4bb92dd61fc","sha512":"3d87a96c84fa9f33adccf1df7e20ff0709d10b27e5a492f7bb1a29ec3ca9d8b9143c3be1990ab120ad6b6c9fcaef25ed512a8c578ea6ac2f780e03597fe70834","ssdeep":"","tlshash":"c411c45952e04565d26d56dce26273013265503762cdcf51a17d0e38a7abd8e9419703","size":881,"data":"","first_seen":"2026-01-19T12:36:38.301471Z","last_seen":"2026-02-19T13:37:04.202587Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getImageFromConfig.DeQGJHnf.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f7511257f1a3fcbd5c93995fa9bfde01","sha1":"eaeda92cff912effbe1300787656d9e958e59081","sha256":"4f9ba600f08b39d49c7697d19668ed10e78e979dccd32d7c8266f4053463c635","sha512":"be09a4aeb8dbde9e18b9bd1f6278d0ac17cde9199b1692f37dcb63fa9a4dfdc17353756953987489994852f7d41ff3a0cc9837c36701ba906eb661d3f80e6acd","ssdeep":"","tlshash":"7ef0eb80caf045848e0703cee15b5e823b5c02fb43cc4b00e6798b3a132e6beb116303","size":560,"data":"","first_seen":"2026-01-19T20:35:18.973781Z","last_seen":"2026-01-28T07:45:28.781705Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BlWhBrAj.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc28e39ad645e58fa1018257bd00bbb","sha1":"8a7877a17c82bcb5fce6f5eaee11f16f9703b433","sha256":"edc09ffccb113fba09c15d46dcc7659ec152243c0a05fd9ec30e4782e6c16240","sha512":"3ac2f7291d9bf0b76a2a6fb052313b149fb84211d56e01d67a12be2894c5ab2a62b52cc9e65fb411cfe0ac96627c531e4a3a674217695c340f4fe6d39d6efea6","ssdeep":"384:OgcrqZSiBgpc09RvXMoub9Yd64xvOtXJClQToX2CMhzTm1IJvFnYqoq9KvNtA6wp:4uxPjD3lPhfo4IbMImNuT5cDl7lNDJE+","tlshash":"7cc23217f8473cecf2354edcfe5e1444eda8561c4bc7a829a01e71a1b1c538463b9aaa","size":26488,"data":"","first_seen":"2026-01-26T13:20:34.606864Z","last_seen":"2026-01-28T07:45:28.71863Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/url.C74M5CC2.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d1db969d35638eca0511d58730e076d1","sha1":"054be7841cd4c51336e025930e1d448f7ea3f4bb","sha256":"d8eda512fd0abc647880981786fcfcf5a5f54211be19d94458cc07f13f35832a","sha512":"30eeb28266cf85a47c1d1b605ffd02c1deead8a4a1f272f20d02c051aae2848a1502aea79ccd6cb8c02a07949e79e0a6adecb489e9259bb7b4d542a7bd68648e","ssdeep":"","tlshash":"7b2195c943b6166240ed294d91663343333b096b9acfa2c1913c6c28232468fc1351cf","size":1246,"data":"","first_seen":"2026-01-19T12:36:38.283372Z","last_seen":"2026-02-09T18:12:22.035638Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DzKftPiB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dc7b9f2e7dfb565b8de42f98eedf6a11","sha1":"3f2eaa57fd981ee11ff3bdcc04d7d5541003be2e","sha256":"83093237dc0d08ca208de062b34509ed0fd2d71f16242d32bbf9c088ec9fbb28","sha512":"a4322b4156675bc99c246100f81d231e84d77a97c54db221bbeff05070c54dbc8b17ec5cf35b56feef8e59c729b9e20e0c9d19ddb3f7b29fb2d91b78da829c3a","ssdeep":"192:a79VbybQzpFGGYwqzEqlw/G9Y6sXhLACFmNJTWewgSaEEEh86ZhpMNN+Fy2Qnw7K:iIQzpIzl1liGS6sOJTWTh86ZzM+FyaM9","tlshash":"3542d75870e578761597297a813f010bb33a282ab88cc170b4abd9e47df840c5177fbd","size":12574,"data":"","first_seen":"2026-01-19T12:36:38.26185Z","last_seen":"2026-01-30T01:06:48.475869Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/subDomain.DS1CF8eT.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"83a48280136eaa45bde11c7b95154dca","sha1":"f6df7e4571a4604ef45b0d3c05a860870c627f62","sha256":"5dd518e7df1fe18d23c4fb99efe226a3f9aaf287dae43f9e63ff94a8b794ca96","sha512":"500e7fab7eb6652d3872dbdc6dd6fe5695d8db56bf1b8783a09ee518f777a8015784726c3d7581af6cd94e88209d934aa366ce7bcf520478db5a40b2468d1757","ssdeep":"","tlshash":"631112acb1e54e50a35d32ede13b5a9270e8026387dc0f61e0bc4e1bb715c9ac9a6b41","size":874,"data":"","first_seen":"2025-12-19T22:09:02.488235Z","last_seen":"2026-02-19T18:18:18.452731Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_27.DV4ZO8dy.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0edb71f49d7e45d8e0976fdc64938d71","sha1":"99f773987c6ef218eb3bf9befa5d02e19dfbf0bc","sha256":"3d8bb8bba78a8a7d857f806c04a0d2b7cd18ebec39aaa735a4ecc1a774c3e8da","sha512":"398f343357fc7015f82f60a86b489bac84d3f2cfbad81090faae0b26aa24074c84eab6d1a481dbe48067d08a02c566328eccd4b31aa21063764556004d97695e","ssdeep":"","tlshash":"6bf05c8957f09d08c12d339dda5254c1b6a8417253cc4f51e27c863a63aeace9800393","size":447,"data":"","first_seen":"2025-12-17T17:11:29.024308Z","last_seen":"2026-06-06T13:08:46.492649Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl17008340.highrevenuegate.com/e9980ddec67e439d04b71a049a41ffdf/invoke.js","fqdn":"pl17008340.highrevenuegate.com","domain":"highrevenuegate.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9227b92708567e06bf3db359fdc73bc6","sha1":"2a45dc0d21c6568dddfb74d817463d9dd16a2d74","sha256":"db5cf4a8277453b180d43315bc1cf5975e8b741ec5a74fd2da5f2e6b1e97663f","sha512":"076ebbeb5c9a50de64a4f0ae454ba84d0312e9c1716eb4d110689f8184dba5ea9725eed19d0b9e3c951b8afecfd1d68b2cf85e222ceffc1608359958e6a11e8a","ssdeep":"768:pL+PQP8Og8DGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPI48I+3fX:pc8DR6fCoM4R/Zyw4w48IA","tlshash":"ab13d79a7f91b56c0376b47b043f922ef6399d0260c8c9acd103e8952faca4dc13db59","size":43757,"data":"","first_seen":"2026-01-27T20:09:58.42416Z","last_seen":"2026-01-27T20:09:58.42416Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effectivedisplaycontent.com/f120c5a81a77823e16e2ff5b476a653f/invoke.js","fqdn":"www.effectivedisplaycontent.com","domain":"effectivedisplaycontent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c404d10e913532eca9507c5dc982566","sha1":"49376573acf5332634a287e52e6f8d060cb545aa","sha256":"87b9006b2a67348dbf7d1b238a1ac029560622a9a99132738a9abea819cce282","sha512":"7f7fdea7eb5a024ceb2d669db843193138c111178a9f5d3cc119dd1baf01d2d9c0343fcdd4440bb52c5f01853f73a50aacda68617b5751ced2b345e053f6b65d","ssdeep":"768:dB2EL/5+sNKlKMHLQTwkf0R6sYeLvLoK12G6FYc0CbXf:dB2EV+aMHLQTwkf0bLDLoK12tFYNKv","tlshash":"3723fa5dbf92f006165f70b7372fa106b15a8c19680cd89cfa07fda46d68f05e837aa4","size":46267,"data":"","first_seen":"2026-01-27T20:09:58.425015Z","last_seen":"2026-01-27T20:09:58.425015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-06-11T00:41:11.408076Z","times_seen":9071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getIntlDateTimeFormat.BdAV8Gky.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ec1e18ec03f3cd5299d3175bdc7566ef","sha1":"5fa3bb199328e69a1cab8ce16c609b159192d7dd","sha256":"057d5d64c62470c0bc3ae873ce5292d8e8058df82f8ae72d4bbdfa4f82c59c7a","sha512":"6ce2e6eb4ac9a1a1a1d70eb924c72a98a6a8714dc02879c068f382fdef3a1b697c2cc69ddf2728102027be534289544265f6847e66767603a1fc6749f0ebb5f6","ssdeep":"","tlshash":"241123a34af0472c86710bdc908f174135dc80fb598f4e9a205ae33bda85d5c882dbc2","size":874,"data":"","first_seen":"2025-12-20T22:10:21.259732Z","last_seen":"2026-06-04T02:36:04.738781Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_2.7JktJqxv.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef1259c355e38cc866a57131f7875d25","sha1":"703eb92eecd560efdb7e5d8a199fc0693275cb1c","sha256":"600bc766fe4e0778d9720343a4ad69029061bb999f0fb6518c0c2d926d8f09b6","sha512":"61287e6065b8326b4d07ba1bccd9184b5224f34dc57895f7d1952659b8b46d5cb5833d749cb4fa938c126fdb9e444b2543d4726dbcbaa03b2da1e41483637f30","ssdeep":"","tlshash":"5af0dcc2a6f41a05402f129cc60270417a6d013362cc8f04e37906bb43abede5904383","size":446,"data":"","first_seen":"2025-12-17T17:11:29.013313Z","last_seen":"2026-06-06T13:08:46.563191Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useMainExit.DBICCCaF.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"23c2f669683771a6b2235ee4ad313a1e","sha1":"8db92f8e44babb50330bd5fec2c926b54ce53777","sha256":"a537af234f341759d67b9e017238a932e6ac714b930c4c20a53a6ecdd9733902","sha512":"0b0f1528d383270e5fe51b50891c5e31a37f98a1d7ceaaa9dadba319cb281281f09ac4f52df183929e97ee7f506afa4e472453cd35afca4cc1d7692e90c0caa7","ssdeep":"96:0MlrRq+0UKHhchg3m9BIiyYRfKMk/2IFYIIhYvpsSG/VzsSvXSoRAHb:0aD0UKyhg3m96iyOyMwKuRs/ZsAY","tlshash":"7bb1878fb47510fc7a96c6eee033d1a30937250a2a89d164a49f4f381774249627bb5b","size":5166,"data":"","first_seen":"2026-01-19T12:36:38.29197Z","last_seen":"2026-01-28T12:57:19.803047Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/cn.m0Ne9LjF.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4c6966b8a17a0c862329f3da287c1f3d","sha1":"743d8b04dcc2fc14d83b3c3eb099096c32d4eaa9","sha256":"29fbefb110ad9232727a245dd54f4ac07eb427b09b82bd14602c66678096bf27","sha512":"c8a692054c716f20c1ff22c57e9769c34fe730e807d33b3ef1522a599c7c241f64991274403ae5dfa5055a99dfbaf01918586752440aed673591c37539e6a1c6","ssdeep":"384:S6OvzhflxqBp9okK5k/RWfJcFiL21EYFf8IiUxXGkU6ik6jH5ditiCbPXdjzv/M7:S6Ovzfx49kk/RW/CxXfik6jH5IfM7","tlshash":"f4c2c726750706be2aef93d7f45caea5d8352602e0498b4ce3974f32cb45be9114ab0d","size":25863,"data":"","first_seen":"2025-12-17T05:47:47.288537Z","last_seen":"2026-06-10T10:14:25.377144Z","times_seen":1954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"6d96d429158f4a08ed281b11441e03ab","sha1":"c0b053bafc2258ea5488e2b17851694337cb7a89","sha256":"7f1341dc8b98dcc70f0b24bea584374dfa3f0e010caafc51c2ccdde7a7f53f99","sha512":"4b58bf41077f2ed507e144c541ad3d2451ad541f4c09ab82c05656e552df01e5125af759df58b5fd762037f279904d1562df81abe8efdb43022315afa1a71c64","ssdeep":"","tlshash":"25b092275c26d8948290c5d0e87be65ae221d109eb05ccf9c4f9849e66ca6e85819589","size":129,"data":"","first_seen":"2023-06-30T23:29:58Z","last_seen":"2026-01-27T20:09:58.426502Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useZoneProps.9Cqwoqkz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useZoneProps.9Cqwoqkz.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-b90\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2959)","md5":"d598d3b0f66de091c9df44a78596f2d6","sha1":"ac4d91e584f99cfd360381d79d9091a80846fe4a","sha256":"6628732126e54a611bed803bc7f12a6066a20debaa7d2ed41e20329642c212b5","sha512":"9ab7755f4430c32b77a18c0b18e81593dfd4bc0a03d3b069937219ba574d8f10e8b759fd8bad74a27f9b2f9864ee6a62a025aa728efeb66d53f12cdbc7fac95b","ssdeep":"","tlshash":"e151df9fd12610590ed4cfb9b87929173ee7c22939868d4823c4e83c41e4bd6227f7a5","first_seen":"2026-01-19T12:36:38.24978Z","last_seen":"2026-01-28T12:57:19.8084Z","times_seen":111,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getIntlDateTimeFormat.BdAV8Gky.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getIntlDateTimeFormat.BdAV8Gky.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-36a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (874), with no line terminators","md5":"ec1e18ec03f3cd5299d3175bdc7566ef","sha1":"5fa3bb199328e69a1cab8ce16c609b159192d7dd","sha256":"057d5d64c62470c0bc3ae873ce5292d8e8058df82f8ae72d4bbdfa4f82c59c7a","sha512":"6ce2e6eb4ac9a1a1a1d70eb924c72a98a6a8714dc02879c068f382fdef3a1b697c2cc69ddf2728102027be534289544265f6847e66767603a1fc6749f0ebb5f6","ssdeep":"","tlshash":"241123a34af0472c86710bdc908f174135dc80fb598f4e9a205ae33bda85d5c882dbc2","first_seen":"2025-12-20T22:10:21.259732Z","last_seen":"2026-06-04T02:36:04.738781Z","times_seen":225,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_27.RxPg6du0.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_27.RxPg6du0.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9048\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2358\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfebe8b718c1ec16dca7a24c6131d2c6","sha1":"e391b4d28f63608d7ccecc53903d48f62401dcb1","sha256":"7ac1d3ac02fe7119a34dbc7601089f11e2315ae90e93028898c3f28c34653fb2","sha512":"0dbfeb144c1c83788be64f25076216b379b85fa76dddd79ccba7fc27f13099c392642c3a9110a64e70d218c8b02053e3bcbe8e8fa5f68405a3f874b156dc0b47","ssdeep":"192:+zFb56samxx05fNrdG0rO/rQwmggVY0D3+0e:+zFfxSlI/r9mggVvDVe","tlshash":"e912af19023db729e2a453fdb690df28cd0a7a0c22e4175ba64dc6048e51d8d7cca78e","first_seen":"2025-01-16T10:37:51.132717Z","last_seen":"2026-05-10T03:30:41.60636Z","times_seen":112,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/NonUnique.Ix368N3T.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/NonUnique.Ix368N3T.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-a1e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2590), with no line terminators","md5":"fc558024c0821cdef9720a0b4fbf560a","sha1":"379d52ea81dc1cef51478bfee5505a830a53d06b","sha256":"23809c55a39c07482415fc4f43eafa7708bb34b5ff619c55358a1fba155a401c","sha512":"f6fe005dec7650a7087bdc9dbbcfe32c5606b47cc3cca78e33a1f58b347f0da5bc1af867c87ae110cf0fae2025db88a9dd4112dd8bfb1e4125c7962002ff5aa2","ssdeep":"","tlshash":"5551604fd8a0c5fd80698dfed115e5311b3a165b67c8c720c48faf350361acaa22bb13","first_seen":"2026-01-19T12:36:38.299366Z","last_seen":"2026-01-28T12:23:04.01924Z","times_seen":39,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/customEvents.v14Jg-B0.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/customEvents.v14Jg-B0.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-280\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":640,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (639)","md5":"18dd3e2310cb2955a2151cadbc33e54e","sha1":"74971b2de3328b6c1efd65c85fb826999fff1843","sha256":"c6c042261e0672a12367ebeda37d071974920245abb0f995a1c5927c01987647","sha512":"68ee00f13e06f918d2594ada705c478c72cc31cf53f9c3ebe020d77582581444fe4dc1f9839501b3fa133fe82ed950e5fdec8767491832a1e55550a3a4a9f83d","ssdeep":"","tlshash":"ebf0024f3ab41bf0506d236ee6ae590228c94067538c9fa5a13c4b39339dfc8a419643","first_seen":"2025-12-17T05:47:47.217414Z","last_seen":"2026-06-10T10:14:25.383186Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/buildNonProdAttributes.BXOIAHer.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/buildNonProdAttributes.BXOIAHer.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-17c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (380), with no line terminators","md5":"288673570a996ffb82c7a73876dad4dd","sha1":"e1f9a20f7e7740e8058cacdbcf3a6e89ebc4a87a","sha256":"89c46392411bed9ac1dc2ac634543c192e666600bfb09f56fb648e53543c73cd","sha512":"5823a12dafd38b0bc29ed845ce945493ef057dad001da461be8dafe0fefe905166bd9c4497ec0b482118628524ee9d93905567401a83a8cfe52ce27fd606e202","ssdeep":"","tlshash":"3ce092c5dee1ca1a820a236fd21a6a5174c4042782ed5fa5b27cc62933899ea9414246","first_seen":"2025-12-17T05:47:47.254741Z","last_seen":"2026-06-10T10:14:25.422629Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdntechone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:09:26 GMT","end":"Tue, 03 Mar 2026 13:06:54 GMT"},"fingerprint":{"sha1":"20:CF:7E:0A:3E:60:76:64:CB:13:89:D1:7A:4D:C6:25:CD:DC:95:B7","sha256":"86:F2:8E:50:0F:AF:F9:1A:C3:2C:76:6A:A5:AB:D9:74:D8:CB:8A:FE:B7:B6:76:80:83:09:2F:8E:9A:2A:BC:74"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: cdntechone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://datatechone.com/\u003e; rel=preconnect; crossorigin, \u003chttps://datatechonert.