{"report_id":"109e5eae-4db0-40d1-966f-0c71ae1e2dfb","version":6,"status":"done","tags":[],"date":"2025-12-22T09:35:38Z","url":{"schema":"http","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"104.21.60.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"title":"Silicon Valley season 1 episode 1 (2014) streaming Attacker TV : where to watch online?","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"104.21.60.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T09:35:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"falsifyprobable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jnbhi.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-08-31","domain_rank":0,"first_seen":"2025-11-13T12:34:48.915898Z","last_seen":"2025-12-16T02:45:48.277897Z","alert_count":0,"request_count":1,"received_data":113278,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"attackertv.cyou","ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-15","domain_rank":0,"first_seen":"2025-12-22T09:35:41.956493Z","last_seen":"2025-12-22T09:35:43.613901Z","alert_count":0,"request_count":10,"received_data":914170,"sent_data":11911,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"vidbox.casa","ip":{"addr":"104.21.63.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-20","domain_rank":2186045,"first_seen":"2025-10-05T03:22:31.998794Z","last_seen":"2025-10-05T03:22:31.998794Z","alert_count":0,"request_count":1,"received_data":3414,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ax.anaceschalina.help","ip":{"addr":"172.241.53.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1433,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"falsifyprobable.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2025-09-28T05:51:18.573134Z","last_seen":"2025-12-20T03:31:34.125695Z","alert_count":1,"request_count":1,"received_data":121964,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2025-12-15T20:48:28.510397Z","alert_count":0,"request_count":18,"received_data":378153,"sent_data":8590,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cloudnestra.com","ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-17","domain_rank":52344,"first_seen":"2025-04-19T17:37:08.800897Z","last_seen":"2025-12-16T22:42:39.484055Z","alert_count":0,"request_count":6,"received_data":20269,"sent_data":15038,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":6,"received_data":200947,"sent_data":2949,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-15T10:45:04.439976Z","alert_count":0,"request_count":2,"received_data":838,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":433868,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"3.66.182.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-16T20:59:52.98779Z","alert_count":0,"request_count":1,"received_data":420,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-17T16:26:46.156091Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sysmeasuring.net","ip":{"addr":"52.223.13.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-11-17","domain_rank":54137,"first_seen":"2024-11-18T09:38:55Z","last_seen":"2025-12-16T07:00:45.143534Z","alert_count":0,"request_count":2,"received_data":1531,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2025-12-22T00:56:50.882883Z","alert_count":0,"request_count":1,"received_data":3126,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"142.251.38.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2025-12-21T22:44:40.280242Z","alert_count":0,"request_count":1,"received_data":11207,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-12-17T17:02:40.749593Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-21T22:22:06.545601Z","alert_count":0,"request_count":1,"received_data":134753,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-21T22:36:12.072016Z","alert_count":0,"request_count":1,"received_data":87645,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":4,"received_data":163852,"sent_data":2200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2025-12-22T00:14:39.212569Z","alert_count":0,"request_count":2,"received_data":34546,"sent_data":990,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-21T22:51:32.802585Z","alert_count":0,"request_count":1,"received_data":18540,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":22234,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img1.wsimg.com","ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2025-12-21T22:47:58.287913Z","alert_count":0,"request_count":4,"received_data":920077,"sent_data":1858,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"vidsrc-embed.ru","ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-08","domain_rank":0,"first_seen":"2025-10-13T00:36:20.560395Z","last_seen":"2025-12-16T06:47:32.784136Z","alert_count":0,"request_count":8,"received_data":128059,"sent_data":3810,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026gdabp=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ebba24e491f4058a42d693b16cc4547","sha1":"1eacdf32a3d8a0e65583516edc5f61e4941a6f95","sha256":"3b3a19be18ac499a147f2722f508546c4b61b9bfbd1de4976b147e403b0b18a2","sha512":"c3d0d88a0ee96b4455de62a3691a43011f11352ca1424256ebf4e60e3521755f1860d596c903554a0b47742f6b7a5f0b31479a2cc9a09a74800e5887846df5b3","ssdeep":"1536:FzL751Jqc2HyP0SuRPmym0pO1s8dsR5qxyzT/ghgOKWYZjAartrvpD3pduCxAXtB:suydkXiR5zzTq+bxpD3ZV4T","tlshash":"51d33acdb3a1342643a3a5b5607f414fb139b8a5a40c88a4f199d8e87c74dad4237fbd","size":134036,"data":"","first_seen":"2025-12-10T15:36:51.477347Z","last_seen":"2026-01-07T19:31:21.331373Z","times_seen":7932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-02T15:31:41.76509Z","times_seen":15145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-05-02T15:36:56.280562Z","times_seen":19045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.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","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1b00ca427793cde7e8f39bbfab81a40","sha1":"c6c745002d7d4d317438a53e1073cb9300e194c0","sha256":"85ff6826d00de565c33fead53b0f8a1aa78bb906cc3a39082d30b19b9a741ec0","sha512":"90afaad7bc5d8db016169ae4ea526cd58b9d1157390194e9331f7669cbb7e34d0484ab227d27ac636d78ff49e203a48cc73d92f01fa4275671292bca38b44c0e","ssdeep":"96:55Y4iC4MyfU+0eCe3/uyEeuc/RHr42T7MffDTKG2eie8o:5HiC4PU+fCGEe9m2XmfDHie8o","tlshash":"d9a1e83b74a5765c90b324352a6f9219b4235607710cdc16fdbc65e1af1c3478c52bac","size":4843,"data":"","first_seen":"2025-12-22T09:35:52.208949Z","last_seen":"2025-12-22T09:35:52.208949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-02T15:34:33.682429Z","times_seen":83149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"5652bfee420f79f727a9f0fcba38dde1","sha1":"4f9b567bb0c238ae1457addfa25b4280bb9150c8","sha256":"db1d7cd07b235eb68687a3d7d94c8f75ff5cbcf094ca43b1bea441ef642ddae1","sha512":"9366b5e91ee40ee59aee591babe742f99c1e2716489e37863d16dc4e451f704b7fd20652714a363300cc805c37da2b36314bb15bb7eb21ed2140e56c8f3e2c00","ssdeep":"","tlshash":"7850000000c00c00000000000000000c0033c0000000000000000000000300003000f3","size":9,"data":"","first_seen":"2025-12-22T09:35:52.210119Z","last_seen":"2025-12-22T09:35:52.210119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"1b9fafde606cef56629a55ca6ece3167","sha1":"573d9cafbce96e763f45d78059e7650c0fb98ea2","sha256":"178ed3a391cacda49250d938575d39e7bc5c032e1abc37782194e22da18a3812","sha512":"eeb06825a275424f0c92434c143bb156a1d221c7aac850ceec55dc7498ec43e4652d35466a89aa8e9f6e27fa51e7a75d63d6394c52f52031f151fa81865de269","ssdeep":"","tlshash":"4c500000c00300000c0003000f0c00000300c03003300c0000030303c000f300030000","size":10,"data":"","first_seen":"2025-12-22T09:35:52.21123Z","last_seen":"2025-12-22T09:35:52.21123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","fqdn":"sysmeasuring.net","domain":"sysmeasuring.net","tld":"net"},"ip":{"addr":"52.223.13.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"396983b43a97ac40197e7d22399b707b","sha1":"9c54ff4c30658fd6a7e94eaaae5072b3ed2ec1dc","sha256":"de4e0ef840a4a74223bb4637d128d0fd8894ac9f95bf604576e8c5280c768442","sha512":"82fd10e645edc15d344110f8b284535fb26273101b469e7db360c1aecec7c1d3fe30a0520a96e5b893ed378c90ed246b9224bd79dca35918753e2b4cb628e1e1","ssdeep":"","tlshash":"d5700028008000008830aaeb230b228c322ef0e0a0008e223220220020c80038802080","size":25,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-02T15:39:40.550017Z","times_seen":12534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","fqdn":"vidbox.casa","domain":"vidbox.casa","tld":"casa"},"ip":{"addr":"104.21.63.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a0c3a24b2fcd96212e31237974ee98b","sha1":"4125189ec0587ccc8a0c5b8f5164f012e076b881","sha256":"699c1e56d6553ef42a0055af494ef1c195bbd16cf09d23157a58105c78fbcb10","sha512":"37d5bca670334faa626a8ac683d156d529b2f3abb1805a99d62b1608c83a30765a8aaa4072eb86897d83ebbcfd98fd8d795dcb082a95a2c09168ded48de5cab8","ssdeep":"","tlshash":"ed51659d3e14659ac7929e3b2d3fe106ae20fb81a649e048e05ae4c4fd61709f1b7730","size":2618,"data":"","first_seen":"2025-12-22T09:35:52.212987Z","last_seen":"2026-01-06T00:12:07.907006Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"falsifyprobable.com/80/c1/ea/80c1eac90d5851958ce12d29fb8b530b.js","fqdn":"falsifyprobable.com","domain":"falsifyprobable.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb6066e120f15d9ea0eb14254feca8ff","sha1":"0f6e16adfb219079fc604fc70073b8f21d95a26e","sha256":"36e9905c98b676fd0198d00d4f3fca471e8b0202c4fc03b74b01a33c68b809d5","sha512":"4f56f60aad8b877bd724f1f889048e96045fc5d7cea7fc76dfcc043016747eb70c233069f6f3db5ba34dfa4b2ec4cc26779bce7877b47c535f082b72c4ae8635","ssdeep":"1536:rftYwad+XtemOnAWney94sIbUEibawTldZg2Gu7eP594wQvQLsbNF:QRKibawTJD77i34XZ","tlshash":"d9c3d5887fa1f25c03867472263fa41ae12a9e41509cf1b4e106f4ad2dbc36fd4be764","size":121119,"data":"","first_seen":"2025-12-22T09:35:52.20513Z","last_seen":"2025-12-22T09:35:52.20513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/sbx.js?t=1751380596","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f51d6e1077ae9bd4834851191fff65f","sha1":"d0f8b61ad6f87985257b58195e8ff5f8963e3c76","sha256":"6f67818eb26d52a20538ea3081d6c9ed66f84b6cf19f96bc89fd1081379ddca5","sha512":"7cae86a0db2c0b120831c03afa68e89fd83bcd7fd9fbdee09f01b635bfc029d1d1b31d41197eed55833d7608b0f35c2d37b9ac91ec56c65a3071079c1f166b5c","ssdeep":"","tlshash":"f601b19e3161533482f6625f96376748b0b712576c07c070b09d47507f28ed696bbedc","size":798,"data":"","first_seen":"2023-11-14T08:31:50Z","last_seen":"2026-05-01T09:23:19.688373Z","times_seen":679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmeasuring.net/","fqdn":"sysmeasuring.net","domain":"sysmeasuring.net","tld":"net"},"ip":{"addr":"52.223.13.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"21668102887ddf9b953b091ca8c549d7","sha1":"dd76c0324f2c691f9c4050dd05a3e6a92a787fed","sha256":"aa746fa37316f8980549ae07c922b7deb697cd7d41d5e579df70424caa495046","sha512":"3fe4b9831ef93853f3ad9d9778e4eee7f16eb497d74fca25995a0ba8d96cc0e86cc2163d5a784948a19510e371f386125eb9b13aee43d59030bef0fd52f47c14","ssdeep":"","tlshash":"4cb0129c3240598550f6803a8b33bd0ca01f248fdc00494004010811283930f02457c6","size":94,"data":"","first_seen":"2025-12-22T09:35:52.21402Z","last_seen":"2025-12-22T09:35:52.21402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"805021c65174aef6e2ce064fb8f8f536","sha1":"9fd1434e891b625646fbeee846ab5cf7fd79326b","sha256":"c64b149f8c12323fe813159c754d76c06f34cb4934e53ac62ccae64a9ce5ba82","sha512":"685e54fc9666a177688932e6ece7d86b242a5051a2b4d836280f95a3a163e7a0462171dd09287143054fb275fd2baaaf4b8cbd9aa1ede94bbdb9bbf89bfde41f","ssdeep":"768:Ns28jHWYspfgS9J7yr5PbfmDJEX6shV4o:K2PgcGrlbfmSXDhKo","tlshash":"8dc207e7326e79494329953110ff2d91b2dd49d0318f5678ea14e12639e393182fbef8","size":27838,"data":"","first_seen":"2025-12-22T09:35:52.215018Z","last_seen":"2025-12-22T09:35:52.215018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"468dabd96c8d1c5ac3b96230d09e1cbc","sha1":"ba61fdb32eb6494556739127f416d11b4712ba9f","sha256":"c78211d3b88e0d7eb39d0e2bae134a78a1cc0091891436550d92b7b864c15872","sha512":"c58c7fdae67f8406398cca44e839cba1ab0c8b12777b52b6577b983d8ba1796006797ee8b21a4bbb6c3f6b44215de2908686a29fb41d87f6d35c750b8da7ca6b","ssdeep":"","tlshash":"95700080c8a280e8f820200200acb0a000a08082880ae23032a0a0000a0220000080c2","size":25,"data":"","first_seen":"2025-07-01T21:21:11.570899Z","last_seen":"2026-05-01T09:23:19.749664Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.6c04774d.