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFYeoDsU0uiqzKUGDEtWsx5lERM3hCWf0b0sNcNKGZ0YfipKbATEs1Tod%2Fv2%2BsH76tFqcwkreKoFEL4Ft6%2BiyMHRaC%2FDTlAL35SnNj6r\"}]}\r\nage: 759\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2b6-406a\"\r\ncontent-encoding: br\r\ncf-ray: 9c4ae3561be1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-06-10T10:14:25.43275Z","times_seen":9795,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_26.DUsvWkBR.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_26.DUsvWkBR.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"2dea85180b65840a4fcc6e72927f5017","sha1":"3deb4f8ffc5db602c99df764f1505cca79c4714a","sha256":"fd34c848f5162970a1d4cd82d4b5833424b7d77c04c69f197b0a11f3244c746a","sha512":"c24a18ed08aa048723a996002ad8f7c09dcf87025d7fa83f736315554619047d975f68af5e7fa43a86548e675fd075031fc7fa41879f61351982153cfa29ffd0","ssdeep":"","tlshash":"f5f05c9556f1991c852d12dce152a5137a990923d6cc4f11e23c4f3b239efdd88a0343","first_seen":"2025-12-17T17:11:28.970079Z","last_seen":"2026-06-06T13:08:46.651396Z","times_seen":84,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wildwingshackers.blogspot.com/","date":"2026-01-27T20:09:26.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:32:06 GMT","end":"Sun, 05 Apr 2026 05:31:55 GMT"},"fingerprint":{"sha1":"E4:3E:65:D3:05:EF:8F:3A:11:69:6A:52:FE:6B:BB:A4:DF:73:4E:E5","sha256":"B9:7B:F7:C7:4B:6E:66:E0:D7:DA:7A:8B:0D:2E:8F:2F:E9:28:B4:AB:91:95:86:14:DF:44:15:CB:39:DC:EA:41"}}},"request":{"raw":"GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wildwingshackers.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9c4ae3459cdd56c1-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"4fbd15cb6047af93373f4f895639c8bf\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 12/09/2024 23:20:39\r\ncdn-proxyver: 1.06\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1075\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4f338739bd75b634e7f3517bf2e1f433\r\ncdn-cache: HIT\r\nage: 2462542\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27466,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-06-11T01:32:16.198561Z","times_seen":39658,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":17,"dns":13,"connect":1,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/hooks.module.BC3kwcJz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/hooks.module.BC3kwcJz.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-ecd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3789,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3788)","md5":"14410470376457c83cc0955f3fdf6373","sha1":"e9442a5de4e26ecf73423d37dddaca7bb73ea00f","sha256":"312cb3b9f56f3b38187f3f1ca4039a671a483d65eb18c84d9612f94cafae07d1","sha512":"239187a26fde0627924f5a284a5b3de8b131f6e0f85df190589597d80c90b0b67a2578cf1f9592205066a133e86754df91ab7106803eacb69ef8cef66abddbff","ssdeep":"","tlshash":"11712cec75b8b03183ab7a3b927f0a1f73366816588ed890712af1d42d7442d6253f9d","first_seen":"2026-01-19T12:36:38.263326Z","last_seen":"2026-02-24T12:49:50.927865Z","times_seen":359,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DkAT5Gqw.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DkAT5Gqw.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2b3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":691,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (691), with no line terminators","md5":"ac5ca98a3bfb5d96c72bb947a9c217e6","sha1":"3ad829afacf5349eb00e51f05e908b0e0cfd2e54","sha256":"1e1cc95533c0ec48397f9f65025416af342877e6ec180058d7ebe2dbee42c970","sha512":"3f7517cfd9ca305511344249fa43e4468be49c667a5e88ede90b6d9f58f2ebea4df38e0d2cea2a36c9d576e2e73a876c0ed8d5912b7dbfb9e77ba81c969dd89f","ssdeep":"","tlshash":"0101c0d315f0a940843f276feb1a26b42645006507ee5a5ee1386324655efdf501fb86","first_seen":"2025-12-20T22:10:21.295507Z","last_seen":"2026-03-15T13:01:24.694898Z","times_seen":205,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getImageFromConfig.DeQGJHnf.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getImageFromConfig.DeQGJHnf.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-230\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"f7511257f1a3fcbd5c93995fa9bfde01","sha1":"eaeda92cff912effbe1300787656d9e958e59081","sha256":"4f9ba600f08b39d49c7697d19668ed10e78e979dccd32d7c8266f4053463c635","sha512":"be09a4aeb8dbde9e18b9bd1f6278d0ac17cde9199b1692f37dcb63fa9a4dfdc17353756953987489994852f7d41ff3a0cc9837c36701ba906eb661d3f80e6acd","ssdeep":"","tlshash":"7ef0eb80caf045848e0703cee15b5e823b5c02fb43cc4b00e6798b3a132e6beb116303","first_seen":"2026-01-19T20:35:18.973781Z","last_seen":"2026-01-28T07:45:28.781705Z","times_seen":56,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_2.7JktJqxv.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_2.7JktJqxv.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1be\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"ef1259c355e38cc866a57131f7875d25","sha1":"703eb92eecd560efdb7e5d8a199fc0693275cb1c","sha256":"600bc766fe4e0778d9720343a4ad69029061bb999f0fb6518c0c2d926d8f09b6","sha512":"61287e6065b8326b4d07ba1bccd9184b5224f34dc57895f7d1952659b8b46d5cb5833d749cb4fa938c126fdb9e444b2543d4726dbcbaa03b2da1e41483637f30","ssdeep":"","tlshash":"5af0dcc2a6f41a05402f129cc60270417a6d013362cc8f04e37906bb43abede5904383","first_seen":"2025-12-17T17:11:29.013313Z","last_seen":"2026-06-06T13:08:46.563191Z","times_seen":107,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/confetti-2.CFX5WsIv.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/confetti-2.CFX5WsIv.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4258\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-10a2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"483d298f3477d9b9a9ed85e2997eb888","sha1":"52e1956082c558621f102ba813e7bdcee3fcb31d","sha256":"24763cff62c7e5d6aa028e7bc528010333a062aef7c5682c2dfdc7bfbcece822","sha512":"dde70cbaccedd4f8ac6d0dcdba646cd812e9e4bc7342b8ed22cb9ef25d89d178e809628d466f274d3eebb9b6fe0f15ab8141f6c4f3bddb6d49ab0d328121322c","ssdeep":"96:vlAX5DzPOoZ4p9AxCqjJzwkYfYz4y8lId6vTvGlyBVt:vlApf34jMlLYfC4ysiMrTp","tlshash":"a5916c45829d4cd344eaeda19873f1c4d93384361ebba6a6d36c0a7811ba611a4071b5","first_seen":"2023-10-18T16:22:08Z","last_seen":"2026-06-02T05:02:33.369227Z","times_seen":1447,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DLaR-eDJ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DLaR-eDJ.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1b2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (434), with no line terminators","md5":"ac5e244cd416cd51e0783240b14bcbaa","sha1":"6cbf6b3bf7f67c7133305aea4d39e2df61239c25","sha256":"a0cb77f9eb8d10f3b078e83ab40f5ae15bb9e3b42f4a54996d2ce7fef9989da4","sha512":"3d48d7f733476978dcd18a16d523f03b06d9429da421d8e029d00e04e7bd4b09fea36931bd5c6efe9b25f82e10d031ed7b5c962c91a0e390e4c5a7ae332192c4","ssdeep":"","tlshash":"0de0e5c69ef00bb58216279fd91a550131a5003b87dc4fa1e139433a1399e8d9908387","first_seen":"2025-12-17T05:47:47.275747Z","last_seen":"2026-06-10T10:14:25.396069Z","times_seen":1792,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTimer.a54wJQQB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useTimer.a54wJQQB.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-377\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":887,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (886)","md5":"6dd1e2615f8a44ea06ef544f35aaa9e5","sha1":"a4428c85721aa9282367bb8ba935c737c9cf1c98","sha256":"4021a00a31b1a3300c4cd00a596d48c06805238c48b0d19e3a06f4d7296b20b1","sha512":"dff8e8e765b36f17a5137ac844848c1673c1d73543e4b48d81744eeada6c75b2b6305ff6598d91a2332208cecc394620a88d5807f51482c83a2b499175a09a59","ssdeep":"","tlshash":"1b11ef8913e61a4a901916ecc40125003b58a23235efdfd1f1bc19772baeeeee20cb47","first_seen":"2026-01-19T19:03:20.253308Z","last_seen":"2026-02-23T22:20:45.21965Z","times_seen":134,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1187\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1187,"data":"[{\"app\":\"landings\",\"event\":\"adex_init\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 3413ec55ad9fabf72b0108e19de42fd5\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCity.BRO2d9v-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getCity.BRO2d9v-.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-228\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (552), with no line terminators","md5":"908d12135e2ed5f2b0d3465409668178","sha1":"62ad60a3975a8c1ebeea5618eefe664abf655b13","sha256":"9a0c635b4fe535e3286c52ae4f5d93477ac8496f0292239b35c14a74f33f2ffd","sha512":"d313561705b25cae6b0c083e11144e35d0998ae76e81ab8f7df8aa6484f2221a987e7346702faa05d492ac4e152e5480f992b8e556ff66e27d8eca16fc97d103","ssdeep":"","tlshash":"4cf08bcd4ae056a5d45803acd013a202a7601427db8c8f51f36c036f2b16eced908287","first_seen":"2026-01-19T20:29:12.719122Z","last_seen":"2026-02-19T02:15:56.471678Z","times_seen":55,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.se/","fqdn":"wildwingshackers.blogspot.se","domain":"blogspot.se","tld":"se"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T20:09:25.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wildwingshackers.blogspot.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://wildwingshackers.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 27 Jan 2026 20:09:25 GMT\r\nexpires: Tue, 27 Jan 2026 20:09:25 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 203\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":174740,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":118,"dns":30,"connect":21,"send":0,"wait":131,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1103\r\nOrigin: https://cdn.ms1a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1103,"data":"[{\"app\":\"landings\",\"event\":\"start\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:28.000946 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0}]}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 5c3a176e05d7795085e1cd123f94981b\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DtMaCpY1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DtMaCpY1.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-755\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1877), with no line terminators","md5":"7b12e2853a54d27661f357789104bbd9","sha1":"f34d4a1491654082cb71ca9dc306dfd342c5e7a3","sha256":"e8f934e2f84e3f49de25fb949dbcce3b651d4d4760d4793604b3177e14243aa4","sha512":"9653752aa925af4b49110ba84f4b1424624722d41c823891f78e5205d5ff045d4d7b59ad2c23770b9cac819f2ea94e2f550e6097d940d67cb5d6f93a42c6640b","ssdeep":"","tlshash":"1b41cd60a5a6ee37623d00ec82b9330537ae495111cc5e01b37a417ac2f5facc1fd285","first_seen":"2026-01-21T13:41:03.124528Z","last_seen":"2026-02-23T21:01:55.511832Z","times_seen":43,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/InAppOverlay.D161Ck3l.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/InAppOverlay.D161Ck3l.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-12fa\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4858,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4857)","md5":"bf7ad0a1584a018d396a594be251860d","sha1":"43a53257c3902523e5c9e3edac920492735ab706","sha256":"694d835eba5b261a96997c7b6f0fcd353af9232ffc5143ef1dcd7cd8a9e99476","sha512":"b9f5c656bddfb91d76070c0e862198e8f7318128033f995114e0e81931d2bad7211b1a1cf840b6f5514f7e317072a6105b5682c2657874f9fea269ca685e605a","ssdeep":"96:WMCXfpHH/+celOTJyIyfyXXsy78tbmNMfyp6A6CLyNisdOUCF2Y:Wzh7wOT7ZL78taNMapbPyNisEUCF2Y","tlshash":"51a185dbe05081bca4d9cdecd132f2312a3521d57288e7e0e05e4f3647a9d9791aaf0b","first_seen":"2026-01-19T12:36:38.285797Z","last_seen":"2026-01-28T12:57:19.82664Z","times_seen":96,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.3hhz8FD4.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.3hhz8FD4.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-d7d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3447)","md5":"1b67bd2573295d2d424099fe33ee7170","sha1":"8ea004745c22468f93b3d9753ce6d27e9e285b91","sha256":"cd0c103dc4fec8a44cd7d83440b52814b00ea029d160de737981d60d64f61404","sha512":"45bb8280a326ca94ba1595f685556760f06be55192dc3145adb6c9b104d814321fbb69ae7ebae7b31bcd3b0ce31b190a23dcfb9e675c35bc4eb4f0d25b880c1d","ssdeep":"","tlshash":"df619558615223fd90374599e9cf844d7a0667a1cf0e8f9ab1fc612b07c8089bb1a35a","first_seen":"2026-01-19T13:02:58.350432Z","last_seen":"2026-01-28T07:45:28.777394Z","times_seen":61,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_28.BVDXIPjz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_28.BVDXIPjz.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"30b981f4f46ccbeaf776be2127883a7f","sha1":"c706f36c3f6b94c555c79a6597d19229c1eb1c6e","sha256":"d3cdedb02ba34eb20d8d59e2bc94984c579634dd4a414a607f1bf7e8c58e74db","sha512":"db9483777a74f3effed2bc96db93f7b403ae58fa735eeac65efa51a0bb8c91ca586a40f14e9a58a00901fb7893af515f4e64c05104e656125675d93f8e78853b","ssdeep":"","tlshash":"2bf05c85bab05e55403d53ded286650335850533b1ec4f05e1b94b3653aa5d98624342","first_seen":"2025-12-17T17:11:29.074537Z","last_seen":"2026-06-06T13:08:46.560792Z","times_seen":94,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kqftc.com/link?z=8802837\u0026var=2243_31936739\u0026ymid=69791b78fe5b660001d8f3cc","fqdn":"kqftc.com","domain":"kqftc.com","tld":"com"},"ip":{"addr":"104.18.33.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T20:09:28.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kqftc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 01:06:34 GMT","end":"Mon, 09 Mar 2026 02:06:21 GMT"},"fingerprint":{"sha1":"4D:81:31:06:9C:C1:B7:45:90:D1:D5:50:0B:10:C4:C2:7C:86:12:F2","sha256":"C0:76:BE:AE:82:3A:B3:59:D8:26:CE:68:28:D5:7A:7B:16:BB:2A:AA:34:67:6D:19:96:DF:B5:8F:5A:8E:8A:E9"}}},"request":{"raw":"GET /link?z=8802837\u0026var=2243_31936739\u0026ymid=69791b78fe5b660001d8f3cc HTTP/1.1\r\nHost: kqftc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-length: 0\r\nlocation: https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\r\ncf-ray: 9c4ae351fe200883-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding\r\npragma: no-cache\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nlink: \u003chttps://cdn.ms1a.com\u003e; rel=\"dns-prefetch preconnect\"\r\nreferrer-policy: no-referrer\r\nset-cookie: OAID=0482cb52e6364e58e06a53ed6ac3da73; expires=Wed, 27 Jan 2027 20:09:28 GMT\noaidts=1769544568; expires=Wed, 27 Jan 2027 20:09:28 GMT\nOXCCLK=8961917.1; expires=Wed, 27 Jan 2027 20:09:28 GMT\nallcnt=1; expires=Wed, 27 Jan 2027 20:09:28 GMT\n__cf_bm=pqOEa6QbP.n3DV7sbdELAETYW9Q8TTkQarSKjfFqp_M-1769544568-1.0.1.1-6xh4D7SJU0jnDAR8UAvlkOFjUUijW8JaoWxs0l5Ka7vpCsEnqmoJkQc0nerClIvLHuWL2veml4pqYoEA8lsDDy3.3ybi_CfQ0pfQv6s75qs; path=/; expires=Tue, 27-Jan-26 20:39:28 GMT; domain=.kqftc.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125551,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":50,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_37.e6PmYO0B.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_37.e6PmYO0B.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12170\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2f8a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a35273d70b1b37aee419afa474d3d2a4","sha1":"8af3d4378869d1b18755a1817db9a00aaafb6329","sha256":"276fea4d4d3aaacb0e4635e6433a609874d2be4cac2ceb63ae24e2bb1750a00a","sha512":"b427d419c9848857cd3bef357d359a8845b8a6a17bf8781330aadf093f1586a85cfaa03a44406d27e0f2cafbf3ecd3b13fc67b4d025b014f07b087707e104420","ssdeep":"192:IzpLqoS6+v9sNg9R6MIkkqxgxo8rPvzfGw6z17dxJNXEGwbXlxgZaZVTHrB2/YUY:IzpLHS6+lag9rvHL8rTuw0QGsUsTHrB3","tlshash":"ee42cf26573085c7c1749d3849274f52c3ed68a5fee6322dd2f9cc7506d3a6a3479e10","first_seen":"2025-01-10T01:37:13.445945Z","last_seen":"2026-02-16T07:46:28.291538Z","times_seen":44,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/zones.Cc9SE_k2.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/zones.Cc9SE_k2.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-32b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":811,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (811), with no line terminators","md5":"d22cee2b03bdc5633e795320e4d48e20","sha1":"83f44d436a3619930ea1ff523b0f12b096996162","sha256":"8907dd0ecc1f209a283157cd42bfa31e32eafae62d313c6116df46e7a740dd49","sha512":"cf532d32403eac03ee8ae6cc0f0abc15a27d1cea8babef70284a825da122a2dd4d8227dcc4fc5ee9e8febbe23786d76266a3db3572c9229331efae702f5d911c","ssdeep":"","tlshash":"e901b1c47bf2d2f1815e17ddcb2911017529057f168c6f90f16d463ca7169eae418357","first_seen":"2026-01-19T12:36:38.300494Z","last_seen":"2026-01-28T12:57:19.795084Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTeenExit.BD5MYCWR.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useTeenExit.BD5MYCWR.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-5ae\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1454), with no line terminators","md5":"4cc0311c1c8ac5ee27a0b5934da04110","sha1":"939cbce7bf1beb7d1b7f5d130688a2a2fb241ca2","sha256":"cc7645a9352f7067cc8dce65469d181eeef59e3f62c50874bfb9363fb888a3a4","sha512":"63784f59c19bb3a2e34e7509b5871e622f34da7111c16d0218dee5737e09ce0cb85a6caae9857eec05804c081f3d6f89ab63deed770d4696d3b9772b441c9fd4","ssdeep":"","tlshash":"3931fecfe8308afd802d4dfee016f0325b24126b6749d270856e5d362368a8fb527b53","first_seen":"2026-01-19T13:02:58.33816Z","last_seen":"2026-01-28T07:45:28.690876Z","times_seen":47,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1266\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1266,"data":"[{\"app\":\"landings\",\"event\":\"adex_script_load\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275},{\"timeStamp\":1769544569344,\"event\":\"adex_script_load\",\"timeOrigin\":123}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: abd05cdc5afb22b5bb54b061319796a2\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/subDomain.DS1CF8eT.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/subDomain.DS1CF8eT.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-36a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (874), with no line terminators","md5":"83a48280136eaa45bde11c7b95154dca","sha1":"f6df7e4571a4604ef45b0d3c05a860870c627f62","sha256":"5dd518e7df1fe18d23c4fb99efe226a3f9aaf287dae43f9e63ff94a8b794ca96","sha512":"500e7fab7eb6652d3872dbdc6dd6fe5695d8db56bf1b8783a09ee518f777a8015784726c3d7581af6cd94e88209d934aa366ce7bcf520478db5a40b2468d1757","ssdeep":"","tlshash":"631112acb1e54e50a35d32ede13b5a9270e8026387dc0f61e0bc4e1bb715c9ac9a6b41","first_seen":"2025-12-19T22:09:02.488235Z","last_seen":"2026-02-19T18:18:18.452731Z","times_seen":314,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.C7jWxJL4.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.C7jWxJL4.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-371\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (881), with no line terminators","md5":"8fb181fb34226f34c88aa08bc9fe9b7d","sha1":"fb31d2ab061f14f24a79db41c7dd73122ed6945d","sha256":"7bdc55d16f68fd6c3ba4082d8f216251a9f32a8cfc0907d700e9e4bb92dd61fc","sha512":"3d87a96c84fa9f33adccf1df7e20ff0709d10b27e5a492f7bb1a29ec3ca9d8b9143c3be1990ab120ad6b6c9fcaef25ed512a8c578ea6ac2f780e03597fe70834","ssdeep":"","tlshash":"c411c45952e04565d26d56dce26273013265503762cdcf51a17d0e38a7abd8e9419703","first_seen":"2026-01-19T12:36:38.301471Z","last_seen":"2026-02-19T13:37:04.202587Z","times_seen":326,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/push.CJYB3Ae1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/push.CJYB3Ae1.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-29d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (669), with no line terminators","md5":"7cf16d101b71373348c42bd765d772a9","sha1":"d44981487275a237d3ce272c0008038f5e6db516","sha256":"037793a3af8b5bc7a92dcfea4148b0fc44e37063eaf95b2a1795fb2b1e9fca2b","sha512":"498846c248bb04d499abb2cfcd451abb3929415b51486e4cfb5ade041f71ad4f615fe77a7b97a79f7b717ae63c6faa152ed2b85768ce3635e9f6bbd89b92ebe4","ssdeep":"","tlshash":"d9017367bfe80b70a146836ff736564111e2103f5ddc27d9d1b68a790344fcd5409b45","first_seen":"2025-12-17T05:47:47.247183Z","last_seen":"2026-06-10T10:14:25.37459Z","times_seen":1951,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/helpers.Ds-gnqbQ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/helpers.Ds-gnqbQ.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-8a3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2211), with no line terminators","md5":"b786eb28ebd11fa6e719b263a6ecca3e","sha1":"7b5daf679df749e127a39ee0e43c0996442c4584","sha256":"685a75648a177dcfa9de303f2845462f615bcc231d1e2f3a12fe4ec2ec33149f","sha512":"dd209ed1756e098f2cc7d99ec24e87ed286e11bfaee299ccbd0fc8923642f7b955b015020ce53d555c6408187aaf080cf038700818c169a1d43e348bfe7e9090","ssdeep":"","tlshash":"9c41739988a4c875f20d15dcb22d5b6311b916577598cbd1f2ae4b74172cccf822372a","first_seen":"2026-01-19T12:36:38.260813Z","last_seen":"2026-01-28T12:57:19.810235Z","times_seen":110,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useAndroidWebView.BcNsw6uj.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useAndroidWebView.BcNsw6uj.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-204\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (515)","md5":"20a6189c877c1cf2bcc2c58600dbfcf2","sha1":"bde0673417c1fe4f929ba918e869bafe6c808d27","sha256":"3cbb6111e59ed5306cf7e5321074af107e5d8d0d02f0cd93a6bace6ad47e8922","sha512":"9f6d6a2dca3543c959d72a911832154f1990496b778aac3ada87d6d0798877363cef68ecfdb0977baba6b703d361d30f9ce203f4b0faba37993bd43f84ac2c7a","ssdeep":"","tlshash":"fff09e8959f05675e0052faec2523262bb4404bba3cc9fd1f13d0f3d13aaacda944b13","first_seen":"2026-01-19T13:02:58.379918Z","last_seen":"2026-02-09T07:08:44.346863Z","times_seen":182,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=vk949k2skd8icitnl35wp5gtczb82zl8","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=vk949k2skd8icitnl35wp5gtczb82zl8 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.ms1a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cdn.ms1a.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=vk949k2skd8icitnl35wp5gtczb82zl8; expires=Wed, 27 Jan 2027 20:09:29 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9c4ae356da390daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6660491a1432c64c6465e3fdc47fe73","sha1":"d699ccf5d21314b2bbd9f96b41711687a8bc2222","sha256":"0576ef3bf6fb67f27d01b393ebaaa9edf52208edda78c9194429001aa93386a3","sha512":"c8598969aa0fa26c095a8e32754684363fe72a59d6f7d60984c64bbd539ef826086747c02f7ac0d0c15405e7cd202a730bd1a2852a7073e5a857dfd8b5fdd051","ssdeep":"","tlshash":"71a002430b5816a540167525feea97235002128654655b5956e9430163c71fe6895a19","first_seen":"2026-01-27T20:09:58.355602Z","last_seen":"2026-01-27T20:09:58.355602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":37,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/cn.m0Ne9LjF.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/cn.m0Ne9LjF.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-6507\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25862)","md5":"4c6966b8a17a0c862329f3da287c1f3d","sha1":"743d8b04dcc2fc14d83b3c3eb099096c32d4eaa9","sha256":"29fbefb110ad9232727a245dd54f4ac07eb427b09b82bd14602c66678096bf27","sha512":"c8a692054c716f20c1ff22c57e9769c34fe730e807d33b3ef1522a599c7c241f64991274403ae5dfa5055a99dfbaf01918586752440aed673591c37539e6a1c6","ssdeep":"384:S6OvzhflxqBp9okK5k/RWfJcFiL21EYFf8IiUxXGkU6ik6jH5ditiCbPXdjzv/M7:S6Ovzfx49kk/RW/CxXfik6jH5IfM7","tlshash":"f4c2c726750706be2aef93d7f45caea5d8352602e0498b4ce3974f32cb45be9114ab0d","first_seen":"2025-12-17T05:47:47.288537Z","last_seen":"2026-06-10T10:14:25.377144Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BmU-GBoP.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.BmU-GBoP.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-9cf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2510)","md5":"ca0a7efce5af5d02627e372d42d10fda","sha1":"a6785b95ba8a07a96d61471350ee5d94f4e6151c","sha256":"329de31354ef9e97807b719c2eb3c351250c30a717d16ab39180995209c62546","sha512":"3dd8681b3fb575effe56ab1980d5069d09da95ada6c1b4623f42b4795a08038c1ecfaad31301d792284b7605084f4c4967ee064a7ce15013d68b579c131caa78","ssdeep":"","tlshash":"d451fd53d27242930409cef8e066e1325a33506717c8d775e6ef873a17d84fed16a643","first_seen":"2026-01-27T19:07:16.904826Z","last_seen":"2026-01-27T20:09:58.357445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useImportImage.CvxTYdxx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useImportImage.CvxTYdxx.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (722)","md5":"4fac861ac402fbe4c9cf72076b8fd1d4","sha1":"e2d968042aec357bc7b50aae300bf64cd6dc5ecf","sha256":"79c263700037c6ec213543a84a79d800d026cbc02fdee96c6d65f6a9cbe23cbd","sha512":"50cb2ae007c143f35c1f832c0178814ee3122c96d9fddee17e60790072c56eb19d0e9c499213a17db1a34e1a65d39502c36518a66b1db2704a3e673cadef0774","ssdeep":"","tlshash":"b301109492f1274ac02827bee128600172440069dbdcefe0f27cca3f538e9daa560b22","first_seen":"2026-01-20T01:05:45.730096Z","last_seen":"2026-02-24T12:49:50.894335Z","times_seen":142,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"172.64.150.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 15:23:45 GMT","end":"Mon, 13 Apr 2026 16:23:36 GMT"},"fingerprint":{"sha1":"CC:46:4E:35:37:84:7C:17:30:E9:E8:0C:64:33:17:26:0B:0B:34:38","sha256":"89:5A:A9:73:8C:43:5B:EC:2B:71:8F:CC:41:99:A2:07:1A:4E:2B:9C:D5:EF:28:FA:AE:01:7E:29:12:5F:8D:3B"}}},"request":{"raw":"OPTIONS /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://cdn.ms1a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-length: 0\r\ncf-ray: 9c4ae3598e4856a4-OSL\r\naccess-control-allow-origin: https://cdn.ms1a.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=brfpBnGNEIGmRuOU5OhOEaYlBmWcXGYe5FEf2GROgFo-1769544569-1.0.1.1-rdcrCiOunUcd79v7_UzvPmcPjOVl68HSx1n95ES0m2GN20.QUcq1_Are5pdcvCAg2MO60tDkJTjHUEmgAOq.Kj06cQ0HRKt9okE5yISgrts; path=/; expires=Tue, 27-Jan-26 20:39:29 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":35,"dns":10,"connect":3,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400italic,700,700italic%7COswald:300,400,700%7CShadows+Into+Light","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wildwingshackers.blogspot.com/","date":"2026-01-27T20:09:26.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400italic,700,700italic%7COswald:300,400,700%7CShadows+Into+Light HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wildwingshackers.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 27 Jan 2026 20:09:26 GMT\r\ndate: Tue, 27 Jan 2026 20:09:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29230,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1594187bbee461f8ef727790c4cafd87","sha1":"6d74f3170a38c32ef6ea7fe12e02a0663ec915ee","sha256":"006b0e7453aeed8826ee5b29cb2cfc9e123a5720d7b6cc71133ce2d44b4ae9cf","sha512":"6a7cbffeed33b1ab9310a0c4ae9eee359c3a0de543e88b99f5359fc5ad91f53fba475a62f01cd29ed0ba5e9ffa6d18a7eaca184c9950314f9844d3cfd86fcaff","ssdeep":"384:+bOjI8t7KvGqY49xn+v6OiFLty5v7qY49Un1BjXqY4nU8qY4Duc1M6s:kiCYHLXLdcr","tlshash":"26d24f91042b648067432cd233de3e30de0fa2517044d076abfe5b9aeedad69a3b535d","first_seen":"2025-09-28T00:55:30.246982Z","last_seen":"2026-06-08T14:45:36.294872Z","times_seen":18,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":67,"dns":0,"connect":7,"send":0,"wait":23,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_13.B7Rp8yL1.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_13.B7Rp8yL1.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11296\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2c20\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df75fb0b6fe1acf6b3428fe147f5224d","sha1":"d8a49e360ed37ea09afd6c69d36111d926083515","sha256":"6a960be65b7cc1f98bdfd10eca52315e6f448d4915caada2bfefbdce657af31f","sha512":"5968e3f2dc639bd4c4403b61a33640056eb81b0b21f623fc2f1432fce02edf577a663fcf73139e97b05203c87b76194e3541e4480500af8e8763e996e9229de9","ssdeep":"192:XziMC5pLLE1S03hK4y0HOoym/Nom3JMyn1SxrJXezd0l6xmdWte:XzxCPLErxK41uoh3WyojOzOoZte","tlshash":"4f32bf4d318747d9d47246f0fdc52bd952733db36bdde8e20286038a4dbe986ad6410e","first_seen":"2025-01-11T07:04:20.91135Z","last_seen":"2026-03-03T13:03:15.663927Z","times_seen":52,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.RjXfrkDn.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.RjXfrkDn.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2b7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (695), with no line terminators","md5":"57ea00fa53317344f16b88dbc6b3213f","sha1":"c1c98bbadec949ab8dd3122f362ea8d3d753c0c9","sha256":"aaf49bacf9b122d3efa0f5fd73d062e57d6eb3e388afd0c80d4aa78966325fcb","sha512":"78ace10dd5c0a5d8595808fcbf919d682e64c14008f20b4b0e6ff12a44e9cb0bdb14b49ad704b985f17dbac112d2a1279258fd009351e6d6dbb47c3af8693b4f","ssdeep":"","tlshash":"ea017b9047f33b4ed28d16aec1594f223a8e907bc49c8ee0f22a86781259fec4444377","first_seen":"2025-12-17T05:47:47.221393Z","last_seen":"2026-06-10T10:14:25.366137Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.hTYXdQBy.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.hTYXdQBy.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-378\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (888), with no line terminators","md5":"cd5cec381cc2aa93b6ce508b6d05cd7e","sha1":"164f392f79ad6e7368929e034d0a0b62a06a2107","sha256":"238996283ffac56bff045748710d6454fd493172c0f4c3291c6a162d0dba1957","sha512":"4e5b531b2a36dbb8b18d228dd0837463520f603fb6f04111e50855c59e72204cda8b38c588c1e8964b6fab59e23b1bb732ef2621d3e203f04d2b755c819f5a1a","ssdeep":"","tlshash":"a911e3cb1ad2514b522b93bfe2175a10b663523b129c4f10e27a0b39369d56ec601797","first_seen":"2026-01-08T16:18:19.770401Z","last_seen":"2026-06-10T10:14:25.381764Z","times_seen":1599,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/checkCrossDomainCookie.DwO9LtWS.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/checkCrossDomainCookie.DwO9LtWS.