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e110c1bb3f39aaccb66bdf563f8fbf","sha1":"70988d78bdbf1922860f661d4e654ddc4a3ceda6","sha256":"aae1a309f65da026e3bbc5b0041f46737affb097a08f0185681b84481a3c1388","sha512":"1b645b9cd17d74f39e766b8de5cd0f95e2da61c05d25bfdc9e31160f4fd5fbd7e214ddf04fe20e878e3025767d7f8770ef4b92249434c42e1ef4376a30fe1a06","ssdeep":"12288:Y5tjdXeU6H3VUNJA7IXN2ETwzG0cQYnTsQYnTPDUk4f0WTI4WugqciqXD3I0cJz9:i/A7IXNlTwzG0cQYnTsQYnTY0cZ9","tlshash":"5a053bce76e1b0b407e291eac43f590fb3796e15d00cc561ebb9c9daa46984a8137f1c","size":851423,"data":"","first_seen":"2025-12-19T00:44:16.929501Z","last_seen":"2026-01-13T21:54:49.412884Z","times_seen":5898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/jquery-3.7.1.min.js","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-02T15:30:00.289291Z","times_seen":148468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YDXE7F0D9J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef927f3d628afbf72f7b014d0bd5dc0","sha1":"f43e2effc52a9dea7d510c55a71e200c5381c702","sha256":"20b10ba370a4707634075472a66557b10b47bc2ce8b9e2450afd6a6baef22dce","sha512":"fd76d728f03fd6040e0000d0ad80f9fbfa4891082ea6e06e0eae50897d0f5f60fa57ebd4f70a89b73a36aaccb978534df83c32fcaa54d96526035e45a471fdf2","ssdeep":"6144:vOIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:/C8bu7/1mbrnsy39WbMpb","tlshash":"6a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433264,"data":"","first_seen":"2025-12-22T09:35:52.149612Z","last_seen":"2025-12-22T09:35:52.149612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d764ab68fd8bc338761fb23df1eeca7","sha1":"5cd047de972f97d7bc8d8c16ea5389249e6b8567","sha256":"592b366c49844ec7ca666486815d835257e517789e934a68fddbee8141da0450","sha512":"7333e50c0c951e8689fea68512e125bd452b2fba4a9944a63b5ecf0035fe08836118bb789ed3f9729a0aadc8bb0b3c8aacd7f8f2dd4020f8b39b7739b27244c5","ssdeep":"","tlshash":"19c02b8c210e0c7085f727008b3fb604f402332494d06d324c1d23458d30e03db84850","size":153,"data":"","first_seen":"2025-12-22T09:35:52.216732Z","last_seen":"2025-12-22T09:35:52.216732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b105ae11aaf0b47395b2000405b0c592","sha1":"3c1e064f7f5914d976f4a81aea09018b88252773","sha256":"59f1a5a724edcb7907d7734c94ea7893e3c0153854847a1dde214f8c71339e9a","sha512":"3e3a9f1b04582013f15fe140f1aeee984bf74299ec944c6d5752bcd8a14db371f03a7f7f3002eee365d2b98a80791f2a0dc2b380001c80928295458d02be6190","ssdeep":"3072:tXki1TG8YlAVCzIqwL76WJHpYx85/MVzUL:6WTGvlwqw5JJdQza","tlshash":"3ab3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112425,"data":"","first_seen":"2025-12-18T15:53:40.958967Z","last_seen":"2026-01-08T02:23:09.116351Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25e6119e62d1ba8afd52ec0f623a82bd","sha1":"5a880ff68e376984e4bcd6a646026c67438ecbac","sha256":"dec2ecd2607f2e892cd7041307752b509b1ea8db61ec38cc3a5bb9664ac48f62","sha512":"31ca39bd744be12fc88109f84a02d66290fb50829c5f41c31f938fabeb121eb2463366edfdf6ba4ef5898cc922b1bcda29658506e4162f4f3044428db4b5ca40","ssdeep":"","tlshash":"5911cbc577a2e441813615abd50f144bf575e47758acb410e6a1c4e4acb0abb443ab06","size":956,"data":"","first_seen":"2025-03-12T19:00:14.122018Z","last_seen":"2026-02-26T17:00:03.80743Z","times_seen":79470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/build/assets/app-D5E9VxNg.js","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0681e4d1a173d88aa2070f73fd10d8fd","sha1":"c4f28efb789de39161c26add9657937aab8aaaca","sha256":"98b531705c8c2e851ac816982f56eecae6cd4e822a8d1248fac4bf0d53315407","sha512":"be12c38b0edf04dc1bcc2bf51dc65f91af3b607177c0d5e6cfbd40096c87bb58eff0961dc048ef31de7e24f8a649008205f06a1f80c345ced4bc67aac4b8d1b6","ssdeep":"3072:9E83CvQ5dJB8tHxtpo2KKweFIl1u9DHviMUA8BHnQT0DEOXjQ:9EzvQ5dJB8tRtpiKFFIPaR8eVAE","tlshash":"48f3f5d97286b47346ab94ba807b420bf2366894740e8414f06cd8ed3d7dd8a617bf7c","size":170940,"data":"","first_seen":"2024-06-01T23:05:26Z","last_seen":"2026-05-01T09:23:19.692096Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","size":19990,"data":"","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/8MJDh9WsMYuJzVV7ASsf4HP20A4.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/8MJDh9WsMYuJzVV7ASsf4HP20A4.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6556\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"680549d4-199c\"\r\nlast-modified: Sun, 20 Apr 2025 19:24:04 GMT\r\ncdn-storageserver: NY-346\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 913\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:41:45\r\ncdn-edgestorageid: 1078\r\ncdn-requestid: 574eb25ef38dbdd183f16bc02864a322\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5de2065cfbeaf036fef9c7491adc90d5","sha1":"23bbeb62881de7005f9a3581a26c10974ba10470","sha256":"18b8b13444eafbc87db37c2fb497091603de3c96191ebcd9051e07eaff01e34c","sha512":"b7faaf8efde92d71435e0d7ba99f3372ad4b2424666bd5253463547b42dfbbf4504934c057ba7ac4289bb432b0034d8b5d04a52d1d93efb656efc46daea872e4","ssdeep":"96:6Q0advmxslqCUkBFCWj9jvOdxO0sv5ydGzPcQeIATAYrRuRvQpzmFcJSVlf:6uvqslqCUACWROvO0vAbeYmlpzmuJ0l","tlshash":"b7d1af95853981ead280779095c4bf3be72dd63c3ef2e0545b48799803ddeda15d8c38","first_seen":"2025-12-22T09:35:52.137812Z","last_seen":"2025-12-22T09:35:52.137812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sysmeasuring.net/\r\nOrigin: https://sysmeasuring.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: J78LCXkKGhgmhGOM7OGi+Ofc4BI+IVS2jI05LG0y50kWAMzXp7eD0mZEgXOdPUEvTgAUePqSPPw=\r\nx-amz-request-id: SKF57R86501FXK5E\r\nlast-modified: Fri, 19 Dec 2025 00:40:44 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UA8k5LV32_s.plO_EpnqFFxqPx5G3HDe\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Tue, 22 Dec 2026 09:35:19 GMT\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-length: 20\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=MMVlkvmQQe6j/yfnC7rscw==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.38.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:52 GMT","end":"Wed, 25 Feb 2026 15:59:51 GMT"},"fingerprint":{"sha1":"E4:25:76:F6:C4:FB:46:FE:7A:37:E5:D8:E5:14:75:A2:B3:75:D2:9B","sha256":"34:44:B0:C8:96:F4:D4:42:DB:58:BD:4B:C9:72:0A:E2:31:20:B1:87:B3:2A:DD:E7:6B:62:AA:AB:58:B6:92:89"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=MMVlkvmQQe6j/yfnC7rscw==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sysmeasuring.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\nserver: cafe\r\ncontent-length: 8049\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10650,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"174f76c286f272777fee1cbe6eb5a6d3","sha1":"421c6924fce1c931fc23bb86ea4ac6bb139aef5e","sha256":"cf2693a4174e92b4438d0f75daba10c27bef77b29657778d21243f3880cc49c2","sha512":"e40454bc1cfc17075f539a04be603fdbd60c098a4cf01e488c9154d270c42f328fe14957edd0ff3a22780d7b07c08da05ea8731f355110ce3d3b154e5f2d3fb1","ssdeep":"192:NK6U4WuIBqCUT6jZYF14ToGgNgffwrSXF2KtJOPjT04+H5AZ:NKujWtYIom4SpO7Ee","tlshash":"3c22b020de82989f9162f45533f098bd417d8fd1ae7399e583786d19cf8f648b6b0098","first_seen":"2025-12-22T09:35:52.139967Z","last_seen":"2025-12-22T09:35:52.139967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":51,"dns":1,"connect":11,"send":0,"wait":24,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=r6uf915212hx640445844s6g6fdcr737","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:19.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js?userId=r6uf915212hx640445844s6g6fdcr737 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://attackertv.cyou\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=r6uf915212hx640445844s6g6fdcr737; expires=Tue, 22 Dec 2026 09:35:19 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b1ea0e57d55b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3278a7d28bfcf0a711f05101e7777288","sha1":"60026c146621f60d99706ce5be390eb7e424fa4d","sha256":"9dbb11adc79f8c462ee14efa97dd68d3b3f0a0987d19d635c6fd040493050b29","sha512":"168ec8198f12dfeb0395e58cbcf06e51150d8fe0db64a79aacf24a52613e614b0ceded649fa217c1bf42a52697e340c11f7dee1bd482bebc6ac12e71fcaca4ed","ssdeep":"","tlshash":"d0a002850924a6e81c40295719c7d791488284676c08a2549af898896fae64c2656301","first_seen":"2025-12-22T09:35:52.141123Z","last_seen":"2025-12-22T09:35:52.141123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":30,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","date":"2025-12-22T09:35:24.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidbox.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 22 Dec 2025 09:35:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 88df1a8486bf041a24ba22023cf45306\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":75,"dns":3,"connect":18,"send":0,"wait":18,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/base64.js?t=1688387834","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /base64.js?t=1688387834 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 03 Jul 2023 12:37:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJ0La%2Fd%2BMc4W0NY0Kx4XQnac%2FVzFbQm44ICJfpioi5UO4wcwxD%2B6LfEsBUSVrBL1WPlLUxjFxNCYP3wpSruKC4zJ70kT5H2LK3%2BYB3cIhA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Mon, 19 Jan 2026 06:43:10 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 183137\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11ce82a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1575), with no line terminators","md5":"c39c9defbf38dd19e787acb96d26374b","sha1":"610a6b0773b815e3971a5e2bada86364fb2c8225","sha256":"35ad88a13bfe359b14b3d3bb43bc784d34ff6842b6bb357519206645e5107632","sha512":"85c469732b00ebb3c58b4e8f8c78e3ea40c6f6c1f0a81069b8a1d0d4044409937d8d1e9e92dd2638b278636b0b4ce95689bb078e999eacff3bc9907eb22422da","ssdeep":"","tlshash":"7031c167255a049b0df82dd72e9b708b8db153140b2cc1f8ed02eba546dfac4401ef25","first_seen":"2023-03-07T17:07:30Z","last_seen":"2026-05-01T09:23:19.6849Z","times_seen":739,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/kFs71AhHtqBnR93s7ux7XBfHpLc.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/kFs71AhHtqBnR93s7ux7XBfHpLc.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16196\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 01:46:14 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-291\r\nx-downloadsize: 21338\r\nx-bo-origindownloadtime: 788\r\nx-bo-compressionratio: 24.1%\r\nx-bo-processingtime: 5\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 01:46:15\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: a8f5522d8868f90238ac75cfa22f0b04\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52aa7538e1f51945b8196d00e5610c05","sha1":"d5bb9fcafebc19c3ed8f5f75a06fbc72189684aa","sha256":"64992e0685335c21d663e39aa937f96246d54079e9610d2b48983189e122dec5","sha512":"814835c0c865242f3c3f2533c1637bbcef88d5f914bec8d555dfbf7c8b414db052499f4bb5a1a429314972744735a38b1372c06c3c2b1a42595e5d2c2cc1ea13","ssdeep":"384:R6DDeeNm0xFRhiD0hNe0yyMQHA2uMXaabL6ZsTX0Ewm8O:RODZpXbOCyWA2nqabL6ZsYO","tlshash":"f572e151d2d035cda4ad79b00507cca5098b686b55ec97bbd6e843d318e03b3aa8c7a7","first_seen":"2025-12-22T09:35:52.142757Z","last_seen":"2025-12-22T09:35:52.142757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1653,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/sbx.js?t=1751380596","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /sbx.js?t=1751380596 HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cloudnestra.