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-570\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1392), with no line terminators","md5":"6f3eeac07a27a62725eb932e85f63c6e","sha1":"fdd2d24e1e7f6196e9b87931a4e70f32634fe6ef","sha256":"963858d6abca7349617da203745034cc397b950356124a35860140e433abe86a","sha512":"dfba3d64c380a99cba3e477f1a297e4ab25d52e3c00c0a432906eee473d99593501b03083a81577e26884822f37461cd836aadda79f530ec0005933c47601d03","ssdeep":"","tlshash":"532122c1b2f2a4b806ba56dce0263701f5148a2563cdc7d192aa02352e94eafec3161b","first_seen":"2026-01-19T12:36:38.268051Z","last_seen":"2026-02-09T18:12:22.024741Z","times_seen":231,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCurrentDateLocalized.la0jVmAa.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getCurrentDateLocalized.la0jVmAa.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1ce\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"feaa5781ac5e372d0dbfc870be45d25b","sha1":"d6c776ecaafdf3a535ceb6313f6df124a2510a16","sha256":"6d396afe9f02df91b7c3f3952dee9234b3e9a3f44aa2dfb7906547afbfbcb9e2","sha512":"5cf0cb32adc3b585ff9d9508e212497e67df11f53ce77d9b4866dc47e2bbe0ce903b564e5e7afc85ce88c9c34cc0133c6b15eab1271e9f8ad3d3e969afbd6b96","ssdeep":"","tlshash":"04f027c28ff02b59801f13aec6765501354841bb2adc4f62e12e073b63d9a8a460538b","first_seen":"2025-12-20T22:10:21.29088Z","last_seen":"2026-06-04T02:36:04.681063Z","times_seen":224,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_47.CwpzDnD6.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_47.CwpzDnD6.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1d385c1b8bf4dffcc98154b3e7e68651","sha1":"8bbaa905e2105f6f111897312f2df892d1420dbf","sha256":"d7f9334a09918647099799e701707172d4b4a7ab40636bb84fa80fe6d8a2e077","sha512":"ff4b40299ae4a98d38ec74c26176ffc26502e3e17ee3a610e942201e6fe58600b8f166357f5bcbab0f1c623c27a2df92fb8cd2628ce5ae9e718552538bec63db","ssdeep":"","tlshash":"38f0a34666f49a8b806d225fd759550175d7013396ed5f11f1bc0b37935cd8e98003c3","first_seen":"2025-12-17T17:11:28.992872Z","last_seen":"2026-06-06T13:08:46.620068Z","times_seen":124,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_17.DerJGWkV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_17.DerJGWkV.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e942e7fc67e903b537554a86c97e53d4","sha1":"81922a049a738bda60fc5b8c29c4991379e6c347","sha256":"367c271af72084962640bfca9958c33c029cc0fbb7ffdcc3657b2e760836c54f","sha512":"5a2b188d84f8086306381d80d7151900aa3e55ec552c1e49c940e0752f1801fb6a34fd5653d7ff8a0c25347b75293e52e4440612925237cd5409e36b6ea5c513","ssdeep":"","tlshash":"d8f0dc8463f45e09416913dec351304275b9012a02cd4f42e17c873e43fedce6800343","first_seen":"2025-12-17T17:11:29.011603Z","last_seen":"2026-06-06T13:08:46.605363Z","times_seen":100,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_14.DT0hNIxq.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_14.DT0hNIxq.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"1e4356d2d57dab51105f98843d004a74","sha1":"a742376c1ff7c4da6bf03967c0239e322ae2b19e","sha256":"851aadb4fcaa095e1061cae9ecdc6ce911444b1d95cd5cca3a0d24acc81fd438","sha512":"7f30026903f55df8f228d34dad2173441193e6732245594a101e918d317591db44fb34a12a7b865dd52934870fbf7c8c2f5fd2c81ae741d3cb1b76baf164f7d7","ssdeep":"","tlshash":"10f05c466ef05e25403913dcc3926c4176e91462078c2f92e17c063f57adec9a904343","first_seen":"2025-12-17T17:11:29.113427Z","last_seen":"2026-06-06T13:08:46.621752Z","times_seen":101,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/confetti-1.CcVPJspU.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/confetti-1.CcVPJspU.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11774\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2dfe\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb224b5a86e8c9f478bd6f2a8c3c53ac","sha1":"0bdc5a91bb1c87fe55b023ee6cef886edb64967e","sha256":"e910f36c92776b4e4a415316307a6cbb4d4f039bb8d66dd094c7b90d76f6fa1c","sha512":"635904390f78d22b08f599a0ee6829f5e308c957f744a4a9366c6609dc3d7729631c158be5050cf00ae3ec60f237d5e9696966616ad2499f022328b0dcba1e1a","ssdeep":"192:EX6TaOD1ObeaLP9rKLqqCE3bb6fq3w+MvU9nUxFD3Xnz1eNp2myNTAH/Ib/nllDz:E81obeaj9rKXCYbWKvMvQURRefzWTyYZ","tlshash":"d632c004a0e034ddc6101a7fb9218153b01b9f7d65a49e17bc327177e8fe08bad78578","first_seen":"2023-10-18T16:22:08Z","last_seen":"2026-06-02T05:02:33.414084Z","times_seen":1447,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/urlParams.DlRCYo1B.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/urlParams.DlRCYo1B.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-222f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (8751), with no line terminators","md5":"ddeaed7cdbfddec0f4586c62fdacb7ab","sha1":"c3930c3749d04d36983270ff0bf19b329b27b734","sha256":"c975fcd99bd3f389c0119b4bebe02239aef83da5b0cccc4ac58b41cc61433b7a","sha512":"642a42f6089ce08ca30cb5ff59252a1de7550185ade21a43c214d545036a9271f054c679f1a5e46a4bc0936047939a94150a71668740e2f625c5e4f992ecd9d5","ssdeep":"192:qZdoLRmRIvVvw8wyDfWrjIapX+sXq4UvTvrLO6BUU2e2zUb:sf4Viwu+2q4E7r7Ifob","tlshash":"f10246accd69e28c1ab511d42208af31632e4b1f6045e3a4fb715f5fd36ed7aac82354","first_seen":"2026-01-19T12:36:38.271649Z","last_seen":"2026-02-19T13:37:04.231969Z","times_seen":326,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/searchParams.CUKc6oJM.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/searchParams.CUKc6oJM.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-73d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1853,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1852)","md5":"38d22376fa27393f1fae0fd844cb793f","sha1":"26201ef95038de938b285e1689f8ceb9adacd777","sha256":"e139dea388ce56cefeac2b4588cd43d97763b8bb7c02a7a9a58c3af94347a2bf","sha512":"c2c94d179492f833809a81448792713c4900e4e27e584f642e6a87d2a0171763d29f2ad428125abef64e42ff3d704b651f4f0ff2b4239aebafae92df33e4e87b","ssdeep":"","tlshash":"5731b54a53f0c0eb60be1adc801a2761313d0127392deaf5f2380ba2225ed4ec826b95","first_seen":"2026-01-19T12:36:38.258781Z","last_seen":"2026-02-19T13:37:04.217071Z","times_seen":326,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/detect.D2bPH3YX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/detect.D2bPH3YX.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-eb6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3766,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3626)","md5":"4cf155fac53209a9039a448a4cae6312","sha1":"4501464f321f1ff9d7671123b7721d8836e18cb1","sha256":"96b2fc6fb20b975349134ab6c9e5641a51eef4841fe004583978ccd84a6b432f","sha512":"f5c2351b36467f2eee6342de0644b6094199208bfbf36d71c04f66778c574b18c1300a0e0163ee721cd1ed895fdd28fabfc9ee11458fd76d8256ae2f4e8f14ee","ssdeep":"","tlshash":"f671c61c426c206990dc8aff79324e8dbbb5605aaa8c6894fcbb4ced064dd8dc11f57c","first_seen":"2026-01-19T12:36:38.244861Z","last_seen":"2026-02-13T13:02:45.864502Z","times_seen":225,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/RewardisShortSurveyWheel.DYMPXTB9.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/RewardisShortSurveyWheel.DYMPXTB9.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-3cb\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (970)","md5":"4284fd2f2b705e18c9f6a7400eeb24d6","sha1":"229d959c51df50b1eb9d4bfdf0775ab96ec96628","sha256":"868b103e614ecabb8c07157df30433c4948bf7a8300f390f194438e504721635","sha512":"2c2bd070a5e3777238cdcde0172db7676c4f1f16adff93f45c4ba8285fabc66c8a9ce75304af0f6b113d85ef96ada46b6dd8ee26047480c8088446092fc8da50","ssdeep":"","tlshash":"ed11e5c4e0b07bf9d41e16e9e61d93407132176ec3ddce70b17c05650b589ee7641386","first_seen":"2026-01-21T21:03:17.026963Z","last_seen":"2026-02-19T02:15:56.516965Z","times_seen":20,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/url.C74M5CC2.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/url.C74M5CC2.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-4de\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1245)","md5":"d1db969d35638eca0511d58730e076d1","sha1":"054be7841cd4c51336e025930e1d448f7ea3f4bb","sha256":"d8eda512fd0abc647880981786fcfcf5a5f54211be19d94458cc07f13f35832a","sha512":"30eeb28266cf85a47c1d1b605ffd02c1deead8a4a1f272f20d02c051aae2848a1502aea79ccd6cb8c02a07949e79e0a6adecb489e9259bb7b4d542a7bd68648e","ssdeep":"","tlshash":"7b2195c943b6166240ed294d91663343333b096b9acfa2c1913c6c28232468fc1351cf","first_seen":"2026-01-19T12:36:38.283372Z","last_seen":"2026-02-09T18:12:22.035638Z","times_seen":231,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/jsxRuntime.module.C9kflq3K.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/jsxRuntime.module.C9kflq3K.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2ff\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":767,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (767), with no line terminators","md5":"b62944649b89e4a5f0ae1e8b9e397fb4","sha1":"992a51ba17d0e5330f8c01a2713f95734f07a092","sha256":"df78226d877b2ea9bb05292589efe50aa17eb9d658c91e86f5c87d176a4c142d","sha512":"b8bb9d039e976688bbe6c038c5b2dc0d4729918bb555651765402d77a6e8f59475393f378c65878784847de24ac0794d752241ed91b9108cfead869099bad865","ssdeep":"","tlshash":"570125d575b0d193405a13dfc117190332ac2123518c4b55533eca6563e1bdbc6c4703","first_seen":"2026-01-19T12:36:38.248758Z","last_seen":"2026-02-24T12:49:50.928602Z","times_seen":359,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1479\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1479,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_success\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275},{\"timeStamp\":1769544569344,\"event\":\"adex_script_load\",\"timeOrigin\":123},{\"timeStamp\":1769544569379,\"event\":\"load\",\"timeOrigin\":35},{\"timeStamp\":1769544569723,\"event\":\"cookies_sync_success\",\"timeOrigin\":344},{\"timeStamp\":1769544569863,\"event\":\"adex_status_success\",\"timeOrigin\":140}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 28301b127831d5ccdd68cffc13946d6c\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useBack.BVvk0rPx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useBack.BVvk0rPx.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-9f0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2543)","md5":"7b89b65057b2f19fc2f5dbd0d11433f4","sha1":"9ffecad320afb81c2e7694180a438faa791ffc23","sha256":"c2308480712c9254f10e09eedd4682741517cadff6d8d638f0830d0a068a5140","sha512":"1a3d27ca13989ef1823d9c248ec5819c879d39adc35235b13c592be5103a6d54e457a3dc142816f6af051360332a7a903f89fa91ef3b577e537493140d056e46","ssdeep":"","tlshash":"b85193de90f044b0c0e95adcd225f6323ab9157b3a8dae91f26e4e30137dd8280b4766","first_seen":"2026-01-19T12:36:38.297186Z","last_seen":"2026-01-28T12:57:19.805456Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_39.C6YIrucu.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_39.C6YIrucu.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e7631ce74113ca18ed407735e30007c1","sha1":"8f0eb7a8fb8b342cae4a4c7dfc64c4b8cb6cc2cb","sha256":"0f5df2bb03d2743249d82359c9eee597a829371202c3c670ada855ffd39bf0dc","sha512":"df3e2aa41434e2cf5fa7b372cf67ac57e73684131800a8e5fa5124977794002e85ac1b8283539d294ad72a47f58d3a3915bade8d576a0dd00995f7ff8c12c7f4","ssdeep":"","tlshash":"93f0a38597f479658036139cd1571a0275d8023747cc0f12d2bc0b77439da9dec18243","first_seen":"2025-12-17T17:11:29.089068Z","last_seen":"2026-06-06T13:08:46.604355Z","times_seen":88,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"172.64.150.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 15:23:45 GMT","end":"Mon, 13 Apr 2026 16:23:36 GMT"},"fingerprint":{"sha1":"CC:46:4E:35:37:84:7C:17:30:E9:E8:0C:64:33:17:26:0B:0B:34:38","sha256":"89:5A:A9:73:8C:43:5B:EC:2B:71:8F:CC:41:99:A2:07:1A:4E:2B:9C:D5:EF:28:FA:AE:01:7E:29:12:5F:8D:3B"}}},"request":{"raw":"POST /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 169\r\nOrigin: https://cdn.ms1a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":169,"data":"[{\"name\":\"lead-cross\",\"check\":true,\"prefix\":\"sweeps-survey\",\"defaultTtl\":604800},{\"name\":\"lead-teenage-cross\",\"check\":true,\"prefix\":\"sweeps-survey\",\"defaultTtl\":604800}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c4ae359c8d00731-OSL\r\nvary: Accept-Encoding\r\nx-trace-id: 98ad7c928439621f2eb5bd1cf7586683\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://cdn.ms1a.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=C0iwAo2CNL8slgm5RsyrSzTrmOWx4Z_mTjYyLDGtPmE-1769544569-1.0.1.1-zobdHWz7NVJ3SMhA_rn0Md9HXM6VgMuUKek4L7n2ZU5xA8ltBHbNBHYoO1l0UdNnxGNEuowFsLLqUyYYiSgIULL_QdqwW.6BJVs_C30Uetc; path=/; expires=Tue, 27-Jan-26 20:39:29 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e818eb5e726056207c35291f745207f","sha1":"82b7e9c7687e854d8d9ee96ab58a00f16774e40a","sha256":"e049ed8514ed51deaf9bb58b48c14150d67313f80ec3e4e2cbfd3b6bff5fc37f","sha512":"7d21bd80e3c5d2fd74fad9685ca7a8c4e92cb6435fe890bc83d0eb95c2144eb62e699e1bd72b81de6ee2f2b35f0e1b57eafe7034150d5ac51ee53cbdca6ca5a2","ssdeep":"","tlshash":"38c0121e890908ff850034cd399114c9abc2c5017c58884780038c566bc1342006a3cd","first_seen":"2025-12-12T23:07:12.262132Z","last_seen":"2026-06-04T02:36:04.620084Z","times_seen":70,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/preload-helper.CDVdm_vr.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/preload-helper.CDVdm_vr.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-5e4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1507)","md5":"bde6731db5b37e240ebb6245f05cfef4","sha1":"32e76cde423fae50bafd263090b454bce92059b6","sha256":"d8d70ffacf7707dafabf1ab58bc04e52c202f3577257a43b90dd7cdb7febd309","sha512":"8ab9639575e5c260af75a73693c421497738a79c42abab9595bb1f11dce2f829379b675b12e09e5ae77c6212080d0e6afad486bd94aa699cb0656cad4d7f4a50","ssdeep":"","tlshash":"8e31b7c926e0a032920c1eddd07ba313f5e0246364481891b12e4dbbab2decfd5e4f51","first_seen":"2025-12-17T05:47:47.282137Z","last_seen":"2026-06-10T10:14:25.433653Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/syncMetric.Bb1bRc_L.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/syncMetric.Bb1bRc_L.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1dbe\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7614), with no line terminators","md5":"e6ff546de1aeff18ae461bf0a1390afa","sha1":"53e18b6503aeb4ae2b285349178995e7327474ee","sha256":"33ef1c43c426c4d8a43e2508bf3d26458221cc5ae5c845087e281235da74478f","sha512":"19489a856158d57b634ee323c56516bfb3cfca14bee1000335ed4c9e932695c7586a1a79676000f306f612d5f8bba4736e17031b6dedbe293c0c7fb8160214f6","ssdeep":"192:XftDJSjsb64dFGe/RxOsfOvxseqRlGjKMPRmFGl1aiS:vJJSC6Qz/RgsfOvxsRRlOKM5mgl1aiS","tlshash":"91f1f99a71d1972451ba93ddb2112612e33c960638dc4a74f02a8e2536cdc4fa3b7bf6","first_seen":"2026-01-19T12:36:38.270533Z","last_seen":"2026-01-28T12:57:19.786Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.YIixcX8d.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.YIixcX8d.