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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Jul 2025 14:36:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mwu%2BuFv0KPJ%2BZ8xkIfWLmbGQk8Ty39TvZjUE4FZTNTZP4tdw3XgXUfKLKR4BslxjcbzOfbrvBqkDuJWqfJXRRqNQD8lw0CdcmijAWtA%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Jan 2026 07:41:48 GMT\r\nage: 352420\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11dfeeeb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":798,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4f51d6e1077ae9bd4834851191fff65f","sha1":"d0f8b61ad6f87985257b58195e8ff5f8963e3c76","sha256":"6f67818eb26d52a20538ea3081d6c9ed66f84b6cf19f96bc89fd1081379ddca5","sha512":"7cae86a0db2c0b120831c03afa68e89fd83bcd7fd9fbdee09f01b635bfc029d1d1b31d41197eed55833d7608b0f35c2d37b9ac91ec56c65a3071079c1f166b5c","ssdeep":"","tlshash":"f601b19e3161533482f6625f96376748b0b712576c07c070b09d47507f28ed696bbedc","first_seen":"2023-11-14T08:31:50Z","last_seen":"2026-05-01T09:23:19.688373Z","times_seen":679,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jnbhi.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 10:33:25 GMT","end":"Tue, 03 Mar 2026 10:33:24 GMT"},"fingerprint":{"sha1":"64:B0:B5:35:A4:3E:80:F2:9B:4A:AD:1D:6F:38:9E:4B:FA:1E:4E:21","sha256":"F3:74:C2:D2:3A:0E:5A:90:DB:C6:2A:E1:C8:90:71:5E:A1:5A:DE:D8:52:EC:08:67:49:B5:09:42:76:8A:BB:8D"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: jnbhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 112425\r\nserver: nginx\r\nx-trace-id: ab515fdff3387b2c0ef2691753636159\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: max-age=1800\r\nexpires: Mon, 22 Dec 2025 10:05:18 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b105ae11aaf0b47395b2000405b0c592","sha1":"3c1e064f7f5914d976f4a81aea09018b88252773","sha256":"59f1a5a724edcb7907d7734c94ea7893e3c0153854847a1dde214f8c71339e9a","sha512":"3e3a9f1b04582013f15fe140f1aeee984bf74299ec944c6d5752bcd8a14db371f03a7f7f3002eee365d2b98a80791f2a0dc2b380001c80928295458d02be6190","ssdeep":"3072:tXki1TG8YlAVCzIqwL76WJHpYx85/MVzUL:6WTGvlwqw5JJdQza","tlshash":"3ab3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T15:53:40.958967Z","last_seen":"2026-01-08T02:23:09.116351Z","times_seen":241,"resource_available":true,"data":null}},"time_used":1764,"timings":{"blocked":834,"dns":799,"connect":21,"send":0,"wait":35,"receive":53,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/build/assets/app-D5E9VxNg.js","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /build/assets/app-D5E9VxNg.js HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 22 Mar 2024 03:38:00 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boiK9cqmu3Mf6wAZ2VOEDQU0HbadnFxIbqkPi4bIRbU%2FTiP%2F%2FJC%2Bmqbvag3VS7EjoRjS5lypM3A9eyYQCkaOK6XBybDfhDylubnbp0Q%3D\"}]}\r\ncf-ray: 9b1ea0d8af350b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170940,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44164)","md5":"0681e4d1a173d88aa2070f73fd10d8fd","sha1":"c4f28efb789de39161c26add9657937aab8aaaca","sha256":"98b531705c8c2e851ac816982f56eecae6cd4e822a8d1248fac4bf0d53315407","sha512":"be12c38b0edf04dc1bcc2bf51dc65f91af3b607177c0d5e6cfbd40096c87bb58eff0961dc048ef31de7e24f8a649008205f06a1f80c345ced4bc67aac4b8d1b6","ssdeep":"3072:9E83CvQ5dJB8tHxtpo2KKweFIl1u9DHviMUA8BHnQT0DEOXjQ:9EzvQ5dJB8tRtpiKFFIPaR8eVAE","tlshash":"48f3f5d97286b47346ab94ba807b420bf2366894740e8414f06cd8ed3d7dd8a617bf7c","first_seen":"2024-06-01T23:05:26Z","last_seen":"2026-05-01T09:23:19.692096Z","times_seen":37,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/build/assets/app-DEVF-DoW.css","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /build/assets/app-DEVF-DoW.css HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 22 Mar 2024 03:38:00 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxmCQhcv%2BvugAMcHYKr3r3q5JZ1vnSB%2FbVMGabs5UPNfLaOXakH6%2Fy6fuUja60VzQ4H24RB6slOr%2FDGlBWRyL5kvJfLujL3A7Wyg%2FSA%3D\"}]}\r\ncf-ray: 9b1ea0d89f330b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333864,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62390)","md5":"3c584896874b00197f99725d1beece12","sha1":"7af5f780dfd35ba3d5b2caadc8c052049ea235e2","sha256":"e6fd71a7675e3bbecd6370522972ed97c9311c150ba86083837f7c641a02a966","sha512":"ff33ae42e216104f84b64394caabbbd5ab9df88d00e5a8fade71e32ce8ecf99ad9b77c22c178a276be31c56b4de07bec5611425e6d66e7e13129135d341a07f8","ssdeep":"6144:PIcne77wakJ92CnC9DfCU7MqGpz600I4ThLWJb:QcnEqJm7Mq7hLWJb","tlshash":"f564fde6f18420e8ab72c94bd784bfbc553af661ca010d95f00bab5c4bc57d60592fac","first_seen":"2024-06-01T23:05:26Z","last_seen":"2026-05-01T09:23:19.697008Z","times_seen":30,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026gdabp=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026gdabp=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\nexpires: Mon, 22 Dec 2025 09:35:19 GMT\r\ncache-control: private, max-age=3600\r\netag: \"13332886450574627524\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":134036,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"6ebba24e491f4058a42d693b16cc4547","sha1":"1eacdf32a3d8a0e65583516edc5f61e4941a6f95","sha256":"3b3a19be18ac499a147f2722f508546c4b61b9bfbd1de4976b147e403b0b18a2","sha512":"c3d0d88a0ee96b4455de62a3691a43011f11352ca1424256ebf4e60e3521755f1860d596c903554a0b47742f6b7a5f0b31479a2cc9a09a74800e5887846df5b3","ssdeep":"1536:FzL751Jqc2HyP0SuRPmym0pO1s8dsR5qxyzT/ghgOKWYZjAartrvpD3pduCxAXtB:suydkXiR5zzTq+bxpD3ZV4T","tlshash":"51d33acdb3a1342643a3a5b5607f414fb139b8a5a40c88a4f199d8e87c74dad4237fbd","first_seen":"2025-12-10T15:36:51.477347Z","last_seen":"2026-01-07T19:31:21.331373Z","times_seen":7932,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":55,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/rings.svg","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /rings.svg HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/style.css?t=1710289820\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 10 Dec 2023 22:58:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkcIRY8%2Bzy9vHqGZpVEcfFIrOWmPdFZZKUtpbwt4f4sDSPsWtNdKJW0P2ft6HzKlEzMlNM0vKsE10BOHGFQBz%2B4mPAN5h1782w%2BRjJ%2BdwA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Jan 2026 04:42:15 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 363193\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11d48d75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"76100ad54d36f402af3b99af43ee96d3","sha1":"65c071d0ffb5d4714b923ba733ad320f0426d382","sha256":"ba3c3efa0f3e09685a5edbc344dbdf119ec2f875d0058fd783f20e691dafdba3","sha512":"dbdf7d1ab6f0bff410a5e8d025e6ca9b79240716690ccf69780784aa790cbe08cff2a7ae74c4527f63780684f02bb95346a89e3e45524278af1c3a2ee4fe9ce3","ssdeep":"","tlshash":"e0317d39ed674cce1a2cc978b22f240868948163854e1088f49dad376f1dd4f647f2dd","first_seen":"2024-01-30T02:24:21Z","last_seen":"2026-05-01T09:23:19.726506Z","times_seen":568,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.0-2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:28.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.12.0-2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cloudnestra.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cloudnestra.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10101\r\ncf-ray: 9b1ea11dfbf4b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed131a1-df5e\"\r\nlast-modified: Fri, 29 May 2020 16:00:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 215573\r\nexpires: Sat, 12 Dec 2026 09:35:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fnrLm%2BQRSISBRWsDMLaykPZKU1mlof5NCix1Ety5Pu6kRU5QLzRArQO05CZ5965rzpdee%2FmTuNJZpY7iIlceHV4wtPihoTnBxhZk34AiccbJVv7gJM%2FLsPdNALmEsRAScTyXCvSu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57182,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (56994)","md5":"2c182dbd3d99baffec2a6c499b9414fd","sha1":"4caaf110eb29e0de9b45e06b87544a018459b4fb","sha256":"e3aaf4eb43762eb0a12cb6f9ce8c1743bdbf88a28d8b0fe5026ca098713193fa","sha512":"834ea9a2148761b48e1caabcb5d0c65dc904e82db762ddf4c654c50e1aced0e70efdb34ed8c5976fade8a94fd8db718330d3a89f5d347861f164f0674f842033","ssdeep":"768:9EC319Piznq4/xBo4UHJqkQjR/IMQyYJrX75CLKZQz5:9EkPUq4/3iHMBjefd7sLfF","tlshash":"59430cb8e54c01c9a731c44fbf82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-07T18:20:39Z","last_seen":"2026-05-02T14:45:40.363975Z","times_seen":809,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:28.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cloudnestra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30306\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:59:15 GMT\r\nexpires: Fri, 18 Dec 2026 09:59:15 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 344173\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86659,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-02T15:34:33.682429Z","times_seen":83149,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":27,"dns":2,"connect":8,"send":0,"wait":9,"receive":8,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T09:35:14.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /watch-tv/silicon-valley-season-1?pl=Server+C HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:17 GMT; Max-Age=7200; path=/; secure; samesite=lax\nattackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:17 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGMwOAjFVDLhGYvt0p4jy3qKMSA4QZE8XShag6s6p1d20HRvjBJMi1QyUuAvJvLzQ4r6u5QYTRTjKcDXIAvkOHRbvtb6IkMV6%2F15uOk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1ea0d4fcc10b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":88508,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (28037)","md5":"287e0012fec4b1ac3caca24b8f982479","sha1":"529768d32ed4e27c33fd77e45db280653ed3eb56","sha256":"778e717149d5d70ad0ddce957eeaa7951bae80e8bbc63955570c8ca08cecf411","sha512":"5846eb679132d7474331331f2a5061e4f073df11773c11964aaf2ed07df2ddb48912e722cf88afdecbc613be4ba750d937123c286df14305a26118a78f04d4d3","ssdeep":"768:cD61cs28jHWYspfgS9J7yr5PbfmDJEX6shV4esFmjs/dESumebNuUJaZ2JMgS+G:Ys2PgcGrlbfmSXDhKxaBb7J+gS+G","tlshash":"8483d6b231f5242b0126c0e516bf2b167edac107c28f4618f2ac96e46fd7d51d9a3e68","first_seen":"2025-12-22T09:35:52.148666Z","last_seen":"2025-12-22T09:35:52.148666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6812,"timings":{"blocked":3172,"dns":0,"connect":1,"send":0,"wait":468,"receive":0,"ssl":3169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YDXE7F0D9J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.207.200","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-YDXE7F0D9J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Dec 2025 09:35:17 GMT\r\nexpires: Mon, 22 Dec 2025 09:35:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143088\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433264,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"9ef927f3d628afbf72f7b014d0bd5dc0","sha1":"f43e2effc52a9dea7d510c55a71e200c5381c702","sha256":"20b10ba370a4707634075472a66557b10b47bc2ce8b9e2450afd6a6baef22dce","sha512":"fd76d728f03fd6040e0000d0ad80f9fbfa4891082ea6e06e0eae50897d0f5f60fa57ebd4f70a89b73a36aaccb978534df83c32fcaa54d96526035e45a471fdf2","ssdeep":"6144:vOIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:/C8bu7/1mbrnsy39WbMpb","tlshash":"6a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-12-22T09:35:52.149612Z","last_seen":"2025-12-22T09:35:52.149612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":47,"dns":1,"connect":8,"send":0,"wait":26,"receive":24,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/4sOVH4xOOhvKQjMSDi0lUjP9mwt.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/4sOVH4xOOhvKQjMSDi0lUjP9mwt.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19052\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f848a9-4a6c\"\r\nlast-modified: Thu, 10 Apr 2025 22:39:37 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 719\r\nperma-cache: HIT\r\ncdn-proxyver: 1.23\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2025 16:50:49\r\ncdn-edgestorageid: 860\r\ncdn-requestid: dc903098daca6e645992c84beb1f7554\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"243bd3e81ed180bff1e87e7a3898517e","sha1":"ea13c43b9d98b0b322b366039fc32682c8d6c4d7","sha256":"a4347638fc0267ac20a6485b0c213a11db91d383eafa8b3f1a1ccd3f9f37dd43","sha512":"c045453e62a795a67008541dee62c9897e62b1b594c7237ba947f6fdebcf627b82b1f9e668b41c0e6e31cc414c064f0a02321ff4748386c5a13e02a1941cd772","ssdeep":"384:bY3SUJcB0dydaWtDGxX1CFXCSNiIgaLWI4QlPchPM2RFfW6rGQHQdNdtZF9H:+SUJhACIsS4Aj4QRePM2Xf/Adn","tlshash":"bd82d0920cb7df50e4a0f50e9af5fba85726098abb07109ae4fe14adc2d1455f35c09f","first_seen":"2025-12-22T09:35:52.150428Z","last_seen":"2025-12-22T09:35:52.150428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1633,"timings":{"blocked":1587,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/rZ0T0yRe8iDqAgeZXRNvpAJh5z1.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/rZ0T0yRe8iDqAgeZXRNvpAJh5z1.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20436\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f06d0f-4fd4\"\r\nlast-modified: Fri, 04 Apr 2025 23:36:47 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 857\r\nperma-cache: HIT\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/18/2025 13:53:55\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: fa0007aa1fe29e71109d7a26097c12ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4191232bc0c68f95e29c8d8bfd681d5","sha1":"4fa4daf0359ba3a99eb17c827057a509a7216ddc","sha256":"fc3afbd014253a1fd6cbee1e562dbb021b67477f50452cc4752eb7c7f75abe6f","sha512":"9c0794180b2998a3a4adfd81d5d66248f5975e161c2d11ddeab3a9d7026df13127f61ed4f4d3a00d9eb832f33092f02e05859a85e61ca6c4cd0d70f240d77387","ssdeep":"384:0IzupUqBfvkhQ9VSUI/8luaMuvEgtDXRNTtYBx+PGS506r3Jt:0IclB1DhIqounBNTtYu+SBr5t","tlshash":"4592e1e4114f4d102d6347b804eea1dafbc98da8632e93069d9547e82112887bf8bdf5","first_seen":"2025-12-22T09:35:52.15166Z","last_seen":"2026-01-10T15:23:44.473563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":1585,"dns":0,"connect":0,"send":0,"wait":105,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","fqdn":"vidbox.casa","domain":"vidbox.casa","tld":"casa"},"ip":{"addr":"104.21.63.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidbox.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 12:34:54 GMT","end":"Sat, 14 Mar 2026 13:33:27 GMT"},"fingerprint":{"sha1":"62:02:72:CB:A7:AA:C4:B7:B2:D8:CC:45:52:66:67:EB:0D:22:8E:1D","sha256":"39:BE:30:B6:28:6F:80:C5:40:FC:27:47:CF:CB:DB:5B:4E:5D:9C:9D:40:D3:51:B5:D1:53:88:5D:53:4A:02:9B"}}},"request":{"raw":"GET /player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1 HTTP/1.1\r\nHost: vidbox.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXUpJxx0hRxRM%2B83nqToYeaYVYgX1d1zRRpqZg6gWebNQyBMN9ZGHEjazho7q2zlW%2BYuofZi8WWAfu8k6xqbSnbJCV2k2HMdYg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1ea0faac8756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2856,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2658)","md5":"bca814211f061940db20d76a85169e15","sha1":"390631dd3891ab077bef7f6eafb21e541575463e","sha256":"08cd63d2ff0a57e98ff087e7a448f856e418f5e04ed80aafd3495e9b0ee4c7af","sha512":"71804181b361178b6e3acb89900f022e271a5227e6a4195b445108a5160a9ac025a46a212531b6b4f54eadf641eb691d59e088ec775666421919d97be179cf37","ssdeep":"","tlshash":"aa51659d3e14658ac7529e7b2c3be106be10fa85a649d048f06db484fe51b05b5b7730","first_seen":"2025-12-22T09:35:52.152634Z","last_seen":"2025-12-22T09:35:52.152634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5332,"timings":{"blocked":0,"dns":5189,"connect":1,"send":0,"wait":131,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/build/assets/fa-solid-900-DAI24fNt.woff2","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /build/assets/fa-solid-900-DAI24fNt.woff2 HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/build/assets/app-DEVF-DoW.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D; _ga_YDXE7F0D9J=GS2.1.s1766396118$o1$g0$t1766396118$j60$l0$h0; _ga=GA1.1.1090939094.1766396118\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156496\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Mar 2024 03:38:00 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BfcpAcjn9yaED5SIsfIqUyw2gGOSQyVbZyODC6bnTXq6i%2BEDgb%2FOIS2C8DIIJLFB%2BB5tk%2FNtMLl1DWv04CEKET%2BxZsErO8L27YSWCQ%3D\"}]}\r\ncf-ray: 9b1ea0da38340b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-05-02T15:34:28.182423Z","times_seen":37430,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/genres","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /genres HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D; _ga_YDXE7F0D9J=GS2.1.s1766396118$o1$g0$t1766396118$j60$l0$h0; _ga=GA1.1.1090939094.1766396118\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IndBdmxBRGZZL2ZFakhzdTJ2R1g5MWc9PSIsInZhbHVlIjoiL0plbHpFYUZaMVl0U3FuQms0MmtTTjdjamZTWmtLUEVFVzFLdzNabTRMVXVnZDRMYVNFbCtGOEN2SWtOVGhRcitaZFk0UEV2NE00OXFwWG82WVZZR212Y3dWbkthZFh5K0dLbzRDR3Z2d1VsSDI1OVpGV0Z1ajNsK3FIZlplZTEiLCJtYWMiOiIxMTQ0ZjgyNmQzMGYxMzZlNWJhNzEwYjg4NTIxY2IzMjE4OGI2YjdjNzliMDFhZGQyNzFjZGExYmE2NThmYTU3IiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:18 GMT; Max-Age=7200; path=/; secure; samesite=lax\nattackertv_session=eyJpdiI6ImlWNnN2VE1yL1pUZ1hCMnY1RGVxRXc9PSIsInZhbHVlIjoid280MHlDVHgvZklHUWJOK0VHeUFJWlB6UjBucmtFTTZOZ1d5eDBrY3VFcmtLbjlDYkovVzNnQ3liRE5KOVpMUVNiMjVhVEpUL3A2S0I2bU9pdlkrOEUvZFl5VkNsNnRXSFNrQnJjWjAyaGpBT3RGNml6a3VNT2U4eGlVcG8xaTMiLCJtYWMiOiJjZGRjZmU1MzhmNzg0ZjlmNDZmNTM4YjNkY2M3MWZhNjAxNzc5YTY4Yjk5MTk0NWQ1ZTgzZmMzMTJjZWE4OGNiIiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2x0nZvfAT4t2KLmqtVFRqn0aVYXQ3NXZ5ejYxZoCHAja6mxyUINgpeKby50w17blKnqh00UCWuP7j2Bg0G4MOWk1mijcC2hZkfXbWE%3D\"}]}\r\ncf-ray: 9b1ea0da68520b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3235,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab588edcb0bb3c363059ca31ecc68004","sha1":"666c6b7f1471cae4a62d8c669f5f4a5cc532dd31","sha256":"b14cb4a61f949b605dec959b783b7297c0fafcc0797d84e7d823e7c9088a4be4","sha512":"ed2c7e7ab3c990cd7abb82336ce71cc4a769e834966b39a6b8bea2b07aaf6eea3fc5b35e9a55ed2957030d7a78b1b6ccedadff16b0164f3c5144fe191b33f4e5","ssdeep":"","tlshash":"f161c7663e97442f0ca2d1ccdb79f6acb80ffc0ece39401394aa106e01656645d9b82b","first_seen":"2025-12-22T09:35:52.154195Z","last_seen":"2025-12-22T09:35:52.154195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483162\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-02T16:30:56.526162Z","times_seen":782001,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":11,"receive":5,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:52 GMT","end":"Wed, 25 Feb 2026 15:59:51 GMT"},"fingerprint":{"sha1":"E4:25:76:F6:C4:FB:46:FE:7A:37:E5:D8:E5:14:75:A2:B3:75:D2:9B","sha256":"34:44:B0:C8:96:F4:D4:42:DB:58:BD:4B:C9:72:0A:E2:31:20:B1:87:B3:2A:DD:E7:6B:62:AA:AB:58:B6:92:89"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7188\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\nexpires: Mon, 22 Dec 2025 09:35:19 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1747411493688989\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19990,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":32,"dns":2,"connect":8,"send":0,"wait":20,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:52 GMT","end":"Wed, 25 Feb 2026 15:59:51 GMT"},"fingerprint":{"sha1":"E4:25:76:F6:C4:FB:46:FE:7A:37:E5:D8:E5:14:75:A2:B3:75:D2:9B","sha256":"34:44:B0:C8:96:F4:D4:42:DB:58:BD:4B:C9:72:0A:E2:31:20:B1:87:B3:2A:DD:E7:6B:62:AA:AB:58:B6:92:89"}}},"request":{"raw":"GET /sodar/sodar2/237/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Dec 2025 09:30:07 GMT\r\nexpires: Mon, 22 Dec 2025 10:20:07 GMT\r\ncache-control: public, max-age=3000\r\nage: 312\r\nlast-modified: Tue, 13 May 2025 23:17:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2024)","md5":"0120a1d624ff8fc3ec792d93a7133947","sha1":"1e3bd23df78ff2c60b187b40a0c6505be9ab889f","sha256":"14b660a511e14a9a481c6fe43c576f36c61b656cfd379728c54f1128e1855966","sha512":"84286e299ebc6690ee904b5581cd6aaf6b59d06200b61156923301484d1b75fa517894167c4f4777553ba09c840a2d74a723e3ff112448f00514d910dfd172c5","ssdeep":"192:pl/6xS2OASROqI3wgh5MXDc9EAOaK3qzfaGDCiMgIcTa1mx:rz2NQJIVsTiMH3qzfcOIr1mx","tlshash":"4842a7ccbad2b0210353b4f1a13f400ff13ea8aae44c9954b181e8e17cb56a94667f7d","first_seen":"2025-05-19T23:59:48.478548Z","last_seen":"2026-02-26T18:27:55.136579Z","times_seen":169945,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.0-2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.12.0-2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidsrc-embed.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10101\r\ncf-ray: 9b1ea11d0b1fb4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed131a1-df5e\"\r\nlast-modified: Fri, 29 May 2020 16:00:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 215573\r\nexpires: Sat, 12 Dec 2026 09:35:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ky0%2B7EwOc%2FOVdfYP%2BMRncwKnoLiIQQBwmZBIAuSgqvkyPNI%2BmpD16nLkzLkBxxiiCcWj598syDoHxrI5MP0voR0OBkrXdijNoSyzLIHRYVZR%2B7tZBB2TiwaI%2BZwSMDP1deYSpmY4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57182,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (56994)","md5":"2c182dbd3d99baffec2a6c499b9414fd","sha1":"4caaf110eb29e0de9b45e06b87544a018459b4fb","sha256":"e3aaf4eb43762eb0a12cb6f9ce8c1743bdbf88a28d8b0fe5026ca098713193fa","sha512":"834ea9a2148761b48e1caabcb5d0c65dc904e82db762ddf4c654c50e1aced0e70efdb34ed8c5976fade8a94fd8db718330d3a89f5d347861f164f0674f842033","ssdeep":"768:9EC319Piznq4/xBo4UHJqkQjR/IMQyYJrX75CLKZQz5:9EkPUq4/3iHMBjefd7sLfF","tlshash":"59430cb8e54c01c9a731c44fbf82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-07T18:20:39Z","last_seen":"2026-05-02T14:45:40.363975Z","times_seen":809,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/sbx.js?t=1754734900","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /sbx.js?t=1754734900 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 09 Aug 2025 10:21:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqNSiuTpjwSAGQ%2BZoc%2F4yFdjwgjqTgzCBXb0BiuzwLnuGFOqJ4ChvZWX9aXUIqY4hkDRgrEg0bBUee2D1%2FMMPH2yX%2BBeyFT5coE%2FTIlZ2Q%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Mon, 19 Jan 2026 02:09:36 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 199552\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11cf8415ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e78227c7410d0c7848f1652547aec2a1","sha1":"ca9b8886f70eafeeab0e007b217cc314db262c20","sha256":"c83f109b8a58579271b2146a2e6db8000b93f6341f40e6bb4ca24e2f80ae87a1","sha512":"9d5b6bed82bf749f9dd48b572983b1fa4ce6f4ea1340543ad0dee667521f87e9583d0dfde6887895b419485cc9f301a95112df5d9ca300dffb17ce8eaf1c2a8e","ssdeep":"","tlshash":"e001b19e3161533482f6625f96376748b0b712576c07c070b09d47507f28ed696bbedc","first_seen":"2025-08-16T16:08:06.726058Z","last_seen":"2026-05-01T09:23:19.734884Z","times_seen":468,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/disable-devtool@0.3.9/disable-devtool.min.js#/misdir.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /disable-devtool@0.3.9/disable-devtool.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9b1ea11d18545a0f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 438779\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 22 Dec 2026 09:35:28 GMT\r\nlast-modified: Thu, 04 Dec 2025 13:56:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:WnubLIB/hVdcnrwfUI6Em1NDCHCy0PtsArLePfZhy2M=:\r\nfly-request-id: 01KBMTCWXQ4REH8ES51GTGY8ZN-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-05-02T15:31:41.776323Z","times_seen":3883,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":12,"dns":2,"connect":2,"send":0,"wait":17,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.