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-73f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1853)","md5":"96dbcd83b452b3f0b66cf102c8cddbd8","sha1":"97629e42763b87a5648f5a9cb058d100e8bb80c7","sha256":"82c55b2b380dfb7dd2867072626bdc7d0de4a8030ed864d086ec7ba56f75eeae","sha512":"f9131444c305f43941594b3ad8b9d6c567cdc8532d1d282ad25e02a61bcf727f51aaa41fb4af1e5fdd11fde3dae9441ee1d869e8dfa770d0ef95b9e649b909d1","ssdeep":"","tlshash":"3e316688a16097b8d45e148ef1ac5107ff927359cb4e89e0e17c5637534d8c57a0bf82","first_seen":"2026-01-19T20:29:12.689272Z","last_seen":"2026-02-23T21:01:55.579093Z","times_seen":176,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/CookieSync.D7xsoEnZ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/CookieSync.D7xsoEnZ.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-535\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1333), with no line terminators","md5":"d76010e2343feaaf8b5a6b20267330fc","sha1":"e08c7581f22c99d91724e6aa37ca56249325ff28","sha256":"4680e35a64672fe76bd7de2bf9fb62286cd6200f1cbafca45bcf632a1b71a1a4","sha512":"0934ec8787757034aa25ca26f0e77517cffe65f983161fe559be605101d58f624e6e2fbe9b6c04559c016bf6a190801a63e8d22032ca14a040fa9c2a4001ac8b","ssdeep":"","tlshash":"51217505a3f051b2c14516fdd115113028774976179c9b02f6ae1e302bfea6eea3bb63","first_seen":"2026-01-19T13:02:58.375702Z","last_seen":"2026-01-29T21:33:30.860515Z","times_seen":32,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getCookieValue.jqm7aO47.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getCookieValue.jqm7aO47.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-294\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (660), with no line terminators","md5":"659311a2a9a1023544730235ab8f12c1","sha1":"9c0dbdae43900b506fbe1827a45458af321ddb6e","sha256":"88c77ec9fd09c1ef8291381863b9b89be9db8948d4b002193c2b4a039195f32f","sha512":"67c79503c7061a2cd076921d1eeb98df63059242fab1956c670511a863dd583462b807d6a05e50144516d02ed34ca639e09c49afccb515b8fa24376c9ec66c2a","ssdeep":"","tlshash":"24019e4a02e01bd0805a258cd108747239594637178d8e62a078772e779fddaf820753","first_seen":"2026-01-19T12:36:38.296078Z","last_seen":"2026-02-09T18:12:22.050316Z","times_seen":231,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.Yu0NQmxg.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.Yu0NQmxg.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-17a3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6051), with no line terminators","md5":"324a49ec7efea5e8e13822c2b0cde5a5","sha1":"c19b428f8bb44507322b07293b82f9e7cb11fcd3","sha256":"4d0a9bcabd2544286120503e9f9f02442509d49926fa3a0d52c07ad2243b6274","sha512":"f2e2ce727114e174e000d412291f873c8cd61246f25e6dcff1b404e53b89c1243ca419b094518fd95021fef317cd3ca49e9884e164714fec1d3f3d850f092fcc","ssdeep":"96:VHNWhJeSeVvY5n42z+o3gtVtHCN3cfTSJA0q4bm7qfqLue6Dc6u2yPb0RU:DFdY942BgDTKacBZDcgyPYRU","tlshash":"65c1958476a9e09e01f72496692f1c47f1f0815560adc4a5fa11f2f238b4d8bce37b67","first_seen":"2026-01-19T12:36:38.276314Z","last_seen":"2026-02-09T18:12:22.058809Z","times_seen":231,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useMainExit.DBICCCaF.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useMainExit.DBICCCaF.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-142e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5166,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5165)","md5":"23c2f669683771a6b2235ee4ad313a1e","sha1":"8db92f8e44babb50330bd5fec2c926b54ce53777","sha256":"a537af234f341759d67b9e017238a932e6ac714b930c4c20a53a6ecdd9733902","sha512":"0b0f1528d383270e5fe51b50891c5e31a37f98a1d7ceaaa9dadba319cb281281f09ac4f52df183929e97ee7f506afa4e472453cd35afca4cc1d7692e90c0caa7","ssdeep":"96:0MlrRq+0UKHhchg3m9BIiyYRfKMk/2IFYIIhYvpsSG/VzsSvXSoRAHb:0aD0UKyhg3m96iyOyMwKuRs/ZsAY","tlshash":"7bb1878fb47510fc7a96c6eee033d1a30937250a2a89d164a49f4f381774249627bb5b","first_seen":"2026-01-19T12:36:38.29197Z","last_seen":"2026-01-28T12:57:19.803047Z","times_seen":110,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Image.26XKGhRe.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/Image.26XKGhRe.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-729\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1833), with no line terminators","md5":"f9fa56e7b0e9502f44708ce63dcd5d06","sha1":"e136cf107223b032171b6b3ca46e3be6330a1208","sha256":"2db7e17bf5a19f91b6907dc68fff297342055d558571ace6a9e6b2d0536afe8a","sha512":"12d3735085da9395cb6d278b1c01555392ec7270d9c58d57e833204e0640a2ab41fb3c6f4d03f1cab274c64d7f94d4f3227c9c00ffe5f7e51278c5e91c92f412","ssdeep":"","tlshash":"ef31b58cd820867e043a6afde11900226f15377f53e6c701e1fc793a23a9acea513743","first_seen":"2026-01-19T13:02:58.352482Z","last_seen":"2026-01-28T12:57:19.813194Z","times_seen":90,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/preact.module.CNj8Tr9T.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/preact.module.CNj8Tr9T.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2e3c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11836,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11836), with no line terminators","md5":"851e5994275aef055ac14c016675d704","sha1":"8dd4d404400449d0bbe21258e18f3ceadb1ff9ae","sha256":"7810c90698e69225620b1d6da1466b6cd41acb7c2a200b1b845a67859492ad45","sha512":"0dda246a2c35bd24c36526ec9bd07ae91f6c8bd6bc4f031cb2ffb5401201d4e997db9d81e91bf88bff480c19fb9de0e18cb6e4b6dea1f7db5069c2422073cce9","ssdeep":"192:Sg+DMdFKBpA5a4jLj1Swpu+9GB1/Ak5VpkH+Zd/AiXdo2HxuSrmM2Yg8lQdAlMVt:KDi+ejv/fG//AL+Zhui2782Sao6vNT","tlshash":"3632ebb83c20f0609aff116171bf1c0bb37d092fe488446066499dee29b45ad664bfda","first_seen":"2026-01-08T16:18:19.730324Z","last_seen":"2026-06-10T10:14:25.409424Z","times_seen":1599,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/replacePlaceholders.CZI-Rb_A.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/replacePlaceholders.CZI-Rb_A.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-235\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":565,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (565), with no line terminators","md5":"5240aa57010f91f99c3dffdb749d0a17","sha1":"5730e0baf929b9eaa313e220cfe01821023b9d37","sha256":"3ccd5d01c4f3986a4ffcc28a8e18ba78e19c9c9733299db0e4276497a396129f","sha512":"9245fb7d742f8e96794a9b686b885aeba23e6cdd98cf48714f8bbc80e3c48d974a6a4b16714f01b5b0a4b4c1a419d31ba8f6b24dc8a9a202530197d08d16ed54","ssdeep":"","tlshash":"eef0e18512f16bc5911d234cd2663200b6a8511b2aec8f50f17d0776632ecdfc840647","first_seen":"2025-12-17T08:15:43.350692Z","last_seen":"2026-05-06T13:02:57.297079Z","times_seen":407,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_37.BW3Ax322.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_37.BW3Ax322.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"b20c918e9522915b5f42e08baeaf8281","sha1":"f26705a80e30651d5de68442494003c7729cfe1e","sha256":"a396965c64b5eceef4a9cbffa42bdd14f675c2755beb65d1270025290abec575","sha512":"6134bc371c2c61db4a6ee42e0f680e132c7afc8eb7e026411d0dc8a457228f571bc8fa967e0092b3c2b3026f8305656b9b0854560fbcf3d48a4c94358e3407b9","ssdeep":"","tlshash":"5ff05c809bf07e18c12a22add65525823998027357dc4f51f37d473a43adbce9a04383","first_seen":"2025-12-17T17:11:28.991969Z","last_seen":"2026-06-06T13:08:46.610042Z","times_seen":94,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_50.BPGELZtB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_50.BPGELZtB.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"88a987cff217c7217a4cb9c965b1dc43","sha1":"a75fe719ea5e3fd900afdda15166de227bcbf662","sha256":"2e61a3539a5df15c8d7db49ca70b8eceadbf537940e22e485bafb30d24348333","sha512":"715727e5d659c8e46ad9ba4217f3cea63ce5222bdfcff126acd4895b21ae3f5b92e0cf7688bf90b7db41580adcffafeec385dd150f29e418dcbfead88cb6845b","ssdeep":"","tlshash":"1af0278566f06954412512edc24651813ab8126362cc1e61f378062b83997ddd850783","first_seen":"2025-12-17T17:11:29.058276Z","last_seen":"2026-06-06T13:08:46.558732Z","times_seen":89,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_33.BzY8EPZI.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_33.BzY8EPZI.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"e1a72877f6984da8c14704a152f815a4","sha1":"9457b49fea646c0d243f2aa704d0bdbb5817c59a","sha256":"2e212c97e339171f1dc6f7e4ea4f7958e00c6087cae0f1413ee8b966fd6cdcfd","sha512":"f53c998fbd5bffdff18ffaa9349e09e9f9262d44790978aca964c0e4190ec028c1720e4290655c93d995aef79e1063a242cea87e032deb00fdaf687fbf1405d4","ssdeep":"","tlshash":"d0f0abc4b7f05e58402a23ade36253013b98112353dc4fa5e27c873ba39eebec900283","first_seen":"2025-12-17T17:11:29.039195Z","last_seen":"2026-06-06T13:08:46.664953Z","times_seen":99,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_47.CQthcPa5.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_47.CQthcPa5.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10876\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2a7c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2762ff34b17a91758f1dc45636ecbc9","sha1":"8d21b18210dd1a1f1c8c7436b8e5e068c9953648","sha256":"eb85cd5e3c62b5d6ca08d7382af3273ecce96055d8c19a7960b6cb095483fdb7","sha512":"c5d7ca13ace18bd3cccb799d90b5876439916309ac346f1dd08534bd1bd128919b078a05bb4d8525e98eeae4f9f5f21aa2192972ea0a9ba8a989fdef931184ef","ssdeep":"192:Fzn4KM8Tf81kLlTP3v74QE5Z75fHJdSDzieZvZDelK84+N44qP0Wbpwaee:FzI8Tf8e475Z71pdSDzi4+Kl+N44omal","tlshash":"bd22b0792708578add73357ec860ab11eec4da281d5d66d6c18b44e8c9f8f310b1d2d3","first_seen":"2025-01-10T10:43:17.307107Z","last_seen":"2026-05-03T13:01:37.796599Z","times_seen":72,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Adex.Cf8ErWNV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/Adex.Cf8ErWNV.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-c11\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3089,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3088)","md5":"129f99cebb3bb73e523ec17bc53a54ff","sha1":"186762fa54a080dd8158293910fdee1c8cd36e63","sha256":"7cab2bb948e3e074077e634611db58a8075ce9ef9abd2539465befaaf60d06d3","sha512":"0e49997379ad0b40893a8ceec9149e9745705a2a4b09d5e2a8871c8acb0f7d85361dfa469f199ff75364d1ea12c5ab83e7f13e50087ec61b0674b0d262845367","ssdeep":"","tlshash":"8d51c67b84a498ba480e66dee235e3262c3414227c45c6d1a0bdcd2d17e28d5f53de27","first_seen":"2026-01-19T12:36:38.272715Z","last_seen":"2026-01-28T12:57:19.800522Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DzKftPiB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DzKftPiB.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-311e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12574,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12573)","md5":"dc7b9f2e7dfb565b8de42f98eedf6a11","sha1":"3f2eaa57fd981ee11ff3bdcc04d7d5541003be2e","sha256":"83093237dc0d08ca208de062b34509ed0fd2d71f16242d32bbf9c088ec9fbb28","sha512":"a4322b4156675bc99c246100f81d231e84d77a97c54db221bbeff05070c54dbc8b17ec5cf35b56feef8e59c729b9e20e0c9d19ddb3f7b29fb2d91b78da829c3a","ssdeep":"192:a79VbybQzpFGGYwqzEqlw/G9Y6sXhLACFmNJTWewgSaEEEh86ZhpMNN+Fy2Qnw7K:iIQzpIzl1liGS6sOJTWTh86ZzM+FyaM9","tlshash":"3542d75870e578761597297a813f010bb33a282ab88cc170b4abd9e47df840c5177fbd","first_seen":"2026-01-19T12:36:38.26185Z","last_seen":"2026-01-30T01:06:48.475869Z","times_seen":129,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getExitDomainsFromLandData.BZMixR4t.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getExitDomainsFromLandData.BZMixR4t.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-2d4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (724), with no line terminators","md5":"c20cb5713f7b211270c9cf48e1e51250","sha1":"2f0c0d3e6c6d9f8448d784334d7750b977fa71e2","sha256":"1f328d28a142c15e12dc58adf662eb82dd890ab8a99bfadb2dc03727e10685c4","sha512":"27b11492b855cf53ad49355bfdf21c4ad5b6162d464d45b15e9de42f7ae033595a044844a823322e7bc1992ec0d321dd136a98ca5ae0d129619fdca4e5f0b740","ssdeep":"","tlshash":"81011b0a8ef4456640c52bece40636002a60747e90cea784f92b123bbb9c58a9925709","first_seen":"2026-01-19T12:36:38.251655Z","last_seen":"2026-01-28T12:57:19.807059Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_27.DV4ZO8dy.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_27.DV4ZO8dy.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"0edb71f49d7e45d8e0976fdc64938d71","sha1":"99f773987c6ef218eb3bf9befa5d02e19dfbf0bc","sha256":"3d8bb8bba78a8a7d857f806c04a0d2b7cd18ebec39aaa735a4ecc1a774c3e8da","sha512":"398f343357fc7015f82f60a86b489bac84d3f2cfbad81090faae0b26aa24074c84eab6d1a481dbe48067d08a02c566328eccd4b31aa21063764556004d97695e","ssdeep":"","tlshash":"6bf05c8957f09d08c12d339dda5254c1b6a8417253cc4f51e27c863a63aeace9800393","first_seen":"2025-12-17T17:11:29.024308Z","last_seen":"2026-06-06T13:08:46.492649Z","times_seen":105,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/OnLoad.1QM8fFPu.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/OnLoad.1QM8fFPu.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-47ed\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18413,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18412), with no line terminators","md5":"fe30d9c802bdefc75d772f29c3d42d71","sha1":"f45523681d0820e07cce1636d59158cf0cebfa4d","sha256":"4ab09488650782c0c668129e7f879b282dda14310d3072f6f3fed4b25145692f","sha512":"c839bb807a02f40be39bb5941d973f5445ed5e6deac164d5b33963db55183d01eae661f127df938224eca2864017ede43452dbfd83db41730aa4b6b7e5af021b","ssdeep":"384:quugOsq7n6cshHxfZ4v5Vca3qRJAwzGSvg420BXXmEcNLjZFeo2zBL9dnYSLuGq3:o85X9mLjZco2zBL/A9CC9I854BKEH2Cu","tlshash":"2d825ac9f183643c82a79cfde06b1011fa3e2914b48d8484f28dcdb415a9945d2bbfaf","first_seen":"2026-01-27T19:07:16.858064Z","last_seen":"2026-01-28T07:45:28.767471Z","times_seen":8,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/cookiesLogic.D9uCIJIe.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/cookiesLogic.D9uCIJIe.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-c40\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3136,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3136), with no line terminators","md5":"cbaeb699b9fa379f5188f0e8b18107d2","sha1":"89705b4a99648e0163645717f62e6bf5a3b9dc16","sha256":"73e6a53735c59d93551e244c1a94b9f6e551cfea5813d98d85cfee3728cb4d56","sha512":"244e8b9e70a25e5c2106d5bcfe658a073fb237d4441bab410c01e7b6f40e5d553603106cf0ae90429b06439f26275e4f365679dc010a54a54b2dbf8394e06408","ssdeep":"","tlshash":"e1517283f130c1f4418a98ddcb21b12963b147aa36d4c5e4d0a99c2827a9d8f6f3f35a","first_seen":"2026-01-19T12:36:38.254739Z","last_seen":"2026-01-28T12:57:19.816926Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/countries.EcOHYHd5.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/countries.EcOHYHd5.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-3b3b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15163), with no line terminators","md5":"068296d9fab7713289aebfeb2dbd9078","sha1":"cff02a72b77b715fc52bead630a91f8f3d4d152a","sha256":"e14e0e7cd74140856d78f3e305439c995f779ae032868059f774d1810a763a88","sha512":"764471a66929335ee14d86cb4e4a75481f757937a3f4c688b5d372cf2991f9f7dec02613b824b5fd4cc5124afcf8cf5bc6b610c5eaa210bec243aedfb6438005","ssdeep":"192:4ca6CN+ABBnT3Q5WbuQMZdHfXfBoRfQvP3s2wQWJGPEIuCxg4en97jF:4mTHfXfO9kPhCJGq4e97jF","tlshash":"9f622f8ed3520fdecdb31b5cb85d2ca0e22a1d19ce4a6235dccb0b961a385d0613e79d","first_seen":"2025-12-20T22:10:21.214891Z","last_seen":"2026-06-04T02:36:04.733937Z","times_seen":227,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getRandomIndex.CEP3EF32.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getRandomIndex.CEP3EF32.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1e8\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (488), with no line terminators","md5":"2d7b3f71c11dbe119ec76b5442ef5e2f","sha1":"628510b7dc4f31c0c37406a296dd1991f75da434","sha256":"a59e870cf8f0084faa7e8674fe8e1a0af3e717e29949dbb940d3fed8fe649c82","sha512":"6b557507dae5cdc28b640f8b2d0a3c23e16e4df7e311aaafb36035f680efdcca7911df16ac3b9bd95c059ccc3abe67302d944f0354d99f5cfa1e048d635c63b6","ssdeep":"","tlshash":"46f00e84bbf02a540017226cc1ca2102344c81b34aed0f61e13849687378bfed128a83","first_seen":"2025-12-17T05:47:47.255695Z","last_seen":"2026-06-10T10:14:25.356342Z","times_seen":1502,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eat.comtamdigital.com/click?pid=2243\u0026offer_id=84430\u0026sub1=30affC1769544567affd8ea248b38372a937a552\u0026sub5=31936739","fqdn":"eat.comtamdigital.com","domain":"comtamdigital.com","tld":"com"},"ip":{"addr":"104.21.24.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T20:09:28.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"comtamdigital.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 04:51:43 GMT","end":"Sat, 04 Apr 2026 05:50:26 GMT"},"fingerprint":{"sha1":"F6:3F:54:7A:92:AD:D5:D4:E4:12:E9:23:8D:A6:A3:86:7E:2E:F5:F8","sha256":"69:9F:52:10:71:19:B2:F6:AA:6C:71:DA:E6:78:9C:46:4A:7A:77:4B:96:DD:79:D0:09:85:96:DB:33:47:01:A1"}}},"request":{"raw":"GET /click?pid=2243\u0026offer_id=84430\u0026sub1=30affC1769544567affd8ea248b38372a937a552\u0026sub5=31936739 HTTP/1.1\r\nHost: eat.comtamdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rdr218.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-length: 0\r\nlocation: https://kqftc.com/link?z=8802837\u0026var=2243_31936739\u0026ymid=69791b78fe5b660001d8f3cc\r\nserver: cloudflare\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nreferer: \r\nreferrer-policy: no-referrer\r\nset-cookie: afclick=69791b78fe5b660001d8f3cc; expires=Wed, 27 Jan 2027 20:09:28 GMT; secure; SameSite=None\nafoffers={\"84430\":[1769544568,1]}; expires=Wed, 27 Jan 2027 20:09:28 GMT; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YNiwvuiX255%2Bm2gOPpRJG6Wz9ZmrjDQy5sNmRDh%2FhH%2FzwKiyMy9%2FBByc98VJxDdAA%2B%2BIampAdR6gBJBr0UU494xyJ4ao%2F18916%2F2iz6bXD1BTivQg%3D%3D\"}]}\r\ncf-ray: 9c4ae3510fc74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125551,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":110,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Reverse.en9uc5Er.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/Reverse.en9uc5Er.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-7e3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2018)","md5":"ae6bf5e838acaacea5fdb8398d3e3944","sha1":"e7f4713425578bfe85b90f502397ce36cab54dcb","sha256":"404a4e1546ed74c707b7ba2f9526b7cdd0da3e3cf328eef8ee7affb036c3cb99","sha512":"09d9caf390848abb6f8a08aa3a372d848628e88426d2615012965a2fd042536695ce75aeb34bb02d91f09b516821de03a372d17748d8c5c96cc266cc938695b4","ssdeep":"","tlshash":"5e4111dfc56047f9808684ede219f6312b7602ab938cab45d1ef5a701739c9bc21ea47","first_seen":"2026-01-19T12:36:38.25692Z","last_seen":"2026-01-28T12:57:19.784965Z","times_seen":104,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useGetExitDetails.CtCVX7wx.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useGetExitDetails.CtCVX7wx.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-17e9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6121,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6121), with no line terminators","md5":"2ed119b3645cf8836883f2ade9e6b613","sha1":"9faa0fbba0be65d339aa243d5cc51e59bdf93bcd","sha256":"76b6136088de46fc4cd635bb7b5849da73d6e0ebfc54fd5ab51e5ac152af6361","sha512":"03186cf59ae10cab51f89b300483a6b0038d2f499bff6f9f73e2ad7c998c1a16af37e69951edab480b564d38c3b37d2cf7b22ac6631418ed09006d00480c6499","ssdeep":"96:zb0nTfoMga8C0hBZA6Z89Ga+ddGdK9FNIjKtwy+52+EPONL1GdNFPJNFR4fDBMtv:MTfoMOzAl9Ga+TGqLkEPONLWqBMtou2u","tlshash":"63c1b3d1a0c6d5fd06cb6cde5a90d02173240f13398d9e64f1aa4c2667bcc0ba2b774b","first_seen":"2026-01-19T12:36:38.275184Z","last_seen":"2026-01-28T12:57:19.831301Z","times_seen":111,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/favicon-96x96.png","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 6015\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-177f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, interlaced","md5":"cacd53100e7d31ae7b404a98e84ffe07","sha1":"f847c273bcf0e46bf55210e2ad9c98f108a16f6a","sha256":"9a13272a282dbcb3640a3e39a2bb1ba96c6ba5c7ff730d84d7d9ddd8a291724c","sha512":"d1717a6c9a90c6cc084d0f976d1cfed82d73fe08cdc280c97b680d60628090975de5da35c0dd32cb9f1205b4522dba9977c3ba7cb9d8a97770fc1a5b38b17b25","ssdeep":"96:pq0fSwKYPmvGmB6J3vW2/EPL1albpwAxLmkEfeU37ICI2FidSryKfOZCepkOpZNr:pq+SwKYPmvV69lcPL1a3wKmk2evCdQd9","tlshash":"75c18d96cd231027da329832247307cecd4af43bd9922395629205a61fd9c8caf8e793","first_seen":"2025-10-06T18:06:11.210074Z","last_seen":"2026-03-26T17:02:07.818752Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/confetti-3.CtHQVcrt.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/confetti-3.CtHQVcrt.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7428\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-1d04\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ffe537f32b7be06a870808ee94dadc5","sha1":"598b8776ac199d0d8737969255c81da7c2cf16f2","sha256":"e0ddaa01c812e3cdc7963b53edf9a53867a1930a7a566edeb872a0f36da94f7b","sha512":"5703851379baac166143a91cdf1513e9db8792dcf8b38a215d7609f490fac61e19b3300ebdd1b5e75b488e9baedb43f4575d043c5a462d3bf7f18686a1eec278","ssdeep":"192:h4xIU9cJ0fLnrUeEBvtsVvE1hUGx1e9DKa59kZoA:O1k0fLIeUj1Px1eNKKqT","tlshash":"47e1bfbbd667b04859e1f4c724501f89076ae0b7a68e93ca4970d6cc3e07823a9c3d5b","first_seen":"2023-10-18T16:22:09Z","last_seen":"2026-06-02T05:02:33.387481Z","times_seen":1447,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/favicon.svg","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 28447\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-6f1f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfad15d30dae3df09e5cdf3b91556214","sha1":"5c451c15700279f2a2bf7d58261eff6ba6c2d4dc","sha256":"9a353afca57aed8c872145fc3d8686a2a27c80655d3c5306bb03a5fde1e5cfda","sha512":"3dde52c8ab8bc6b9603c7111f50895700d410d03c5838666cbc3f95aba7592a1ebe9b6b544191b80967e2aaf95551463c1232b8929fb8355b4b43a4ff35c5226","ssdeep":"768:hKAtKOZ5G2H6P/8awFZkU9pDaFy2nbhoAmF:PtKe6MawFZkUbKy2bh7mF","tlshash":"05d2e0b064bf4b5c47658a05f22bcc1cacc6faa3051d53f35be8663269888f44b7dd92","first_seen":"2025-09-22T03:35:17.75072Z","last_seen":"2026-06-07T02:55:07.011809Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1405\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1405,"data":"[{\"app\":\"landings\",\"event\":\"cookies_sync_success\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275},{\"timeStamp\":1769544569344,\"event\":\"adex_script_load\",\"timeOrigin\":123},{\"timeStamp\":1769544569379,\"event\":\"load\",\"timeOrigin\":35},{\"timeStamp\":1769544569723,\"event\":\"cookies_sync_success\",\"timeOrigin\":344}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: b3035a75add4c0db206d5d46b7416266\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/m_39.B8t61ZCH.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/m_39.B8t61ZCH.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11870\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2e5e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8fc1dea009e0db3b4595a87dfdebbe5","sha1":"9b9705e844cc9d7348c2feb9c81b38f6d1648147","sha256":"17b9f492f1d9f34b5a45329f580725b723e2ba764cd2f75988ded4ffdd65ba68","sha512":"de484485122fee9cf6dbb743c3b85db8b6322c910edccdfff15c3626991db87803ffa7dae1e1f49141b7e16d695f2c3c2327c8ff793c21f4f107757ec41bbc4c","ssdeep":"192:/zJ15OOqeaC4iAC5YlDcdnsA5kBveZhUfrOavYa0Wg/yfKbx9X3VxdPxtktVp9Th:/zJPMeaxCYotsA6BveZh8ria2l9XEoe","tlshash":"eb32c0733a816e13d8406d3149f73b245af83ca0249f8552c246dcb638e88ee8dafd53","first_seen":"2025-01-11T07:04:20.928343Z","last_seen":"2026-05-08T21:02:09.366312Z","times_seen":47,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_42.1lupWKqb.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_42.1lupWKqb.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10630\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2986\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"157c3f6c16766f146d77d39731f2191a","sha1":"d3a60b29ebc2e72cc3ff3c6a25c80b4c697f015f","sha256":"954c2fd769618a17e9bc74ee6a931a6cf060dbde046f0a64239241d13902d9e7","sha512":"0c7a9378b85edb0c6ab2e43c69512561f4691b50d9a504f649233938412140566d75fc7f1e30ec98c3b04618b46a6e931789fef01a0ee4be2dcd70b74cb4e6c7","ssdeep":"192:ezHs7M4dRa0YlahGT081ktBpbL+G1yqaweW+BzZq46Ss/vKKbBLj88sIMye:ezH6R1nhm0kkrlp4lbX6JHKgZjPe","tlshash":"4b229d2897115e37dea03b796a5e3a1ff3217ae17d0bd207bc1456291f0a2f48c4c979","first_seen":"2025-04-13T17:35:44.838068Z","last_seen":"2026-04-19T05:01:34.393539Z","times_seen":35,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/sweeps-survey.BK-JcaZ7.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/sweeps-survey.BK-JcaZ7.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-6041\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24641,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22059)","md5":"8461461ca8c076d99651c5a1afb0c36a","sha1":"dc88517b38faefe788c4c16c17c633e78c03d617","sha256":"893b78a3e3cae95f0a39a2373de2387a747d5cfa1351781a0226501b60e15440","sha512":"a7758e759b584c4625f668fb6ab7c6589e6439f073af642c8ae30ecd437bf4652e0222b8cd6bc9e46902264be31573454a8c3f7a99450772ea99e14dbcb23b21","ssdeep":"384:qOu76uEkhShsn6cVsafgQXX4x6N7sRu4vc2qRJH7A5wzURdOYTg1sBiCH6aln+eC:bRK7YRtQQPmDGqJX+CBelIjd95Yz4","tlshash":"15b24c07d13006bf55068ce8f46a6417cfb1568b6d8a8db4a55deff812e8f4042bf74a","first_seen":"2026-01-26T13:20:34.649922Z","last_seen":"2026-01-28T07:45:28.751486Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useCustomAutoexitFunction.DX0XNDpv.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useCustomAutoexitFunction.DX0XNDpv.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-22a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"8cfe302b591bf7ffb2f004d281b986ad","sha1":"8bdd6f13062ffd24dd8aad8f62748a0ec45eda6f","sha256":"b36817f05d3ccaec5828d6fc96666066b5cb5e0709aca798a2ee3995394e23d4","sha512":"ae5c0c6e24fecdcfaee6bafdf34d298622f8711867e5b93e9ac99d7591329f8e1cb4b9206605f54ff5973f954548bd6d57ec42d01862ea0e7b7bea1635c0a49f","ssdeep":"","tlshash":"fff08bce65f016a3404e27eee21a10232649013f96cccf90e03c533917a9ece530af57","first_seen":"2026-01-19T20:29:12.703292Z","last_seen":"2026-01-30T01:06:48.47679Z","times_seen":68,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BlWhBrAj.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.BlWhBrAj.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-6778\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26488,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23800)","md5":"ccc28e39ad645e58fa1018257bd00bbb","sha1":"8a7877a17c82bcb5fce6f5eaee11f16f9703b433","sha256":"edc09ffccb113fba09c15d46dcc7659ec152243c0a05fd9ec30e4782e6c16240","sha512":"3ac2f7291d9bf0b76a2a6fb052313b149fb84211d56e01d67a12be2894c5ab2a62b52cc9e65fb411cfe0ac96627c531e4a3a674217695c340f4fe6d39d6efea6","ssdeep":"384:OgcrqZSiBgpc09RvXMoub9Yd64xvOtXJClQToX2CMhzTm1IJvFnYqoq9KvNtA6wp:4uxPjD3lPhfo4IbMImNuT5cDl7lNDJE+","tlshash":"7cc23217f8473cecf2354edcfe5e1444eda8561c4bc7a829a01e71a1b1c538463b9aaa","first_seen":"2026-01-26T13:20:34.606864Z","last_seen":"2026-01-28T07:45:28.71863Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1313\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1313,"data":"[{\"app\":\"landings\",\"event\":\"load\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275},{\"timeStamp\":1769544569344,\"event\":\"adex_script_load\",\"timeOrigin\":123},{\"timeStamp\":1769544569379,\"event\":\"load\",\"timeOrigin\":35}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: e5ffb64cb3b1f30c0a003eee686a3ffd\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wildwingshackers.blogspot.com/","date":"2026-01-27T20:09:26.633Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wildwingshackers.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 21 Jan 2026 23:22:12 GMT\r\nexpires: Thu, 21 Jan 2027 23:22:12 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 506834\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96381,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-11T01:37:05.52959Z","times_seen":29836,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getDataName.DnPNqumQ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getDataName.DnPNqumQ.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1a1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (417), with no line terminators","md5":"a45cda1a3034e96848eb98a3986ab51a","sha1":"f7957faec443e306ad3e6cd34c53823fdb60cec5","sha256":"6d7d0694d19b46d1c6c14653327c6cfee89eda545d58ac2a3f13c6f559dbdeaa","sha512":"6dc895a360f2ecd658e218055ff2acd3588cde36d44d12f8355c3688d98278b49409b4155e7bec6f82d0483f635e230bf21054b500bfe625d8b353ac9cff5f62","ssdeep":"","tlshash":"32e02bc95be01a6940592a5dc3ab169135d9013353cc8f51a1391339179eafd9628287","first_seen":"2025-12-20T22:10:21.232611Z","last_seen":"2026-06-04T02:36:04.647605Z","times_seen":227,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.BxM4jVp-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.BxM4jVp-.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-28a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (650), with no line terminators","md5":"d822060ba1d3ae3aa43792d37006a663","sha1":"f034f9b1ec46f006b108005822e3d8ea6275c56e","sha256":"7c43394841be7a55e63617419d7e52dc697ad6decc07a42fc9a8ea1338e2f24c","sha512":"1f6a9209ed8d345bedbe6449f535d3824284281349adbb530bee7c865fda64f3c2e42e3731d2f6bcbe12dab5e0d8766f8284ba88bacd010ea13dfe395be18110","ssdeep":"","tlshash":"17f04e829ee82f2a6126039dc55707b62a66103987cd5b01e27dcf7db7e99cf5018393","first_seen":"2025-12-17T05:47:47.28952Z","last_seen":"2026-06-10T10:14:25.432251Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/setIdLocator.CA8I0KwB.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/setIdLocator.CA8I0KwB.