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","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /rcp/ZmM0YTZiMTlmNGRkZmJkMzExYTQyMTE0ZjQ0NGMyODA6ZHpOWFREUnROSEZGYUdOWFdXdzVXaTlaUWpnM2MxWnJWRWx0VkZSUWNWVjBRbVF5TDFsWVltUmtXVWhUVURNeE1qWXhOM0JESzNkdFZUSk1XQzl5TDBwUGExQjZjVGROUVRSdk0wZFpWSGxLWkRSc2NHTXhialJZYzJoWVJtcHFlU3RDVUdSSE4wZzRMemsxTldRMk9UZzVOVFJ3Vm1GeVRVd3dUVWN3YTNWUmVWTTViRTVRU25Kb1JHRXZORmNyVHpoTlIxaHVXRmRpVlc1TlpFbFBWMHBKVkVJMFdFYzNTMmt6VDFaT1kyRkhRWEJQV1RZMWJXOVlhSHB1VkhOVE1XSTBhamhHZEdnd2VubzJXRXBhVWxkNGFtNUpRVWxyZFcxT1RGZFdlRkJRUmtOTVVtUnBRamt5YzNoQ1dHMXFjWG8wTlRSUmNEazBWVTlSWkd4a1oxSmpVRWhoVjBaR1NYazVVRmh6UzNGWVR6azVNVXB4U1cxa2FuaE5OMnhMTkhNeU0yWnNNRmd6TVRsck0zVTFiWFpQVTIxUmR6RXdVeXRNUmpWRFF6ZEJla2w1V201Nk0zRjFSa2xyY0VKdmVreHdjelZ6TlZObFNXeGFiVTVFYlUxdVZVdGhWMWxVY1cweE9FWnZibEpPWTNWcVRYRXphSE5tVW1KRlptZHdjMFZ1T0c5d2FtUmhlbTlMTTB4UlpIUjVjVFJQUW1kbWJqaExjMGhUUkhVdlN6WmpNMWxNWVcxQ2NrbGhNbUkzWXpSalQweGxiVlZQTDFSQk9IZEVMM0V4U0ZOemFYUXpjakZrZFVWaFVscGtlV1JtTlc1VWJIWnpMM2hXYWtnNFVHVjZiVE55WlRZMGQyRkpPVFJwVTI5Q2VUTnJXbmRhTVVaNWJEbG5kVGhMTjJ4cVN5OTJObFpPTTNKTVpFbHpZellyZDFwSFUwWlBRa2RVTVdOa2VESkdURGMzVFZFMFlWbHhlRFpDVTNob2RucFJVbFZzVXpKeWJtZE1UalpTT0dsWVRqVkJVemRsUms1eGFGTjJVV1kwUzJ0bGNGUlRibUpUYm01clpXaEZZbE5TYUVkUmJXUXpjV2hrZFVoV2QyOW5hMHhUU0ZKT1MxTnlaVFZ4UzJ3elZtTkJXaXMxYzNSeE9ESjBVbVpaTVZCcmJGaHFWVkJ0WVV0MmNuTkhVVlppV205UU9VUmtaMUIyU1ZKVlRGcHlkR2MyYjNscFJFczNWbkZuTVV0dlVrTTFLMVY0Vm1sNEswVjFjM3A2U0hReU0yeHFkME5zVW5kbWJVWmtVVXBZVUhOM2FFbDZaa2RrZUV0cVZUWkNXRUp0SzIxa05HUXdWQ3RGUjNKdFRVdFVRVW8xYjIxTlJHVnZaVUZwT1VwTGVpdHRkWGhOVkU5QlFVRnlVV2gxVDNGWVVqZERXa2RTV2tFNVJrTk9OMlEwT1dwSVNYUm5kVnBMV1dOTEwyVTJkVmsxVDB4MlZtSklRbU5UWlhrMFlWZE5NMjUxVnpFM04ycEVVME5YVmt0UWFtTnpVa0UwV21oQlNXaFNUemxYWVVKUFVFcFJNaXRQU1haV2VrdDJTMnRCTlhWMWFWVlNXVEJLUjNoWksya3ZRbVEwVm1wRlRHdHFNbVV6V0dWQmQzSlRNMHh6V0VGUFYwbDRjSFpOZUdWdWRWRmtNVzk0T0VKbVdVdHRNaXRZSzBrd2RGbGtNRGxPUjNjclFXSlBUamd4WjI1UmNXTnBVMDFqY1RaUFJIUllUbTV1Y2podmJqaHhNa2x3ZW1oU1FUSnRabkoyTld0cFNERktkbFI2VVZCTVVtdGFiMVJyV1d0aWRFSm1NVTVNT0hveGFVY3JZMVZCY2taamR6Um9kamxqYVUxWFFVcEhhSFJ3WTB0S2JHeFpTMVZhWmpKM1p6TnFPR012ZFUxMlNYZDJVbUpCV1VGQk1FNW1TMmt3Y2s1NGRHbGpiREJPUzJ0bFkxVmlNazh2YlZweVVucFBlV2hWVkU1d2IxY3Jhelo2WTNwbWNUbE1NVTQ1ZDJ4R2JpOWFRa3h3YTFkdFpHb3hTR2s1YTI5Mk1IVlNUbTg1Y0ZGbE5sRklOM3AxV0ZsWmR6aFBUSEZVZDJaWVRHOVhZMWN2UjBkbFIybFFSRlI1WjBwcE1IUXpObEJzTXpjdmRGZHVVelZQTTFZeFpYVnpVbnBwU2xWS1YxTlBka3AzVW5sTGNEUm9XRTQzYWtWNmJFTlJTVXRLZGpCT2NGRnVabXhZY1doUk5FMWhabGMxY0VWNldEQkplVGRuU0N0c2JtNUVOa3h1UkdjM0szVldZV0kwTTB0UFdXVkVLMUl4UkRWMUsya3ZiV2w2UmxKaGQyUnhhMGsxYVZKUU9GZzFWWGhNT1dSNlEwMURPRlI2V25sVFJGWnJVVDA5 HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: unsafe-url\r\ncache-control: max-age=60\r\nexpires: Mon, 22 Dec 2025 09:36:28 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlDOxQTgM6Eret1r7mHuYXBMSs3KvXRZo69R5DUBp1FN2MxXkl2xaQA5iDXgFfL3ExnlCalNBEM%2BeYeXki4ZtX1F%2F80YX%2FR29YQUCVs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11d1e50b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2507)","md5":"0eafbac1caae3e368a1f94f399a91c94","sha1":"2cd97bc19201415680bec7a8a6cfe0002270cbc6","sha256":"f5f1eeb02ab2e002ef1ff62f3b7ac8f1e72c7aaa428ddb3cf90b22232ac56f39","sha512":"95d3e7b80b638145ea17de463d50130ee1e24cc334496d3dbc5b55bb5d28ed7fba46fd1ac5a812fd218833afae03d59b4f87558f7ff3f7873e61219eccd85ae2","ssdeep":"192:IQffvyWr9pxDk8V2HiC4PU+fCGEe9m2XmfDHie8D:Im3xf03+aGN9xXADm","tlshash":"56e10b6b34a4b54c507364353e7ba21e74225607b20ccc197dfd6af19f4935acca27ac","first_seen":"2025-12-22T09:35:52.158181Z","last_seen":"2025-12-22T09:35:52.158181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":110,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cloudnestra.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cloudnestra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\ncf-ray: 9b1ea11dfbf7b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 285356\r\nexpires: Sat, 12 Dec 2026 09:35:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4ULrkFcR6GVE4InwaR9Adu%2FRtxme33ZvpkrHJukzON3THW1dhuBf9jIJON%2F6jY%2Bn6z%2BpSXv%2B9VB8KzSEoPwOCNgaQqNOCB%2Bafna3iqNXdPlNV4ZIm%2Bsz%2Bym3M7fv8JiODFFBK1Ar\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-05-02T15:36:56.280562Z","times_seen":19045,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/sGFnr4dCUm1Ro1bZHR5TXHOolXb.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/sGFnr4dCUm1Ro1bZHR5TXHOolXb.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14730\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f8d7b9-398a\"\r\nlast-modified: Fri, 11 Apr 2025 08:50:01 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 789\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 15:41:44\r\ncdn-edgestorageid: 1079\r\ncdn-requestid: a1cffa991bc92030ad5d6f546a0b8dc4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2deb61e66105a7ff5df862346c7436c9","sha1":"6a9d27868f672391addaa7bd4f44b0dad5798e48","sha256":"6b8e65f0ae99f133b28f4fca3c90b1f58a5d15790b89d25fa52eae876bae1430","sha512":"c8060f3a68e8f5cb07fc1f1c46bd8b6340ab478b365d2f11ec2c6c494caaaf6284d6e7abb2c3f72c4816018887d1cee4e91219de6692310dc7ce8bdfd3096e2c","ssdeep":"384:C2uhQvx7IWkaWzUiPOAauNDUcFy6JswPAfUlgukh7:C2cYIWkaWAi6utetwl8d","tlshash":"1d62d0d5f4b367a045a05ba12cc0b6dfd457c3966b0a8cb38ddec6ec038944b4e498e7","first_seen":"2025-12-03T01:10:13.785593Z","last_seen":"2025-12-22T09:35:52.160064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3296,"timings":{"blocked":1591,"dns":1549,"connect":22,"send":0,"wait":103,"receive":3,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/eKMmC8fZgVywk5Jja8NYAIFjgAb.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/eKMmC8fZgVywk5Jja8NYAIFjgAb.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19158\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67fb3c63-4ad6\"\r\nlast-modified: Sun, 13 Apr 2025 04:24:03 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 628\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2025 14:23:08\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 30cf39a970a48fd2b57325f323f23931\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19158,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"088e71898a73e902f928c96edb066870","sha1":"74dadfba2e52bea241dd587292dcfdd9d5e254fd","sha256":"1d7ec057258bb03313b340ba875fbce54af294b7a1948802e3c37d91479b2cb2","sha512":"e8831f8f86f1cd254fe11465c15b2ebd930465f578fff0a543207d3bd3d86e3a866acdfc0219f41e9d27dcd9611050e5253f14d0432e2252060e01de92ea68ff","ssdeep":"384:f0KEEulHRGoWlhoVf0pLgDWAQ7cKsx5ZrDcj0SL8czYsvCc7theu:fRjulEVhCspLC/KsjZfk0SYi5vCc7Dv","tlshash":"3182d0b4ed888a28e316e1e5aa8d1ae1cde7cd274274a988c4cd74f61378944b9291e4","first_seen":"2025-12-22T09:35:52.161293Z","last_seen":"2025-12-22T09:35:52.161293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1713,"timings":{"blocked":-1,"dns":1547,"connect":24,"send":0,"wait":102,"receive":12,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/zlQgswQ5GEklrbv8MkohQHyomZu.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/zlQgswQ5GEklrbv8MkohQHyomZu.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24374\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 04:22:53 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-293\r\nx-downloadsize: 29045\r\nx-bo-origindownloadtime: 15342\r\nx-bo-compressionratio: 16.08%\r\nx-bo-processingtime: 6\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 04:23:08\r\ncdn-edgestorageid: 874\r\ncdn-requestid: 7f97843430e881975ce53a5f03a2a382\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb1d757f75dd89cb1005e5fe26bb152b","sha1":"7f56b2ceeca483b8249dd636cc004d1e166267f0","sha256":"0c3ee37eafa2e80e0f4a7ec178c5728f84761b51705e46e7448f9007c5e1a954","sha512":"f11176becfc7b8a54bd2846a931220b8af8aabbe309c94bd8f2f688a930d30fe319275fe014777831f2709e1f5a775bd8c2cda4e5d72b62a09b994b1e0b07889","ssdeep":"384:9wEuj+yWGj/ErltRg2LzrM0UgW/JkZIjqYc19FTxnL3rFhAEFTNJYO6o:S1whtS2bYJAYcn4E1oO6o","tlshash":"4ab2f14ab80edd332beabc27014c527693dd6e534b8679bc04855ce544d0e26eb0ebb4","first_seen":"2025-12-22T09:35:52.176808Z","last_seen":"2025-12-22T09:35:52.176808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1686,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/images/01.png","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /images/01.png HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D; _ga_YDXE7F0D9J=GS2.1.s1766396118$o1$g0$t1766396118$j60$l0$h0; _ga=GA1.1.1090939094.1766396118\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 97200\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Oct 2025 09:57:10 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8dgTy0R5q%2BQqmxzZfcKcXyfKeCPoRG6%2FNZsWg%2BfgZQyML7lplaUktXYa6Q0SBoAvvgz4BrZ1wyPGiN3Uwlyt5f2A44JMunIkopu9ck%3D\"}]}\r\ncf-ray: 9b1ea0db891a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 250, 8-bit/color RGB, non-interlaced","md5":"bfcd120faf95db7f4d4a0043722af00c","sha1":"9db2b505c11a6402ed95374c5ce82640d1dccadd","sha256":"54e40e1a95768335bf0bb27c48c4493b0dcf37dba18bd467693a840a68ef6b74","sha512":"53f91534afaf44f5b15f164da84a095c52b897a22fb06f836c6b1315bd2b0eb3c1aa0b4ab730425caff5ba3c7feab33b5963c4700613f90dda0e56e8551cae78","ssdeep":"1536:GZE+v2LQ4EfBgIxjC6snbExP2a1kD2dHDR0cRgKOIUems35FScd/rIRyk:tFsJg+Mn4xPTC4jVhOBNspwcd/rIRyk","tlshash":"7c931204d8403d1207de3950ffe78a5605ef2478b6c50ee2d265d8d97ea1eb63c249e5","first_seen":"2025-12-22T09:35:52.178231Z","last_seen":"2026-01-06T00:12:07.90042Z","times_seen":4,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/css/main.64e00bed.css","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/css/main.64e00bed.css HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: M2gUoBcgh1yPmgfSqqeYgIYhTdzoisTrzAry0hbfuaqvH0rt6+NcGO5RQ2afrX/iCGwePQABB48=\r\nx-amz-request-id: MKB15WXX0BGJPX79\r\nlast-modified: Thu, 11 Dec 2025 16:36:09 GMT\r\netag: \"c758f9e73c79799ad5e034440e5e8151\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: aUD0Ml6gPqaVWQjnjN_kJHJkd4E.niKn\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Tue, 22 Dec 2026 09:35:19 GMT\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-length: 10512\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c758f9e73c79799ad5e034440e5e8151","sha1":"09229af03b9ea88aef590c7980e8420fa1344c4a","sha256":"c08338b04727001500acd771177eba90612f4fe4f25162f389e87f0ad0aa1cd1","sha512":"d5ed918322cf8c820a47589b6462d6f6d9dbd87838b439991be293ddb7b0f17796d6f92431cad524baad663c00cc4d3edc505cfd63ad53f0f65ab0d00251d3a9","ssdeep":"1536:Y3U8GKPb0aLNLi6qjUYyQylaBVvvti6HRmkb11evQOHZqec1KPeFezIc7CD:z8GKPb0aLNLi6qjUYyQylQ6qec1KPeFp","tlshash":"2753b9586588993e7d3f721c7279869ca33870bbd27667ac9023ee3606c6af536c1214","first_seen":"2025-09-18T16:24:36.071782Z","last_seen":"2026-05-02T14:57:43.156742Z","times_seen":45154,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":35,"dns":3,"connect":8,"send":0,"wait":29,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/3kVxhtmvAIjcqj6LP7pAp5aId97.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/3kVxhtmvAIjcqj6LP7pAp5aId97.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20950\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 03:25:22 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-295\r\nx-downloadsize: 22544\r\nx-bo-origindownloadtime: 17070\r\nx-bo-compressionratio: 7.07%\r\nx-bo-processingtime: 8\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 03:25:39\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: 9295476cfb08805c2ff308fed6f6fc61\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20950,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9bfc0f266938fc103d80ec04ae8518a8","sha1":"354f5fae503d0f721fb95744aa9417c5c19a9596","sha256":"9af3a4dbb9bd8ca3d67ff3a7a2c139441a5911842b99fd6d65ece30d78855760","sha512":"8c3264bf6ae01cf338bad718069bceb2f478bfa64a306d4bab7ce09a6788fb5eebe261b71a5b4dd6b4141c50c3e2b89e0a34775765666276f9471dc42a1f2327","ssdeep":"384:wYj3IOfGpa7f2pl0923je2z7f55Ht9Bne02AGF0yMELZqFtTa1b5zl3wZ+TM:wKTGpabmJdtd+fvLZt1Vzl3S","tlshash":"1092e1caa4f45b4573260e0930b4af23116b66bf6979e75238c45be60c76094cf7c8ea","first_seen":"2025-12-22T09:35:52.180175Z","last_seen":"2026-01-10T15:27:47.065454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3305,"timings":{"blocked":1591,"dns":1548,"connect":24,"send":0,"wait":103,"receive":12,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483162\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-02T16:30:56.526162Z","times_seen":782001,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":8,"send":0,"wait":8,"receive":4,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/images/fav.png?v=1.1.2","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:19.