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-179\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (377), with no line terminators","md5":"e4da40dd4e2f442fe5d0399907c2bf53","sha1":"9df179bf27dd84e9af3df61f1d90ae59ce9938e8","sha256":"698bba5f3d1ea1e093ed226ad92958df5a8a73d8ca55a259bdb9b59443109357","sha512":"953ebdd2d981a41cf5372abeb2d3a24e887064d2f66286bd1895a2c5eba5f281aea3d8388624f091cffc9b236204f90ea78ad3bb9a95e900525ad914a38e0a1d","ssdeep":"","tlshash":"c2e0688a9af01e14800e2b9dd206248131880663538c8fa1b2780a3ab39decf9c05383","first_seen":"2025-12-17T09:40:52.758568Z","last_seen":"2026-06-10T10:14:25.397154Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/sweeps-survey.Dw43WPRD.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/sweeps-survey.Dw43WPRD.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-8b6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2230,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2230), with no line terminators","md5":"c963365a4abeed3ff6f0434c512b042e","sha1":"42ada1ea709d9509199d424755247f0edc1aa9eb","sha256":"4e0e8f7d7596ad633a3d133ccecddc68375d09ec95feb196934b4be9cb8954e1","sha512":"1639c41b63d04ec5fda0e2b34e573dc361f613ae648c70ff6f6462ded141f078ac93a15bb84cd339b8925b665a6fd769fae23c79a51de7c4d5c06674c83f6ce6","ssdeep":"","tlshash":"d941ab67d2614297004acdf9f016d5316d7300670bc8cb31d1ef977a13998fdd46a587","first_seen":"2026-01-26T13:20:34.602234Z","last_seen":"2026-01-28T07:45:28.686413Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.D21VqnSW.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.D21VqnSW.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-611\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1553), with no line terminators","md5":"647f0c4b1557485439c363e202db0ee7","sha1":"31be3c4c1821577b91f3af02df71f1ec3f915a7c","sha256":"dff4cbf186ee31d573211364039871277ee8ce71623c6631a112e6c85cb5b62d","sha512":"354895beebdf67bbd9ea9d6f51c559c84511602a73791f9fd0ae87b483ee06f10e11c187508717b2a067e35d41abe161805663d2aa45362453f2a09fe6ffb870","ssdeep":"","tlshash":"8a31f27ae140c7bd881ba3f497e2b2a6136401669f9c4fa2517a483536cec4c5c0f74a","first_seen":"2025-12-17T17:11:29.081878Z","last_seen":"2026-04-07T04:41:42.144846Z","times_seen":271,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DRh5yY0-.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DRh5yY0-.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-cda\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3290), with no line terminators","md5":"23cd4cac9d946ed49b1068e435eb51b1","sha1":"b147e5809230d440035e78d504f902780ab8787c","sha256":"e5357a071b376622e33cb82fbec95ff16ef756ab6886f2e13b94a64eb362d7bf","sha512":"ed38e5ec359074994041d42c7e4e5559942d0a7b7bc63d0cd10adac8d990c1f1d82e89e7e78e1d60acf612ebca94b58548c03a0976264bd94d97c2824d2450e2","ssdeep":"","tlshash":"836122b6a9bbeed68d169344a724660f53c845a301dcd3e0d838c52423c978657aeb3e","first_seen":"2026-01-19T12:36:38.252655Z","last_seen":"2026-03-10T21:50:50.096094Z","times_seen":517,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTabUnder.CQqOaAAZ.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useTabUnder.CQqOaAAZ.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-6bb\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1722)","md5":"76195b78f72a6f34a6ca57efdb6fbe69","sha1":"703666ee03e7dbba69f5eaf3652410322e202dd6","sha256":"5accb843b18bf306a4a16c1eded813e1c8d8bffc85da069a95cd773863e016f1","sha512":"e8da737a89634b7f621e2dcc94297d2dd25c2a77db6bbfb8cac67927b441ea97f16cc5f700163427904b5e8caf2f11f1d93ac2a3ed577efed980c6db99245220","ssdeep":"","tlshash":"8031408ac27051fd419e09edc1a5ea3323251667b68897e0617d4f39173eecba12b703","first_seen":"2026-01-19T13:02:58.325318Z","last_seen":"2026-01-28T12:57:19.794115Z","times_seen":88,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=a77409ba-3610-4787-8657-063d86e253c9","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Dec 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:2E:6B:01:85:64:63:90:B2:E0:2C:F2:15:38:95:06:80:0C:8E:D9","sha256":"84:19:B4:33:6F:7A:90:05:99:85:ED:15:72:80:F8:B5:BA:BF:35:38:A1:8C:D1:14:B6:0E:46:2C:A0:DF:78:95"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=a77409ba-3610-4787-8657-063d86e253c9 HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1910\r\nOrigin: https://cdn.ms1a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1910,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICP_[^\u0016\u001a\u0017X\u001b\t\u0006VF\u000e\u001fWX\t[A\tMH\u0019\u0003P\u000e_]\u0005\r\u001f\u0014\r\r\u000eJOS\nQI\u0015C\u001d\u0007\u0003P\u000e_]\u0005\r\u001f\u0014\r\u001c[REN\u001a\u001e\u0000\u001b[ZBI\u001bLLW\u0007\u0015\u0011A\u001c\u0007[REN\u001a\u001a\u0018QCP_[@\u0000BODQ\u0011\fKTK\\Y@K\u001e[\u0003PXV[^\u0016\u001d\f@\u001b\t\u0007H\\IDW\u0016K6\u001d\\\u0015\u000f\r\u001f\u0017PLW\u0007\u0015\u0011\\\t\u0011\u0018JO@u\u0006\u0003P\r\u0006\u000fDG\u001a^M\u001fnZX\u001e\u000b\u000e\u001bU,lIH\tOZUK%]\u0000[\u0003\u0002\u0013NLPBH\u0007\u0014\u0002XJ\rOZGK5Q\r\u0006X\u0016\u0001\u0006KTIYES\u0018/\u0010K\u0004\f\u0001\u0013]\u0005]Y\u0019\t\u0011\u001aX\n\tJOS\u0014K\t]CPL\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-B\u0001\u001b\u0016]\u001b\u0017X\rG\u001e\u000f\u0014\u0019\u0018\u0004RNVD@\r\n8\u003cY\u001aE[L\b\u000eLQ\u001cA\u0002\u0001\u001b\u001bWD\u001cFCJWN\u001a\u0019\u0015\u001b[H\u0006\u001f\u0006D\u001dW\u0018\u0016PR\u0014J\u0014\u001bD\u0003\u0016\n\u0016TN[V\\B\u001b\u000b\u0003\u0019QG[\u0016[\u001bUGP\u000f^A\u0000UYH\t\u0000[\u0019\u001eRK\u000eP\u0013\u0016\u001c\u000e\u001a\u001a\u001e\n\u0018T\u0011\u000b\u0007\f\u001c]\nP\u000f\u0000\u0005\u0007CUNN\u0016\u000bL\u0010DV\u0012\u0006\u0001M\u0011[\u001b\u0003CKJ\u000b4+_\f\u0010\u0014Q\n\u001c\u0004\u0005\u000f\u001d\u0000\u0006[\u001eKRAC_\b\u0001\nUDU\u000ePL\rT[XST]\u001eP\u000e\b\u001d\u000fJJMZ[S\r]_T\u0005_S -l?\u0006M\\RG\u0000]O\nE$s\n\u001fv\u003e\u0005/M\u001fP[$G\u0004ipJ\u0006@!\u001e!l;OW\u000eZC2\u001ed^\u0006gN\u0015Y\tY\u000e\u0001\u001b\u0006W\u001e\n\u001f\u0012W_[F\u0004_]\u0000\u0001\u0004\u0003BUK]DS\u000fQH\u001f\u0012\rS]\u0016w_X@~FpC(I\"##j\"\u0017\r\u000f\r/M\u0001S\u0007PR`\u0000\u0003\u0013\u0000\t\u000f@#l/\tx)R\u0007F=\u0002\t\u001a\u0011JTFGWT7\u003e\u0014u\u000eNn,\u000f\"-5l\u0018\nq`K\u0005\u001dB\n\u000f\u0007_t\u003c@U\u0003,\"\u001f\u0002d*\u001aC\u0001]wW0\u0026\u00128#\u001e\u001a\u001eM\\[Y]K\u0001ZY\u0002\u000f\u000b\u0010\t\u0003\fU\u0007\u0026V\r1\b\u00035\u0001S\u001bf\u001b\u001f^K\u000bU;.=9S\u0011K\u0002D\\TR]_BW^\u000f\u0000_\u0005U\u001b\u0006\u001d^\u0011\u0001\fPK\nVX\\Z@\u0005VT\u0007\u001f@@\u001b\u0016DYBT\u0001\\M\rT\\VM\u0004U\u001cP\u0005\u000b\u0007\u0005%WHQFT\u000fZ@\u001f\u0017\u000b\u001c4A\tH\u0014ZPW\u000bKTMXDR\u000fQN\fY[\\^C\u0005YU\u0006\u001fI\u000bB\\IZMQ\u000fO\u0003]\u0004\u0001\u001cV1\f-\\\u000epCi\n\n;\u003c\u0017=M/IC\b\u001d\u000f\u001cTN\n\b\\KzFG;+Y\u001c\n\u00075IVY[S D\u001c\u001d^zw\u0007+FUJ\u001b\u0005\u001aSI\u0015C\u001e\u0014IH\u0016;9t\u001b\u001f\u0014\u0014\u0006[RDN\u001a\u0007\u0018ICPL\u003c\u001bZ]_\u0015\u0015\u0011F\u000eFCXY@]\u001f\u0018UCP]\\^\u0016\u0006\u000e\u0015\u0003\u0007\u000eVF\u001d\u0005WX\u0015XU\u001b\u0013\u001e\u001aIH\u0019_A\u0015Z[i\u0015\u0006\u0013JOR\u0014K\u0017NCP_GPC\nO\r_RZ\t\u0001UJ\u001a\u0011[\u0019\f\u001b[H\"\u0002\u001cA\u0016MO\u0001\u0005iLP[DW\nQ\r\u001d\\\u000fHT\r\u0013X\u001d\b\u001b\u001bP^%\u000b\u001b\u0002*\u000bV\r\u001cACPCZ^\u0016\u0019\u0004YfXS\u0003\u0017\u0026\u0004\u0010\f_\u001d\u0011\u001b[X\\X^\u0016\r\u0002[VAi\u001e\u0001\t\u001c\u001d@\u0002[M\u0015C\u001c\u000b\u0005\u0016[\u001cO\r\u001b\u0011\u001aX\u0003\u0018\u0005\u0010\u0012Y\r\n\u001b[ZBI\u001cXLW\u0015\\]\u001b/7[DW\fT\u001a[\u0003C\u000f\u0000F'gB\bY\u001b\u001f\u0014\u0019\u000b\u0015\u0007\u0007=_\b\u0014L\u0015HTI\u0001F\t\u000f\u0015\u0015\u0011F\u001c\b[RW@\u0014K\u001aU\u0015HT\u0010\u000f\u0018L\u001d[XGP\u0015\u0016\u00147\u0011\u0007L\f\u001aM\u000e\u0018LQ\t\u0016\u0007\u001ehX]R\b\u000b\u0010\fWX^\b\u0015J\u0004FL\u0002\u0001k\u001a\u001f^]VX\u000eFC\u000e\u0014\u000eK\fU\u001b\b\u00191\b\u001aF\u0001\u0000^L^iBR\u0026\u0007\u0007=V\f\u000e\\\u0013HT\r\u0013X\u001d\b\u001b\u001bZE%\u0007\u0011\u001a\u001a\u000fQ\u001c\u0014\u001b[\f\u000f\u0007\u0001QBO^JlS\u001e\u0003\u001cJO\u0004Y\u0005\n\\MH\u0007\u0018-S\u000b\u000e\\V\u0011\f\u000e\u0016\f\rY@Q\u001a\u0026N\u0004\b1\u0000\u001b@LWQX_E\u001fH[\u0001\u0006=O\f\u001bf\n\u0003\u001a4D\u0004X2XKlX\u001f\u0013\u001c\u001aWX^\b\u0015J\u0004FL\u0002\u0001k\n\bDRGY\n;\n\t\u0013\u0003J\u0000[\u0003\u0007\u000b\u0002\u0018\u0017\u0018L\u0004DfP^\b\u000b\u0014\u0001\u0000\u000fg\u0006\t\\\u0013\u000bLQ\u0014U\u0002\u001eRD\u001f\u0014\u0014\u0001\nJO@\fQO\fVY]XD\u0016BOTUZS\u0014\u0010\u0026\u0001\u0011@\u0002K\u001cX\u0002\f]]\u0016UC\u000e\u0007\u000fW\u001bN\u0000NYX[\b\n\u001a\u0014YR\u000bXBW\nY\u0005\r\u0003WXH[\t\u0013\u0004Q\u0005\u0010X\u0015\u000f1\u0002\u0016\u0016TO\u0015\u0015\u0011B\b\u0005\u001f\u000e\u001c\u0001g\u001a\u0016L\u0013\t\u000b4\u001bPLW\u0015\u0001\u000b\u0006H\\J_WN\u001a\b\u001dO\u0004\u0018\u001a\u0002\u0001Q\u001c2^]\u0011\fXFUJ\u0016\u0003U\u0019\u0018P\u0006\u00041\u0002\u0016\u0016TO\u000f\u0000\u0005\u0007CUNJY@[\u001c\nM\u000e\u00071\u0002\u0016k_O\r\u001b\u0001\u0004NW\u0026[D[\u000b_N\nXHBI\u0011A\u001d\u0019XTl_\u001e;KJO@\u001aE[Z\r\u0003\r\u0000-]\nO\r\u001b\u0002\u0006NTHXBZ\u000f\\A\bS__ZE\f_O\u001b\u001bPY\t\u0010[RW@\u0014K\u0014\\\u0015\u0002\u0001\u000fP\u000eL\u0007DMRQXH[\u001a*\u0017Q\r[\u0003C\u000bY\\F\u0004W\u000fV\u0014\u0000\u0000KTT\\BZ\u000fDA\u000fT]C[D\u0007\nU\u0001\\\u0001\u0003I\u0007@JY@W\b\u0026P\u0005HTIP\u0018L\fS]ZB\u0013\u000b\u0017\t\u0019=Q\r\n\u001b[13\u0016"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Tue, 27 Jan 2026 20:09:29 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://cdn.ms1a.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-06-11T00:12:07.029485Z","times_seen":57481,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":131,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_42.b3pwpx1q.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_42.b3pwpx1q.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"63a4b6641c435ebac91b1cb925a90626","sha1":"548b43cd0439fadf072865438ae359cf4da93181","sha256":"83196178a0ef7703f363284548471f2689e0a0fe3032cf2acf6288f81fa4f8e3","sha512":"ecb64aeb57ad87c8b2df0789ecf6db4d0a9aea0e6159d7ea5ae6e2abeed4efa429194072f30c53b0e58f1e331df969443e94a32728445da094dfd2a6ff2a40c1","ssdeep":"","tlshash":"6df05c809ff05e85403622dedb115509769a613b428d9f11e37c477e534fecd9e00347","first_seen":"2025-12-17T17:11:29.104396Z","last_seen":"2026-06-06T13:08:46.577246Z","times_seen":99,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/Button.CSkHk7jI.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/Button.CSkHk7jI.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-4d4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1235)","md5":"2eacfb3ddc734cee7d2a5ad34228c393","sha1":"499cb323d8d267295a7d9e0bf229cd4d89b3daa8","sha256":"bf48ea1bf4158a400f75fe53be640f65728a229e93c7d9f1c4ea9c614b1d2004","sha512":"095f8827d36dfcc581605d5856564228df8434d1cb4fdcc6c77724be3718527159abd0e14bc5e52ae8cc1a853c1beb4df39791dd4d78a1faa0f92e2a051ee747","ssdeep":"","tlshash":"1521405cd1b002ad490b10bde27e600a7c960233cb8e8b51e5bda73e079a09d8805fc1","first_seen":"2026-01-19T19:03:20.219865Z","last_seen":"2026-02-24T12:49:50.895506Z","times_seen":227,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useTabVisibility.WLLoZryE.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useTabVisibility.WLLoZryE.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-27d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (636)","md5":"6d19a2591be046dcce63321b8f463c03","sha1":"d02a95ddeca94fe2ed71b18bb33d8f6ec8e00c40","sha256":"292a56d270b56a83d6782d1827d86864de2b003681c982358b677e57c52b3712","sha512":"4873e97f26adfe82fd2076e51b783d459edc39fe8b32d2471369eeb5345906d6cf5d336ad4a4ade80b91506cd5f0f3c1c93bbd2096e57b732047f89b921fc95b","ssdeep":"","tlshash":"ebf0a2f959f01975804a939de27577c13dac00f2a18e6b61b13d4bac1349edf9710e87","first_seen":"2026-01-19T12:36:38.298256Z","last_seen":"2026-02-19T18:18:18.331241Z","times_seen":264,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/js/cookienotice.js","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wildwingshackers.blogspot.com/","date":"2026-01-27T20:09:26.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: wildwingshackers.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wildwingshackers.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Tue, 27 Jan 2026 20:09:26 GMT\r\nexpires: Tue, 03 Feb 2026 20:09:26 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 27 Jan 2026 13:49:23 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-06-11T01:33:35.952994Z","times_seen":121766,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"wildwingshackers.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useSyncMetrics.BcEHtuEX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useSyncMetrics.BcEHtuEX.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-d20\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3359)","md5":"d3fac7c45cbc72188b570d5185ad16e9","sha1":"4218a0e764a5468ff3f9326ba5639598490bee92","sha256":"eaaf22e6e27d5d0e10c4735b97acf561180ffcf5b97351c0518699ca62fd3367","sha512":"3b6ff62bae8aa42a4a3e5daa1d2439dc809048d6e29da36fad47db87779854315dd0439a806057824109c746b22a51e9e5ea85f78c706e00585e6ee4e5370999","ssdeep":"","tlshash":"ca61586f6262136d566116ecbc7f22032dd6421c6dc7c948b295901d12f8e5122ffbfb","first_seen":"2026-01-19T12:36:38.281676Z","last_seen":"2026-01-28T12:57:19.819871Z","times_seen":111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.CzPYwE_S.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.CzPYwE_S.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-17d7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6103,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5821)","md5":"41476cc77514a439435e2777dbcf769c","sha1":"a6f52ac0e72eb2cf0be2fdc54a0af09b2702ccf6","sha256":"e76522b9f99771fe8b6f3b902c9cb6540fc786cdc58b13d6427b33428c79ebb7","sha512":"589dd431fada5b917116acd0b29e6b7d0faf83982b2963481be35aa5eb66e6caeefe26b2d57873828b515160f276cbd20a6771bba6b23fb2a5ffe9dba65416f6","ssdeep":"96:jc6qaOut7qMxOnpeiEI9MmJ3uM4wBuKEWAw0UfI2WXv8VehUf0tckkgHoz/zSSSP:I7aOutGeI9Mif4YpA0Avv8iUMk+oz+S2","tlshash":"87c1842de2b95179b41b8ddcd13a122767353222e98ed7b0a0bd2e201389b8453c77a7","first_seen":"2026-01-19T20:29:12.758558Z","last_seen":"2026-01-28T12:57:19.801271Z","times_seen":44,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/types.BGMreeeV.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/types.BGMreeeV.