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /images/fav.png?v=1.1.2 HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBdmxBRGZZL2ZFakhzdTJ2R1g5MWc9PSIsInZhbHVlIjoiL0plbHpFYUZaMVl0U3FuQms0MmtTTjdjamZTWmtLUEVFVzFLdzNabTRMVXVnZDRMYVNFbCtGOEN2SWtOVGhRcitaZFk0UEV2NE00OXFwWG82WVZZR212Y3dWbkthZFh5K0dLbzRDR3Z2d1VsSDI1OVpGV0Z1ajNsK3FIZlplZTEiLCJtYWMiOiIxMTQ0ZjgyNmQzMGYxMzZlNWJhNzEwYjg4NTIxY2IzMjE4OGI2YjdjNzliMDFhZGQyNzFjZGExYmE2NThmYTU3IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImlWNnN2VE1yL1pUZ1hCMnY1RGVxRXc9PSIsInZhbHVlIjoid280MHlDVHgvZklHUWJOK0VHeUFJWlB6UjBucmtFTTZOZ1d5eDBrY3VFcmtLbjlDYkovVzNnQ3liRE5KOVpMUVNiMjVhVEpUL3A2S0I2bU9pdlkrOEUvZFl5VkNsNnRXSFNrQnJjWjAyaGpBT3RGNml6a3VNT2U4eGlVcG8xaTMiLCJtYWMiOiJjZGRjZmU1MzhmNzg0ZjlmNDZmNTM4YjNkY2M3MWZhNjAxNzc5YTY4Yjk5MTk0NWQ1ZTgzZmMzMTJjZWE4OGNiIiwidGFnIjoiIn0%3D; _ga_YDXE7F0D9J=GS2.1.s1766396118$o1$g0$t1766396118$j60$l0$h0; _ga=GA1.1.1090939094.1766396118\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 380\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Dec 2025 07:45:32 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9pnsqMmUsbm5xLGHx6WIaxU5WqxSCsSaD9r6%2F0P8MBye54uSuUgHlQZ5qx7jeP597AN59pL2DWBRnFCJESXJDJ94plwY4rnf1NOmx8%3D\"}]}\r\ncf-ray: 9b1ea0e40f9d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"95076699b6ffff59cdf1da6c46732cc4","sha1":"263ddf6781ed67669b76f9ccb343df317af7f99c","sha256":"85b85d08c3d589f9bea3e7556eb4c84b1222f873c3e3758d98be51e29d9856f7","sha512":"3a4990a536a07c92ab894b273cb482f9ad35c863af37548a27097cd02c30734835c27a89d66d3e8de33c4bb7c8ffecd9609c775eaceec339a44649d2b81dc09d","ssdeep":"","tlshash":"07e060b08a4e9c3d89940fca41689028d0ae2e318e95a73e4f2ebf70033ab42c4c20d0","first_seen":"2025-10-22T05:41:14.559154Z","last_seen":"2025-12-22T09:35:52.181527Z","times_seen":3,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.66.182.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","date":"2025-12-22T09:35:24.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidbox.casa\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidbox.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://vidbox.casa\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=33a780ab-4ce5-4eb4-a06e-2f8914053846:3:1; expires=Thu, 20 Dec 2035 09:35:24 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"60e47b70bc895d40d8b3a46fc39c7cac","sha1":"68c565f9892b96afdb765bb2e24298608219da25","sha256":"aac229aeab4e32bf9d96b2aa154b1a1c8828bcd4e35b327e3ecf74584d9a54ce","sha512":"fa395921cc6eab0060edf51bd36c74b39c56aedf4794cd68c1b7a32a9c2cea034791d882c49a752770d1fdf617ef4cc419693c3b1c1fc5bc29f474fff5153f69","ssdeep":"","tlshash":"5e9004dd3073570057141c37145133c155d400454dd540107c45d54555d0d0414c1777","first_seen":"2025-12-22T09:35:52.182724Z","last_seen":"2025-12-22T09:35:52.182724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":115,"dns":3,"connect":21,"send":0,"wait":22,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ax.anaceschalina.help/r694910e0b1302/131608","fqdn":"ax.anaceschalina.help","domain":"anaceschalina.help","tld":"help"},"ip":{"addr":"172.241.53.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ax.anaceschalina.help","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 04:30:19 GMT","end":"Sun, 22 Mar 2026 04:30:18 GMT"},"fingerprint":{"sha1":"C5:C9:02:B1:F6:3C:FD:72:97:09:30:80:88:FB:9E:B2:D1:30:70:E7","sha256":"9C:91:60:F4:D9:7A:4B:CC:17:E2:57:D8:CE:C9:E5:5C:37:1A:E5:5A:03:71:41:65:B6:97:B8:B5:3E:D7:46:3B"}}},"request":{"raw":"GET /r694910e0b1302/131608 HTTP/1.1\r\nHost: ax.anaceschalina.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://vidsrc-embed.ru\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Tue, 23-Dec-2025 09:35:28 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOQztDTVMzPRMzS00DM0NRJkTBdk8vMXZErOE2Tzyy8qT6wUZCwSZDIwFmQqyhPk9i%2FOyVdwzi%2FNKwGKJwuygPiCjJmCfE45mRUKwfk5pSWZ%2BXnFgkxAzOmcmJSTqu8S7CPIWMDGKMhUkg8ii1NEGAQZy9gkBJlyEnkcfD%2B%2F2py%2B4CeQk8%2FjoFq%2FMTrcbrUgU0GxIIuBoakhAMrLKkg%3D; expires=Tue, 23-Dec-2025 09:35:28 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-02T15:49:29.838169Z","times_seen":15944,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":118,"dns":67,"connect":18,"send":0,"wait":23,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/opbjc8ZzuuRkD7gfdFwa9q9AVD8.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/opbjc8ZzuuRkD7gfdFwa9q9AVD8.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17626\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 01:41:50 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-289\r\nx-downloadsize: 29325\r\nx-bo-origindownloadtime: 1220\r\nx-bo-compressionratio: 39.89%\r\nx-bo-processingtime: 5\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 01:41:52\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: a9611d8fee54d88d4d4180c30bf3c05a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"32369489211a93752fd06fd78c3d80cb","sha1":"99974eb4a8b6afe0eeca5c74de0f0099096a96bf","sha256":"c646d66e4cc97978732d8a51d01c6c6c421434c4741add51f991bd2bdd75abfd","sha512":"32b752b5e15dfd2275a7e36107f6f0cdf3e93ef9d661d71654a79e68be618a306f80837df559c2741b1454df7dc00e3ed4936d047fcc6fa70c388f7f11046613","ssdeep":"384:/9J/MR2Wh6ZlazJXN7uwiigwN/BYzYQdBNmTnUSh7wcJnE2B:vePh6ZoFAwiibNWrdvmTUK7wcmC","tlshash":"c982d0740634b552fe454a2880773b9c807753bd470af7a5b5f0a4dc326b40f978ba93","first_seen":"2025-12-22T09:35:52.184923Z","last_seen":"2026-01-10T15:27:47.06015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":-1,"dns":1546,"connect":24,"send":0,"wait":103,"receive":5,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/9MoZAH9RI6X9npBtklPhceC0ghA.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/9MoZAH9RI6X9npBtklPhceC0ghA.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26582\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"680470a2-67d6\"\r\nlast-modified: Sun, 20 Apr 2025 03:57:22 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 914\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 21:41:07\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: af8f8f499cf41cc0ca72410d76a007c1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"01353d839a327f806cdfc4a6e0ffe99a","sha1":"7c4b528b6a4de8bf7d86b097303e13f2410e3cad","sha256":"955c29bf70e96e6a6d98bbc7ecb8aa20ad42a4090e874b8888fa62e042a3d486","sha512":"5ca0af6c47d12d41318575763f381e415061f2846894a8d41463deb3faca1219fe485f76d48b31d7802edf9582b947373180e26c3ff6cf688323347a40ae3cdc","ssdeep":"768:vNFAkoXZVqgIDMm07rGbm2lPH2cK4aEt8VUs:nvgV/ID8nYlPWcHiUs","tlshash":"fdc2f1fe0ea31aab9856250689202cb0125773478fd9bf32fd7418921342f9d39fc2d4","first_seen":"2025-12-03T01:10:13.82847Z","last_seen":"2025-12-22T09:35:52.186164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1673,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":70,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/4AjA1m47FHTdFYi905f2hofrud4.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/4AjA1m47FHTdFYi905f2hofrud4.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19834\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"6815c8cd-4d7a\"\r\nlast-modified: Sat, 03 May 2025 07:42:05 GMT\r\ncdn-storageserver: NY-833\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 830\r\nperma-cache: HIT\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2025 09:01:05\r\ncdn-edgestorageid: 752\r\ncdn-requestid: 0a42ea81bb283ceb8877602569e0793a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc13322039b75660250a01ae1ce4486d","sha1":"4c2698d88dd1dc7f79cbcaa91d5536e0a7863e0f","sha256":"845258a4be85464982875034212b9c6175d70d9881d6b1b9fd32ba54bfc6be51","sha512":"3467d4690bb51030149fa5777b9965d715bcebbd714551da5a1a5c31396c5d065ae01c6277c225c59c4d148a88bbbafd632a17f5c010183fd698463ee84e0dd7","ssdeep":"384:vWkZkbmebkNnC91sT+o56vcnEIwW0sfsCuQe+KtOUOq5EGBYPG80m9BG:vrqbmCKna1dUEIw9E/uQvKIKXK0AG","tlshash":"f792d1c704b4e88dc25873b9a151266aeb35fcdfc1966bab09e51cc440f9e1779bc01e","first_seen":"2025-12-22T09:35:52.187873Z","last_seen":"2025-12-22T09:35:52.187873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1666,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":70,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.908Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","date":"2025-12-22T09:35:24.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidbox.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 22 Dec 2025 09:35:24 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9ff0ab9dc1b0b8fa32dfd6604e52c813\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-02T15:31:41.76509Z","times_seen":15145,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":75,"dns":3,"connect":18,"send":0,"wait":30,"receive":18,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/sources.js?t=1745104089","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /sources.js?t=1745104089 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 19 Apr 2025 23:08:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9B82CnHRYw%2FIWKPPgzWqf8uX7sxFtBaZsQuCjPWlUCv1p%2FU3h5IfJ631rLHEbJE%2FyiC5h4q%2F3tLYwzLmv%2FCRbkUTDdz1XVHy6V6XyQVjg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 04:35:23 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 450004\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11cf83a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"773b117232f06c59a491ce598a10a45f","sha1":"be63581cc3c6bd17ce1125e50962b59217f9b806","sha256":"ac713d716f50ca0d6c8829384c4cc479eb512dfb189b605192d06085940bb72a","sha512":"6c606233f5143a2370e1ae3aaeecd8be59fff637f85a1cea39d7ae96d4d4500a957ad452cd674fd5420ee7f552d889717a80a8290f4214c5d594b1bea952f3a1","ssdeep":"","tlshash":"9b419b5bf5d502222237745d0e1fd2043e6aa84ff109ae14b87d49d46fcd2ac80faf1a","first_seen":"2025-05-11T17:11:21.002944Z","last_seen":"2026-05-01T09:23:19.746627Z","times_seen":509,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/style_rcp-e600e6.css?t=1744906951","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cloudnestra.com/rcp/ZmM0YTZiMTlmNGRkZmJkMzExYTQyMTE0ZjQ0NGMyODA6ZHpOWFREUnROSEZGYUdOWFdXdzVXaTlaUWpnM2MxWnJWRWx0VkZSUWNWVjBRbVF5TDFsWVltUmtXVWhUVURNeE1qWXhOM0JESzNkdFZUSk1XQzl5TDBwUGExQjZjVGROUVRSdk0wZFpWSGxLWkRSc2NHTXhialJZYzJoWVJtcHFlU3RDVUdSSE4wZzRMemsxTldRMk9UZzVOVFJ3Vm1GeVRVd3dUVWN3YTNWUmVWTTViRTVRU25Kb1JHRXZORmNyVHpoTlIxaHVXRmRpVlc1TlpFbFBWMHBKVkVJMFdFYzNTMmt6VDFaT1kyRkhRWEJQV1RZMWJXOVlhSHB1VkhOVE1XSTBhamhHZEdnd2VubzJXRXBhVWxkNGFtNUpRVWxyZFcxT1RGZFdlRkJRUmtOTVVtUnBRamt5YzNoQ1dHMXFjWG8wTlRSUmNEazBWVTlSWkd4a1oxSmpVRWhoVjBaR1NYazVVRmh6UzNGWVR6azVNVXB4U1cxa2FuaE5OMnhMTkhNeU0yWnNNRmd6TVRsck0zVTFiWFpQVTIxUmR6RXdVeXRNUmpWRFF6ZEJla2w1V201Nk0zRjFSa2xyY0VKdmVreHdjelZ6TlZObFNXeGFiVTVFYlUxdVZVdGhWMWxVY1cweE9FWnZibEpPWTNWcVRYRXphSE5tVW1KRlptZHdjMFZ1T0c5d2FtUmhlbTlMTTB4UlpIUjVjVFJQUW1kbWJqaExjMGhUUkhVdlN6WmpNMWxNWVcxQ2NrbGhNbUkzWXpSalQweGxiVlZQTDFSQk9IZEVMM0V4U0ZOemFYUXpjakZrZFVWaFVscGtlV1JtTlc1VWJIWnpMM2hXYWtnNFVHVjZiVE55WlRZMGQyRkpPVFJwVTI5Q2VUTnJXbmRhTVVaNWJEbG5kVGhMTjJ4cVN5OTJObFpPTTNKTVpFbHpZellyZDFwSFUwWlBRa2RVTVdOa2VESkdURGMzVFZFMFlWbHhlRFpDVTNob2RucFJVbFZzVXpKeWJtZE1UalpTT0dsWVRqVkJVemRsUms1eGFGTjJVV1kwUzJ0bGNGUlRibUpUYm01clpXaEZZbE5TYUVkUmJXUXpjV2hrZFVoV2QyOW5hMHhUU0ZKT1MxTnlaVFZ4UzJ3elZtTkJXaXMxYzNSeE9ESjBVbVpaTVZCcmJGaHFWVkJ0WVV0MmNuTkhVVlppV205UU9VUmtaMUIyU1ZKVlRGcHlkR2MyYjNscFJFczNWbkZuTVV0dlVrTTFLMVY0Vm1sNEswVjFjM3A2U0hReU0yeHFkME5zVW5kbWJVWmtVVXBZVUhOM2FFbDZaa2RrZUV0cVZUWkNXRUp0SzIxa05HUXdWQ3RGUjNKdFRVdFVRVW8xYjIxTlJHVnZaVUZwT1VwTGVpdHRkWGhOVkU5QlFVRnlVV2gxVDNGWVVqZERXa2RTV2tFNVJrTk9OMlEwT1dwSVNYUm5kVnBMV1dOTEwyVTJkVmsxVDB4MlZtSklRbU5UWlhrMFlWZE5NMjUxVnpFM04ycEVVME5YVmt0UWFtTnpVa0UwV21oQlNXaFNUemxYWVVKUFVFcFJNaXRQU1haV2VrdDJTMnRCTlhWMWFWVlNXVEJLUjNoWksya3ZRbVEwVm1wRlRHdHFNbVV6V0dWQmQzSlRNMHh6V0VGUFYwbDRjSFpOZUdWdWRWRmtNVzk0T0VKbVdVdHRNaXRZSzBrd2RGbGtNRGxPUjNjclFXSlBUamd4WjI1UmNXTnBVMDFqY1RaUFJIUllUbTV1Y2podmJqaHhNa2x3ZW1oU1FUSnRabkoyTld0cFNERktkbFI2VVZCTVVtdGFiMVJyV1d0aWRFSm1NVTVNT0hveGFVY3JZMVZCY2taamR6Um9kamxqYVUxWFFVcEhhSFJ3WTB0S2JHeFpTMVZhWmpKM1p6TnFPR012ZFUxMlNYZDJVbUpCV1VGQk1FNW1TMmt3Y2s1NGRHbGpiREJPUzJ0bFkxVmlNazh2YlZweVVucFBlV2hWVkU1d2IxY3Jhelo2WTNwbWNUbE1NVTQ1ZDJ4R2JpOWFRa3h3YTFkdFpHb3hTR2s1YTI5Mk1IVlNUbTg1Y0ZGbE5sRklOM3AxV0ZsWmR6aFBUSEZVZDJaWVRHOVhZMWN2UjBkbFIybFFSRlI1WjBwcE1IUXpObEJzTXpjdmRGZHVVelZQTTFZeFpYVnpVbnBwU2xWS1YxTlBka3AzVW5sTGNEUm9XRTQzYWtWNmJFTlJTVXRLZGpCT2NGRnVabXhZY1doUk5FMWhabGMxY0VWNldEQkplVGRuU0N0c2JtNUVOa3h1UkdjM0szVldZV0kwTTB0UFdXVkVLMUl4UkRWMUsya3ZiV2w2UmxKaGQyUnhhMGsxYVZKUU9GZzFWWGhNT1dSNlEwMURPRlI2V25sVFJGWnJVVDA5","date":"2025-12-22T09:35:28.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /style_rcp-e600e6.css?t=1744906951 HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cloudnestra.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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 05:32:02 GMT\r\nage: 446606\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 17 Dec 2025 05:32:02 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gL%2BO0ObTa7n%2FakgpNVwWPgvKKxrEj0FuePrLcvG2nNfVOXlUyfQh3eHOlmP0e%2FjYPU8QeimUuWPRb6lrnoLz9NtC9LtGmtscd%2FoWbJI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11dfeeab4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7993,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"99ba0e4bf82b9f369bbe0d9eeaff0a80","sha1":"f0accd4daac4f68e478f06a012e11536219f0519","sha256":"8de6833920c235ce99ff135cf90bc2503b229402b239128c386eaa5237a7c452","sha512":"08d7a67f70437216d5b6f85fc36a2b84e18fc0a3d65795e9c11cfe3c06e7180d62298738a18c7f1b468b4c62fb31d6d574423ae4b2581096852681f88321e878","ssdeep":"96:SafrW+5iuYzpsuWy2Oh3paOXpuaGARs3XVLXwqW20vjt8ou:SafaPuYz9PgVNpIrK3","tlshash":"c0f1dc3516642b42b21bd6fd5eeb77247e3ec401fe2a0e1a319a3a7942c619c50f3789","first_seen":"2024-08-11T00:20:22Z","last_seen":"2026-05-01T09:23:19.708272Z","times_seen":544,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/4IMy908JxRDw9xYPuJ0OLFy0cjK.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/4IMy908JxRDw9xYPuJ0OLFy0cjK.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8394\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 12 Oct 2025 12:30:44 GMT\r\nx-bo-server: LA-294\r\nx-downloadsize: 12934\r\nx-bo-origindownloadtime: 140\r\nx-bo-compressionratio: 35.1%\r\nx-bo-processingtime: 4\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.40\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1055\r\ncdn-cachedat: 11/20/2025 16:02:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9fb50c8322af68295f29d8210113ae93\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89e073e841fe676f8eed522a29c9fca6","sha1":"4a39e09a57f5a7f0d4c2f91786a9f642dc7ac6fe","sha256":"144fcc59a379afea6e3ad1f34bf854ea9551f5e322bbf791476f67d6a50150cc","sha512":"dc793817fbe27fbfedd30988a8522f3dcf3cc2a1b4607bedeb1ded978d2ca8b98fde6081d79e199de53e087e7da1e4cf3e64f7470b1fca11f1431044a53466ec","ssdeep":"192:k0T8T+0RlzLfkOV7oV2wOpZL73Ivz3Y7h05d37fzl4BM2GmGVwY:k28pzfkOZoZ238M7h05d37LoGmGKY","tlshash":"7602af3ec45f319ed123fc586926ae42fad9c55f2aa1948f501c3344b82a42bd36f49a","first_seen":"2025-12-22T09:35:52.191095Z","last_seen":"2025-12-22T09:35:52.191095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1704,"timings":{"blocked":1585,"dns":0,"connect":0,"send":0,"wait":105,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"HEAD /watch-tv/silicon-valley-season-1?pl=Server+C HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkNkTDFPNUlmTktERVNITVA0d3AxS0E9PSIsInZhbHVlIjoiU01iZEE3WFZTanJKKzVSMEtvL2trLzhyMnRDWDdjNU1qTUdlOFREOEZ4c1liUFREUm5MSUNqQUpQWC9uOTV0Mll3MjVzWmhTVUVnbUVvSUZNaDdwbHRuOTJDdk9WUTlNK09WWXF0M3Y1ZnRJRGtTR2dTY3hoMjlCQm9CZ20yOFgiLCJtYWMiOiJkMzk3Y2JkNzE1ZmIwYzZhZTFhODExMzlmMjllNjQ0YTQ0OTAyY2Q2MWFhMTk1ZTJhZjRhN2ZlOTE0NTdlZjlkIiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:18 GMT; Max-Age=7200; path=/; secure; samesite=lax\nattackertv_session=eyJpdiI6IkZOR1NUMFVjUS9kYkhHY1YwNGNLTXc9PSIsInZhbHVlIjoiaWxDTGtjaXp6RnFGanFSRDhZRTFqS1ZpN1JkY3dWaXFtME5UWGxVSTR4Ulk0R3NEdHkrSUg0VTBEblBBTWdTYW9oNDFOY3hJT2dEc21lSHEydlQzL2JHWk00ZVJROU41QmRGeDBrSkxoK0dXSi9YUklBc0JldlRyemJmRVdObnAiLCJtYWMiOiI0OGFkNzNmODUxMTkwZTYwM2ZkNzFjY2ZiNDU0Yzg1MTk1NmExZTMwOGI0OWI4Y2Q3Yzc2YmRkNjhkMTQxM2NkIiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 11:35:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wklBTvYT9IL%2B52JXFLi1Jd1rkr6Ma6NAmf19hXY8Zm%2BwmWRece3JsAMEB%2FyQXL%2BQnx2mL7si8oFMwhItVMOramNWhmO9EDtziCZiqGY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea0d8bf460b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmeasuring.net/","fqdn":"sysmeasuring.net","domain":"sysmeasuring.net","tld":"net"},"ip":{"addr":"52.223.13.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmeasuring.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 21 Nov 2025 09:20:06 GMT","end":"Sun, 07 Jun 2026 09:20:06 GMT"},"fingerprint":{"sha1":"F5:98:F9:0B:48:E6:5F:7B:B5:F5:86:DA:71:7D:92:B4:C3:4E:AA:2B","sha256":"E3:8C:9C:B7:53:A4:38:E5:37:DC:3F:B4:3F:B3:E8:5E:D1:71:14:56:93:62:93:A2:EF:5E:5B:09:93:30:FC:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sysmeasuring.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nDate: Mon, 22 Dec 2025 09:35:19 GMT\r\nContent-Length: 152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":152,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"f84105482e049977038a0a7a8402598c","sha1":"287e77cf96706165b01891caca2fb5e6a2f50d06","sha256":"cb12c59432fb338804415e339ae6ec24e7bfb6a7fc897449e46dd8f06cf515be","sha512":"9d891fd10551bde3a1ae75310274d2cda79f6a74c31500edd314c3dd2e4d235317609ac61d5d116efaf220905454c9357c2fb63c252148686055eb7492c53989","ssdeep":"","tlshash":"11c08cec7d90984118e170254eb2ba0d541e22dfb8018a4028c008356c2431f0e06781","first_seen":"2025-12-22T09:35:52.192211Z","last_seen":"2025-12-22T09:35:52.192211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1316,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":102,"receive":0,"ssl":1211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483162\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-02T16:30:56.526162Z","times_seen":782001,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":9,"receive":9,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.6c04774d.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/js/main.6c04774d.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: cH0X29bugdhZVvzXoK/XsKHEC/Smc9d+OqEF1lEKlY4tDJkcMIB3j5K2408JGAfGSPXNy+Rxc3UHNWvjG0e3/A==\r\nx-amz-request-id: 6NXNDMRK243RWSW9\r\nlast-modified: Fri, 19 Dec 2025 00:40:39 GMT\r\netag: \"52e110c1bb3f39aaccb66bdf563f8fbf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: gu2ba6xf_UROKFNgUHfAeHEqEw75ZmZx\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Tue, 22 Dec 2026 09:35:19 GMT\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-length: 225646\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":851423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"52e110c1bb3f39aaccb66bdf563f8fbf","sha1":"70988d78bdbf1922860f661d4e654ddc4a3ceda6","sha256":"aae1a309f65da026e3bbc5b0041f46737affb097a08f0185681b84481a3c1388","sha512":"1b645b9cd17d74f39e766b8de5cd0f95e2da61c05d25bfdc9e31160f4fd5fbd7e214ddf04fe20e878e3025767d7f8770ef4b92249434c42e1ef4376a30fe1a06","ssdeep":"12288:Y5tjdXeU6H3VUNJA7IXN2ETwzG0cQYnTsQYnTPDUk4f0WTI4WugqciqXD3I0cJz9:i/A7IXNlTwzG0cQYnTsQYnTY0cZ9","tlshash":"5a053bce76e1b0b407e291eac43f590fb3796e15d00cc561ebb9c9daa46984a8137f1c","first_seen":"2025-12-19T00:44:16.929501Z","last_seen":"2026-01-13T21:54:49.412884Z","times_seen":5898,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":30,"dns":4,"connect":9,"send":0,"wait":13,"receive":29,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/jquery-3.7.1.min.js","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 09 Aug 2025 10:09:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zf0viwHPYn60EFq4ryUw5w4VKxxMAfbuoryMXH5IvOrW%2F9NzfpcOrUjvgMj%2FsHnKOx3Sy5IgNWCo%2FruH6zVukBJCUPUrzsHFbAgrnVF6YQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Mon, 19 Jan 2026 04:25:19 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 191408\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11ce8275ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-02T15:30:00.289291Z","times_seen":148468,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/base64.js?t=","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cloudnestra.com/rcp/ZmM0YTZiMTlmNGRkZmJkMzExYTQyMTE0ZjQ0NGMyODA6ZHpOWFREUnROSEZGYUdOWFdXdzVXaTlaUWpnM2MxWnJWRWx0VkZSUWNWVjBRbVF5TDFsWVltUmtXVWhUVURNeE1qWXhOM0JESzNkdFZUSk1XQzl5TDBwUGExQjZjVGROUVRSdk0wZFpWSGxLWkRSc2NHTXhialJZYzJoWVJtcHFlU3RDVUdSSE4wZzRMemsxTldRMk9UZzVOVFJ3Vm1GeVRVd3dUVWN3YTNWUmVWTTViRTVRU25Kb1JHRXZORmNyVHpoTlIxaHVXRmRpVlc1TlpFbFBWMHBKVkVJMFdFYzNTMmt6VDFaT1kyRkhRWEJQV1RZMWJXOVlhSHB1VkhOVE1XSTBhamhHZEdnd2VubzJXRXBhVWxkNGFtNUpRVWxyZFcxT1RGZFdlRkJRUmtOTVVtUnBRamt5YzNoQ1dHMXFjWG8wTlRSUmNEazBWVTlSWkd4a1oxSmpVRWhoVjBaR1NYazVVRmh6UzNGWVR6azVNVXB4U1cxa2FuaE5OMnhMTkhNeU0yWnNNRmd6TVRsck0zVTFiWFpQVTIxUmR6RXdVeXRNUmpWRFF6ZEJla2w1V201Nk0zRjFSa2xyY0VKdmVreHdjelZ6TlZObFNXeGFiVTVFYlUxdVZVdGhWMWxVY1cweE9FWnZibEpPWTNWcVRYRXphSE5tVW1KRlptZHdjMFZ1T0c5d2FtUmhlbTlMTTB4UlpIUjVjVFJQUW1kbWJqaExjMGhUUkhVdlN6WmpNMWxNWVcxQ2NrbGhNbUkzWXpSalQweGxiVlZQTDFSQk9IZEVMM0V4U0ZOemFYUXpjakZrZFVWaFVscGtlV1JtTlc1VWJIWnpMM2hXYWtnNFVHVjZiVE55WlRZMGQyRkpPVFJwVTI5Q2VUTnJXbmRhTVVaNWJEbG5kVGhMTjJ4cVN5OTJObFpPTTNKTVpFbHpZellyZDFwSFUwWlBRa2RVTVdOa2VESkdURGMzVFZFMFlWbHhlRFpDVTNob2RucFJVbFZzVXpKeWJtZE1UalpTT0dsWVRqVkJVemRsUms1eGFGTjJVV1kwUzJ0bGNGUlRibUpUYm01clpXaEZZbE5TYUVkUmJXUXpjV2hrZFVoV2QyOW5hMHhUU0ZKT1MxTnlaVFZ4UzJ3elZtTkJXaXMxYzNSeE9ESjBVbVpaTVZCcmJGaHFWVkJ0WVV0MmNuTkhVVlppV205UU9VUmtaMUIyU1ZKVlRGcHlkR2MyYjNscFJFczNWbkZuTVV0dlVrTTFLMVY0Vm1sNEswVjFjM3A2U0hReU0yeHFkME5zVW5kbWJVWmtVVXBZVUhOM2FFbDZaa2RrZUV0cVZUWkNXRUp0SzIxa05HUXdWQ3RGUjNKdFRVdFVRVW8xYjIxTlJHVnZaVUZwT1VwTGVpdHRkWGhOVkU5QlFVRnlVV2gxVDNGWVVqZERXa2RTV2tFNVJrTk9OMlEwT1dwSVNYUm5kVnBMV1dOTEwyVTJkVmsxVDB4MlZtSklRbU5UWlhrMFlWZE5NMjUxVnpFM04ycEVVME5YVmt0UWFtTnpVa0UwV21oQlNXaFNUemxYWVVKUFVFcFJNaXRQU1haV2VrdDJTMnRCTlhWMWFWVlNXVEJLUjNoWksya3ZRbVEwVm1wRlRHdHFNbVV6V0dWQmQzSlRNMHh6V0VGUFYwbDRjSFpOZUdWdWRWRmtNVzk0T0VKbVdVdHRNaXRZSzBrd2RGbGtNRGxPUjNjclFXSlBUamd4WjI1UmNXTnBVMDFqY1RaUFJIUllUbTV1Y2podmJqaHhNa2x3ZW1oU1FUSnRabkoyTld0cFNERktkbFI2VVZCTVVtdGFiMVJyV1d0aWRFSm1NVTVNT0hveGFVY3JZMVZCY2taamR6Um9kamxqYVUxWFFVcEhhSFJ3WTB0S2JHeFpTMVZhWmpKM1p6TnFPR012ZFUxMlNYZDJVbUpCV1VGQk1FNW1TMmt3Y2s1NGRHbGpiREJPUzJ0bFkxVmlNazh2YlZweVVucFBlV2hWVkU1d2IxY3Jhelo2WTNwbWNUbE1NVTQ1ZDJ4R2JpOWFRa3h3YTFkdFpHb3hTR2s1YTI5Mk1IVlNUbTg1Y0ZGbE5sRklOM3AxV0ZsWmR6aFBUSEZVZDJaWVRHOVhZMWN2UjBkbFIybFFSRlI1WjBwcE1IUXpObEJzTXpjdmRGZHVVelZQTTFZeFpYVnpVbnBwU2xWS1YxTlBka3AzVW5sTGNEUm9XRTQzYWtWNmJFTlJTVXRLZGpCT2NGRnVabXhZY1doUk5FMWhabGMxY0VWNldEQkplVGRuU0N0c2JtNUVOa3h1UkdjM0szVldZV0kwTTB0UFdXVkVLMUl4UkRWMUsya3ZiV2w2UmxKaGQyUnhhMGsxYVZKUU9GZzFWWGhNT1dSNlEwMURPRlI2V25sVFJGWnJVVDA5","date":"2025-12-22T09:35:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /base64.js?t= HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cloudnestra.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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TJQCrm5ixk97JyGBp6O7g%2B3PD6oNFvJjSn%2BZ6nNOztKxmfgRrTQWc1usPvIzj4UvO3hJS3Uz%2Bl57r%2BQmgnQHQI1bZwvLvJiiz4WCys%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11dfeedb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7bf585a3366c5dbbc65a5169a7be98da","sha1":"2d31cae2bb36e14268656a9cbe284d98b818d773","sha256":"631fafb429c84b9aa0a78ea5b570026d894867bfc70b683b0ee2e0cd5a271911","sha512":"b8e98efe67818333de0be907be98618e1e373284d11ebc0e5c25453a740e4c3475cf20b868c8ef956f0ff331738d512225425c12427c12362c3bea62d3143eaf","ssdeep":"","tlshash":"14d0ebee6083738b082218a038c226c7268813f6643e45a82c85d0c382085bdccca1c9","first_seen":"2024-02-28T20:04:40Z","last_seen":"2026-05-01T09:23:19.708743Z","times_seen":588,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Dec 2025 09:35:18 GMT\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7f90d4beffaed14513de83d19251839c","sha1":"4bd1df37d99cfc70e75b6ad0e99c85292dac4744","sha256":"9a1c60310270c15b41063e11841c4efed4dc17c2b43bc3f3530a117382d25a6f","sha512":"80aae6fbbd65b978d49ef733e09d87bfb77e94266c25f4f05f98a133b25e4c269b50651b2ec9e9efa4b57d59b9b03b584dcb9b50b8020c97513e433bbc8940a1","ssdeep":"384:3KfnK+KhKdKySK/qY4oKmKGK3KfaKDKwKkKyfK/qY45KLKrKcKfFKYK7K/KyEK/y:38XguBSivFRa1KRzBfiiMgFK1GIBEiN0","tlshash":"faa20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T00:20:37.671029Z","last_seen":"2026-02-19T19:28:10.308926Z","times_seen":3942,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":20,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:18.