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-46f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1135), with no line terminators","md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/image/9223372035102110466_01k09fxf2frzdx2t8qn6z05y64.webp?configId=1870","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /image/9223372035102110466_01k09fxf2frzdx2t8qn6z05y64.webp?configId=1870 HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3094\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\ncache-control: max-age=172800\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH1004,AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"143f9359ef18c82759f00fe5dd3bfabe","sha1":"4a26a3ffa2e5a2f7bbe40eff35c2bf32f84a174b","sha256":"90578eed888220f614e40651a58a7e7dbd8fe1acd17016320a0620284f5a9cba","sha512":"ccbcf4e8795aeabe20840195e344cb107cf4bd56b56dbaf7ac54d02a6653eee8b7f8bec9dade2f149a2a274c64e986a97691f27f626914749652ab60778d3781","ssdeep":"","tlshash":"b7517c6a03728666fc1bc134ba76730c9e2a7a0087b4c7264049be359e477631b5ab1f","first_seen":"2025-09-22T06:40:31.65397Z","last_seen":"2026-03-28T21:02:50.768003Z","times_seen":81,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/sync-metrics","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1544\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1544,"data":"[{\"app\":\"landings\",\"event\":\"adex_status_bad\",\"usid\":\"19c0113507236e2099492b3\",\"sub_id\":\"1040107875812511781\",\"teenage\":0,\"project_id\":1,\"landing_name\":\"sweeps-survey\",\"event_source\":1,\"ymid\":\"1040107875812511781\",\"request_var\":\"2243_31936739\",\"landing_domain\":\"cdn.ms1a.com\",\"landing_url\":\"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q\",\"source_zone_id\":8802837,\"config_id\":1870,\"build_version\":\"v0.0.699-verticals\",\"landing_load_date_time\":\"2026-01-27 20:09:29.000221 +00:00\",\"design_id\":4,\"vertical\":\"fortune-wheel\",\"events_history\":[{\"timeStamp\":1769544568946,\"event\":\"start\",\"timeOrigin\":0},{\"timeStamp\":1769544569221,\"event\":\"adex_init\",\"timeOrigin\":275},{\"timeStamp\":1769544569344,\"event\":\"adex_script_load\",\"timeOrigin\":123},{\"timeStamp\":1769544569379,\"event\":\"load\",\"timeOrigin\":35},{\"timeStamp\":1769544569723,\"event\":\"cookies_sync_success\",\"timeOrigin\":344},{\"timeStamp\":1769544569863,\"event\":\"adex_status_success\",\"timeOrigin\":140},{\"timeStamp\":1769544569864,\"event\":\"adex_status_bad\",\"timeOrigin\":1}],\"context\":\"{}\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 504a05c1caf16166cd3ae844f7bfd728\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-11T01:56:42.220854Z","times_seen":156158,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wildwingshackers.blogspot.com/","fqdn":"wildwingshackers.blogspot.com","domain":"wildwingshackers.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T20:09:25.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wildwingshackers.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Tue, 27 Jan 2026 20:09:26 GMT\r\ndate: Tue, 27 Jan 2026 20:09:26 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 09 Oct 2025 07:46:27 GMT\r\netag: W/\"fc85143f368c99a96a156edbb76c73a2f023995f2afeab65b90c2ce888f5950b\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 32320\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Skimlinks","description":"Skimlinks is a content monetization platform for online publishers.","website":"https://skimlinks.com","common_platform_enumeration":"","icon":"Skimlinks.svg","categories":["Affiliate programs"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":174740,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6967)","md5":"9c0c83a923ed3c99412fc96b62beb09b","sha1":"f1f8bcf42ab3f84fad6caba5ac6389e0b23478aa","sha256":"aa92a457218afb350d8f6b39b2aaf6dd378781791fea76f264d050d211fb6f90","sha512":"c9670b645751b6b8e86e548d557fc14bc34437573695eab5ab9e39683d1b3ce1c59da04c42603881c08a0e213f28e9dc50608fcb43fbb6b016996602df2beb2b","ssdeep":"3072:QIinFNlln6sOuKvbSF9HEIeDLaZN+gyWbYliSZeJnV2McnVt2ksahGuym:ANll6sOuKvbSF9HEIeDLaZN0i8eJknnb","tlshash":"d6041963b6e5242a533b80ddb873776c72269417d90348a8f5fd63680bcea83653778c","first_seen":"2026-01-27T20:09:58.396018Z","last_seen":"2026-01-27T20:09:58.396018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":127,"dns":26,"connect":21,"send":0,"wait":239,"receive":121,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"wildwingshackers.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/iframe.C_XRmVXc.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/iframe.C_XRmVXc.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-3e8\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (999)","md5":"39d2275ea9aa072b7da2154001cc2077","sha1":"317e49e2f89f74f94870f2c37959c21d13729ac7","sha256":"85570a328ed058adb79debfba2a1c14bb3dc232b775f0d5cb9784167a2c927a4","sha512":"b4bf1598807971f6538cca1fac53e65d57abc68213e113cae860efc402bb7ef208851a864163419762ac31a5e66cbf670c400a8c7649e5b307696d3b0935af1f","ssdeep":"","tlshash":"5e1102ce85b06664801a15efd35fb32034250957a74e8781e17d4e7c1729d9b8249fcf","first_seen":"2026-01-19T13:02:58.329677Z","last_seen":"2026-01-29T21:33:30.826458Z","times_seen":37,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/footer.CLXArp8_.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/footer.CLXArp8_.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-4d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1235), with no line terminators","md5":"4b3eafe60e0de2be3cffb6141fb95153","sha1":"86c7f897ef5670590f50482564d2a06168ca895b","sha256":"d3cfbfaaa44ef59ee37f651e5de0ed0ec0c9e6b0465cca0e9a7d791718cbfc6c","sha512":"c0e07282e5f0c6b3d0ad00b8e8c468f9022f16804bc3a3dc7bcceb1780815b858966ac6243a74d4eaf2099b281f43d723c213a75936b88336bd1ac9870339611","ssdeep":"","tlshash":"ba2137d7cbf553540108177ccb1795e5e206202bb7cc8f52f86c02e41359bd49b39b55","first_seen":"2025-12-17T05:47:47.236515Z","last_seen":"2026-06-10T10:14:25.382457Z","times_seen":1954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/useStorageService.ChE-3xBz.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/useStorageService.ChE-3xBz.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-6ff\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1791,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1790)","md5":"285e167259e2acb49381e0ceb5143841","sha1":"8c5f3175bef91a92c316fbbcee2d5c6376422900","sha256":"e87b0f7c274c0e3f9f3e8e41e577e062de0c3e0ac2c1ebc3815d1229c06456c6","sha512":"add54c1b408622743d83e6f2c2ebd558fadeba5d642d7fbf2ef04e6143ef462798d401fbff37b33835cb565a2d1649d5b505aa28c77e13cc654a9151beddf09a","ssdeep":"","tlshash":"8d31338d2af12971802c18ecf67731c1f17b10aa718e5590d12d4a767ead9cfc27668f","first_seen":"2026-01-19T12:36:38.277743Z","last_seen":"2026-01-28T12:57:19.814026Z","times_seen":104,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/client.Czw-GXNd.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:28.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/client.Czw-GXNd.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-68d\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1677), with no line terminators","md5":"46da7429e128698961b28514af5153fe","sha1":"a0a7aee64213729d4707e69185911f3b7fecd1c1","sha256":"f400d14a0cede70e1d4c55a52cbc8afc5582c4ea5c5c7d94be3215d36bc1892d","sha512":"6fc74d3b9decff0767101aee2e414b926360fc91fb6e8746eaad4ea0a9ad4c5a63d8253fe463f064de9a69ac10fbde1dceb6058604a7215e9f5d52440c1d7a30","ssdeep":"","tlshash":"0c3176f861b04db1406f6abd8e6510629db82166718ee59091accdb8076ee894986f0a","first_seen":"2026-01-22T11:57:24.437178Z","last_seen":"2026-02-06T08:40:49.480077Z","times_seen":145,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.DS6wA2VX.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.DS6wA2VX.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-18e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (398), with no line terminators","md5":"c286166fb6f44c0a7aef4ce2a9b9338c","sha1":"91599b7cbabdcfc14535dd3d022bcf1296942072","sha256":"5c30ec81142e7070f0b19d2d89a41efa7c98e6da111b0ebafcc3ecb60880f9d5","sha512":"307704a1dd37a8773ea4481691a31760abb3f0060b775058b99d749f71759882703c701488b671a2c7d52de8199634f58d39fec8f137794ee8989faaea874362","ssdeep":"","tlshash":"d3e02bcd5ae01bc4801f22add51a1109b944043366de5f51e13c07b4539fdcae808343","first_seen":"2025-12-17T05:47:47.226096Z","last_seen":"2026-02-09T18:12:22.058301Z","times_seen":697,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/getImageS3Key.C__IkANT.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/getImageS3Key.C__IkANT.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-374\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":884,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (884), with no line terminators","md5":"099b67b4d19bf5ba7ba2d83414076b4b","sha1":"5560fce4282c44ae64216501d636e423cb2eaa2e","sha256":"947e401194ec518fcb297c8c2486dfd2e2529c1b15a3111cc4ab41a217f03def","sha512":"f992b8e87f90b604217a40d97a41299243f26cb8d0e03080473a3c1a7b47d64dfe57171b00c85a84a5a93a875d5d068facd469879f439bdb7fd821312f141598","ssdeep":"","tlshash":"e51123c2a3e12462839f059cb8262601bf0c3177a64d4b41c27e5a661355ccec036605","first_seen":"2026-01-19T20:29:12.723677Z","last_seen":"2026-01-28T07:45:28.773412Z","times_seen":57,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/index.C75TZuz1.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/index.C75TZuz1.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1a70\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6768,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6767)","md5":"398587b2538ecc0d51d25ab09aa0d083","sha1":"d8e8c861225949516b1915d83f2244b380b88612","sha256":"2db2eb4743a83b491e4f6aa2d36fe836140940683b28822ea444d920dd922385","sha512":"2b953a5f5455503a49108111fe6a714a94f53b9bf18fd68235fcfe846d65f1d651ab484f59b3ad1e0a0af1ef7670bfbb3474ea07c5afda8100a3985a39d584b5","ssdeep":"192:7ANR+wBKtL7Quu8TeSdlxADc8XGhyLI0veo/MTPU27Pm:sGw4tHQuug7lxAQkkyEG","tlshash":"2fd1a653e07141b6648d8cf9e0509632ab3705ab4bd9cb74e0ffdb340398c95a16bb47","first_seen":"2026-01-26T13:20:34.641758Z","last_seen":"2026-01-28T07:45:28.784651Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_13.BwQIzDLc.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_13.BwQIzDLc.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-1bf\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"24d92beb29e1dd5997f174f1e7331b2f","sha1":"c768478c8c36ca59e7b215ec5711d6a09659f8ec","sha256":"913277a4c7db50935b196163f0ae26abd4c34324b84ac36ec4b19ca28e0fcd97","sha512":"6d7f992f35ebf65836a4b0474773e2bf1d18ea8aa1d4f758da83676b36979613093234f37d5928541f9e7e52f0be53de5b9cbf37bb0b0a200b05236e954d8f82","ssdeep":"","tlshash":"72f0558aa6f04e24512e12acd312380176992133d7ecaf21e3380b3e935dacdcd19343","first_seen":"2025-12-17T17:11:29.007954Z","last_seen":"2026-06-06T13:08:46.666563Z","times_seen":101,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/f_17.Ed4CXWMq.webp","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/f_17.Ed4CXWMq.webp HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=vk949k2skd8icitnl35wp5gtczb82zl8; syncedCookie=true; oaidts=1769544569\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11506\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: \"6978daff-2cf2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"846774fd41ac0ce770349dca2c9fccae","sha1":"f1b26e17d180ef8ea583abfb8c812ca4df1281d2","sha256":"496ec3b021e0b83782bc37da3c11ed269ba3d7227976857179e2b875ea242aa6","sha512":"3b1ab7b6a154f28fc6841bbf18fbcc336055b015563c9baf7ac6acbf5cfadecd69d35d3d0cebb3e5ec8fa971ecf29686045e4c138e960a6a02f065f20e5d6257","ssdeep":"192:pzZIk0IzRCOGVFQhEjRb6kyX/ymR+jRnDuLeImd1JtQHwMWPFhQEkSuNs2FbNzAb:pzZFhEjt4//aR1IW1JtQHwM+YzSwsINC","tlshash":"b432cfb12e7062c2c122117aa9951a93e73ffe61eb70925d093e50176f903ec2135bbe","first_seen":"2025-01-13T21:08:42.10443Z","last_seen":"2026-05-03T13:01:37.797144Z","times_seen":46,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T20:09:28.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:28 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":125551,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44336)","md5":"900c5951d46bc22ab7cfe21646605e68","sha1":"e6ca5cb3463a51decd05ecce1ac142c08b49cab7","sha256":"962483ec7961862997c4ccbf1db0ebaa8c5c2c1867364d933715283367563c4e","sha512":"5839656865cae99c2fe04dfddb4298e3f2060d0a1969a616f4ce619dfc630c0c8447547c2e181768cd7286f1bd8fd12db718ef895007f1a2959254e01c437679","ssdeep":"3072:hPINnI5HLuWayPHhBTidki9AUCgJffIXXIhR7gGEPepATo/hTkMEEEmghu:hw+HyWayPHhBTiKi9AUBJffIXXIhR7gi","tlshash":"d1c3d71ac1f3027e586e78f2e094f744612bf34feab66bd46964522147dae8e3473b40","first_seen":"2026-01-27T20:09:58.401494Z","last_seen":"2026-01-27T20:09:58.401494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":112,"dns":69,"connect":19,"send":0,"wait":40,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ms1a.com/_astro/adex.DCbnRdCY.js","fqdn":"cdn.ms1a.com","domain":"ms1a.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.ms1a.com/1870/en.html?b=22778943\u0026browser=firefox\u0026campaignid=8961917\u0026city=oslo\u0026country=NO\u0026device=desktop\u0026expires=1769545168\u0026ip=91.90.42.154\u0026md5=K_XQkzeaqz96b0FKcfO_oA\u0026md5Ip=ZF0b9IkCTR6no0-YlP0kPw\u0026os=windows\u0026s=1040107875812511781\u0026sg=6dC15wGuF9L0JVARKn4ngA\u0026sgi=eY35idpg5ATFpAH8i-O6gw\u0026sgp=3-_KvMg7WMeLFGXvgFYx3g\u0026sgr=LU9lbFLtpPDwt8nA-T_zMA\u0026sgt=1769544568\u0026sgu=rDndH1b_o8iRurir8cAJDQ\u0026ssk=e58340c0b7f6cabd6dc4923722121890\u0026svar=1769544568\u0026var=2243_31936739\u0026var_3=\u0026ymid=1040107875812511781\u0026z=8802837\u0026zdekr=C8C19Ip_pnBTb_uF0ziwaw\u0026zdekrIp=_R1ihGnLp7358RprpiCD1Q","date":"2026-01-27T20:09:29.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ms1a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 02:34:00 GMT","end":"Tue, 14 Apr 2026 02:33:59 GMT"},"fingerprint":{"sha1":"0A:F4:E3:A8:2D:29:BA:F0:93:E8:B9:3D:5A:B4:1D:4A:60:8A:46:CF","sha256":"53:F1:A0:42:29:64:32:CB:0C:F4:EC:58:15:5A:C4:2A:22:E8:8B:AF:2E:1D:FC:2D:6F:21:AD:3F:CC:30:A0:FD"}}},"request":{"raw":"GET /_astro/adex.DCbnRdCY.js HTTP/1.1\r\nHost: cdn.ms1a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 20:09:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 27 Jan 2026 15:34:23 GMT\r\netag: W/\"6978daff-357\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jan 2026 20:09:29 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (855), with no line terminators","md5":"a22eb774cc9d4019e1b74ce2efe8c67e","sha1":"152e6c6ee469e5a58a837004fbabeb109341ca8f","sha256":"8e8d7b4ec5643a579d2db9cb352e823e928778aa5fd22a4b86c16b8093f457c1","sha512":"48cc88a9c77e0ac8745414fe72dcaaef810f7468dd48cf0286f66e6d4d9703cce7c77628025024de69ae23b5c8eebe8c7310859d16f1b03e9745c772ff4cf7d0","ssdeep":"","tlshash":"6711c28957f61bfc6246938dc06f6203604860579edd47e1d22543783b58ddf931475b","first_seen":"2026-01-19T12:36:38.282541Z","last_seen":"2026-02-19T13:37:04.206788Z","times_seen":326,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}