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://attackertv.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 483162\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-02T16:30:56.526162Z","times_seen":782001,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":16,"receive":4,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/3.0.5/js.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/js-cookie/3.0.5/js.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 740\r\ncf-ray: 9b1ea130ab85b517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659a4380-2e4\"\r\nlast-modified: Sun, 07 Jan 2024 07:24:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 228152\r\nexpires: Sat, 12 Dec 2026 09:35:31 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BBTMfBK9CV7SHjaKd10k7Y2IOrsT%2B9eSd5ICAFpm3P5eKnV%2Flwgz4tuPXSc98VzlgKiGm11W8Hm1oIryWSl1FSL2fR8NsuVaNYijx5wpX6vfU9UYqSuk8YI6LoYLa826uovNzIz1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1700)","md5":"ae11f74bdaae51ba13385aa097723268","sha1":"d6cd1e79cee878f761715ad811d29ea06637416e","sha256":"582cc085dd8fea044917d1efde838e77e845262fd025bbfe0339f808607c81f6","sha512":"9e5a7dfe5f7afc4a63601c7b10fee91804955cd7bcd211a160052b8de5e7bbf7f21793f2d3f4576afe0104db3b9f91f1d5616138439648056319e0b7a0ac4355","ssdeep":"","tlshash":"9331b8d93094a8ca07171450463f1107f2f91f67eecdd9906254e8f50ab077a01eaf7b","first_seen":"2023-06-26T06:34:31Z","last_seen":"2026-05-02T15:04:36.073043Z","times_seen":8915,"resource_available":true,"data":null}},"time_used":6327,"timings":{"blocked":3153,"dns":0,"connect":1,"send":0,"wait":15,"receive":0,"ssl":3156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w780/4pfXAnWxOfEJsUgDPW0zqzs5UWv.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:28.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w780/4pfXAnWxOfEJsUgDPW0zqzs5UWv.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cloudnestra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77334\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 06 Sep 2025 14:14:08 GMT\r\nx-bo-server: LA-291\r\nx-downloadsize: 103087\r\nx-bo-origindownloadtime: 181\r\nx-bo-compressionratio: 24.98%\r\nx-bo-processingtime: 23\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 723\r\ncdn-cachedat: 12/21/2025 20:19:46\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: cde4f7418cbbcfc7ca1b273bd24d34ea\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":77334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 780x439, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"374f2be16b98930198e60f400fb1677e","sha1":"ccbf4311cb0e446510a3ffd4b3eaf5e5476fe0d1","sha256":"93b872f4cfd9fe4ad9ef25baf5281fa5a439a9b0b719f17416d2d3de39de04d6","sha512":"7c7e2422f007b1483558e6798230421210c3c4dc6115bb2a7d7a1e9728ac1ec0e7c4d5b87e5367c745092b34c64190d78a804e284de11c5b28882999cb91fd8b","ssdeep":"1536:XV+RcOgMOH8vLKMNHG1gFZ6MDaeFtkLwyKd8sPDeUZdkPscKydcVKGVDu7Tl:lPcDKMYi4feQAhDeUZGhTTl","tlshash":"d17302eb6aa90f11524a1c18afd100226af155f1fd1329149854ae36faac22df1d3ffd","first_seen":"2025-12-22T09:35:52.196081Z","last_seen":"2025-12-22T09:35:52.196081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/lThumuZPAop9ztKxOiJ4FmDxjsQ.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/lThumuZPAop9ztKxOiJ4FmDxjsQ.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15878\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 04:39:11 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-291\r\nx-downloadsize: 21847\r\nx-bo-origindownloadtime: 14837\r\nx-bo-compressionratio: 27.32%\r\nx-bo-processingtime: 5\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 04:39:26\r\ncdn-edgestorageid: 864\r\ncdn-requestid: 0851c2d1ddae614cf51876ab4d36548e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b3e1de7b42d6a06eed9b797464ef777","sha1":"d725b7ce80d27d89b25f29a755c087b73114d4fd","sha256":"15cd309090818da3565c2f722fd1c6569db55d47794a82ec12e6087c430e1900","sha512":"4caf21f6026856cb4c02467fee434f248f0991f2d6cb96b60cd6823f75969bf3f15992977be53b73583fb3d3af8c5e6eda229acc5086123558cd05ed4a882219","ssdeep":"384:G6no2HbRVo4gHzSHfvACqujYunFFXDRzfo2fkcCK:Gco27RVolTeoCxjLnnX9fo28nK","tlshash":"7162d076674f98e1e80e76c9ffbb90658a3b7a3d4239fa8520518f08581d97013cc25d","first_seen":"2025-12-22T09:35:52.197074Z","last_seen":"2025-12-22T09:35:52.197074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1642,"timings":{"blocked":1587,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","fqdn":"sysmeasuring.net","domain":"sysmeasuring.net","tld":"net"},"ip":{"addr":"52.223.13.41","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:19.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sysmeasuring.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 21 Nov 2025 09:20:06 GMT","end":"Sun, 07 Jun 2026 09:20:06 GMT"},"fingerprint":{"sha1":"F5:98:F9:0B:48:E6:5F:7B:B5:F5:86:DA:71:7D:92:B4:C3:4E:AA:2B","sha256":"E3:8C:9C:B7:53:A4:38:E5:37:DC:3F:B4:3F:B3:E8:5E:D1:71:14:56:93:62:93:A2:EF:5E:5B:09:93:30:FC:EE"}}},"request":{"raw":"GET /lander?oref=https%3A%2F%2Fattackertv.cyou%2F HTTP/1.1\r\nHost: sysmeasuring.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sysmeasuring.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=86400\r\nConnection: keep-alive\r\nContent-Type: text/html\r\nDate: Mon, 22 Dec 2025 09:35:19 GMT\r\nServer: openresty\r\nSet-Cookie: expiry_partner=tucows.EXPIRED.CF3F10F5-9663-4600-977B-E13B5DC69A28; Path=/; Max-Age=86400\ncaf_ipaddr=195.64.118.152; Path=/; Max-Age=86400\ncountry=NO; Path=/; Max-Age=86400\ncity=Oslo; Path=/; Max-Age=86400\nlander_type=parking-tucows-expired; Path=/; Max-Age=86400\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_Bs0gqR/5uGBapx5hptmJrBvLYJc/qS6FDyIKO2Fo+/PIMB9U/5gXalvh1IlZYNnRVjSv8+Nd4sKuVyci5+ajWg\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 553\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":553,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (552)","md5":"3521f69137e956fc643ec708e0fbfbcc","sha1":"77560a10c05bdeb1a7825d61116c03208d725cb5","sha256":"4d28b5ae437dab75f6efb88d44821d2eb6013063266c15f353f61fbb484a1f04","sha512":"b2326c26115d18e528356a7717ff509921fe74e4adfdbfc7f2e7ca50f0f38b8d334ca51a5cbe6aa4d2ee52f8d0d854341c1ad5702c935c5aa88417621228d3b2","ssdeep":"","tlshash":"0cf08bd2dc91c51d0b60d6ea7922f72c840ae529ed91e841a495007658d87e24d1a858","first_seen":"2025-12-19T01:08:39.377515Z","last_seen":"2026-01-13T21:54:49.412485Z","times_seen":865,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidsrc-embed.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\ncf-ray: 9b1ea11d0b22b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 285356\r\nexpires: Sat, 12 Dec 2026 09:35:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r%2FuUhmZ2SMzcDgaWV7d3%2BYmu5Vx%2FRMMSQ%2BpzPelybotyPmo%2BVD%2FaMB99ybUBr18lP%2Fz7Gr%2BgIAdc1pKlxXmBXnsvJFBWgNzR50Me5d3Yo7ac8BBs8%2BUZwZIZ140ObCHTu8yGHGSb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-05-02T15:36:56.280562Z","times_seen":19045,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":0,"connect":2,"send":0,"wait":12,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.12.0-2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cloudnestra.com/rcp/ZmM0YTZiMTlmNGRkZmJkMzExYTQyMTE0ZjQ0NGMyODA6ZHpOWFREUnROSEZGYUdOWFdXdzVXaTlaUWpnM2MxWnJWRWx0VkZSUWNWVjBRbVF5TDFsWVltUmtXVWhUVURNeE1qWXhOM0JESzNkdFZUSk1XQzl5TDBwUGExQjZjVGROUVRSdk0wZFpWSGxLWkRSc2NHTXhialJZYzJoWVJtcHFlU3RDVUdSSE4wZzRMemsxTldRMk9UZzVOVFJ3Vm1GeVRVd3dUVWN3YTNWUmVWTTViRTVRU25Kb1JHRXZORmNyVHpoTlIxaHVXRmRpVlc1TlpFbFBWMHBKVkVJMFdFYzNTMmt6VDFaT1kyRkhRWEJQV1RZMWJXOVlhSHB1VkhOVE1XSTBhamhHZEdnd2VubzJXRXBhVWxkNGFtNUpRVWxyZFcxT1RGZFdlRkJRUmtOTVVtUnBRamt5YzNoQ1dHMXFjWG8wTlRSUmNEazBWVTlSWkd4a1oxSmpVRWhoVjBaR1NYazVVRmh6UzNGWVR6azVNVXB4U1cxa2FuaE5OMnhMTkhNeU0yWnNNRmd6TVRsck0zVTFiWFpQVTIxUmR6RXdVeXRNUmpWRFF6ZEJla2w1V201Nk0zRjFSa2xyY0VKdmVreHdjelZ6TlZObFNXeGFiVTVFYlUxdVZVdGhWMWxVY1cweE9FWnZibEpPWTNWcVRYRXphSE5tVW1KRlptZHdjMFZ1T0c5d2FtUmhlbTlMTTB4UlpIUjVjVFJQUW1kbWJqaExjMGhUUkhVdlN6WmpNMWxNWVcxQ2NrbGhNbUkzWXpSalQweGxiVlZQTDFSQk9IZEVMM0V4U0ZOemFYUXpjakZrZFVWaFVscGtlV1JtTlc1VWJIWnpMM2hXYWtnNFVHVjZiVE55WlRZMGQyRkpPVFJwVTI5Q2VUTnJXbmRhTVVaNWJEbG5kVGhMTjJ4cVN5OTJObFpPTTNKTVpFbHpZellyZDFwSFUwWlBRa2RVTVdOa2VESkdURGMzVFZFMFlWbHhlRFpDVTNob2RucFJVbFZzVXpKeWJtZE1UalpTT0dsWVRqVkJVemRsUms1eGFGTjJVV1kwUzJ0bGNGUlRibUpUYm01clpXaEZZbE5TYUVkUmJXUXpjV2hrZFVoV2QyOW5hMHhUU0ZKT1MxTnlaVFZ4UzJ3elZtTkJXaXMxYzNSeE9ESjBVbVpaTVZCcmJGaHFWVkJ0WVV0MmNuTkhVVlppV205UU9VUmtaMUIyU1ZKVlRGcHlkR2MyYjNscFJFczNWbkZuTVV0dlVrTTFLMVY0Vm1sNEswVjFjM3A2U0hReU0yeHFkME5zVW5kbWJVWmtVVXBZVUhOM2FFbDZaa2RrZUV0cVZUWkNXRUp0SzIxa05HUXdWQ3RGUjNKdFRVdFVRVW8xYjIxTlJHVnZaVUZwT1VwTGVpdHRkWGhOVkU5QlFVRnlVV2gxVDNGWVVqZERXa2RTV2tFNVJrTk9OMlEwT1dwSVNYUm5kVnBMV1dOTEwyVTJkVmsxVDB4MlZtSklRbU5UWlhrMFlWZE5NMjUxVnpFM04ycEVVME5YVmt0UWFtTnpVa0UwV21oQlNXaFNUemxYWVVKUFVFcFJNaXRQU1haV2VrdDJTMnRCTlhWMWFWVlNXVEJLUjNoWksya3ZRbVEwVm1wRlRHdHFNbVV6V0dWQmQzSlRNMHh6V0VGUFYwbDRjSFpOZUdWdWRWRmtNVzk0T0VKbVdVdHRNaXRZSzBrd2RGbGtNRGxPUjNjclFXSlBUamd4WjI1UmNXTnBVMDFqY1RaUFJIUllUbTV1Y2podmJqaHhNa2x3ZW1oU1FUSnRabkoyTld0cFNERktkbFI2VVZCTVVtdGFiMVJyV1d0aWRFSm1NVTVNT0hveGFVY3JZMVZCY2taamR6Um9kamxqYVUxWFFVcEhhSFJ3WTB0S2JHeFpTMVZhWmpKM1p6TnFPR012ZFUxMlNYZDJVbUpCV1VGQk1FNW1TMmt3Y2s1NGRHbGpiREJPUzJ0bFkxVmlNazh2YlZweVVucFBlV2hWVkU1d2IxY3Jhelo2WTNwbWNUbE1NVTQ1ZDJ4R2JpOWFRa3h3YTFkdFpHb3hTR2s1YTI5Mk1IVlNUbTg1Y0ZGbE5sRklOM3AxV0ZsWmR6aFBUSEZVZDJaWVRHOVhZMWN2UjBkbFIybFFSRlI1WjBwcE1IUXpObEJzTXpjdmRGZHVVelZQTTFZeFpYVnpVbnBwU2xWS1YxTlBka3AzVW5sTGNEUm9XRTQzYWtWNmJFTlJTVXRLZGpCT2NGRnVabXhZY1doUk5FMWhabGMxY0VWNldEQkplVGRuU0N0c2JtNUVOa3h1UkdjM0szVldZV0kwTTB0UFdXVkVLMUl4UkRWMUsya3ZiV2w2UmxKaGQyUnhhMGsxYVZKUU9GZzFWWGhNT1dSNlEwMURPRlI2V25sVFJGWnJVVDA5","date":"2025-12-22T09:35:28.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.12.0-2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cloudnestra.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 76176\r\ncf-ray: 9b1ea11e2c1db4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5ed131a1-12990\"\r\nlast-modified: Fri, 29 May 2020 16:00:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 456278\r\nexpires: Sat, 12 Dec 2026 09:35:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RkRFsh0LKZ7Xcx7%2B%2B8S7br3CXA6eLOwqNEfjWKFHaNuq5w7GSyf9Fo40nQ1MBNNPZBEwi7SKVSOd3psSzaQjwaOnjevl%2FqE2EJ14YTRy24m8sZdSdHmOQN3L%2BQ2nVDC16HaYOqnY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76176,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 76176, version 330.-16253","md5":"83bc6996a808bdae8988910ccc2ffcae","sha1":"dbe4ad42b9bdca2503848a4dec50abbb266a0c87","sha256":"b82c045a6cbccfb457d08aff36e60c74b08ddad4daf8596d9e5706830c2fe578","sha512":"7c904fd4bd423ec0425680d8e0ea701351d8e4a9b425cea11d84c08e886da13a0aca7726daffa42d3b3eb45417e2c18aeb3d9e187f62482d350560396553aaa0","ssdeep":"1536:CxTfdR2iwKjozQKkI9XJxdbDKHOQMei1CwVLVWuBg9zxddq8z6ZwL0:CxDNIQKDvpdcY5WuOXOU0","tlshash":"3c730272832e274bac8131f9f68e39a7c791792b602cc5b712f9c44e1db6017d529ed8","first_seen":"2023-04-07T18:20:39Z","last_seen":"2026-05-01T09:23:19.709204Z","times_seen":767,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/uetNOoUIwmeavHYnimc8B9tnDOq.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/uetNOoUIwmeavHYnimc8B9tnDOq.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18988\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\netag: \"67f0dca5-4a2c\"\r\nlast-modified: Sat, 05 Apr 2025 07:32:53 GMT\r\ncdn-storageserver: NY-703\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 753\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/27/2025 20:37:19\r\ncdn-edgestorageid: 1048\r\ncdn-requestid: 17394f2be4c45bc4394c2011298068a3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70112a468964aad771c27c2ec1df8144","sha1":"8882756ac9de04afb6f0ed3d4dd29a7c75196061","sha256":"325c3f02c7eef6a460c93c5a2ed021417aac9054a5e569321230b17e99c76179","sha512":"b04a112720442e4ae02fc3dbf1249075e38f89d508a4ead06dc0abea24278888ee735ee34a21cf0dd399c792761bbc7c17c9febcf57e6ab20eebdc821835e38d","ssdeep":"384:4eYpyQq5L7OP9dNTfMrihrN7Fyp82wGPTO9VAtNjLyzl:4eqXTTNTfMehrN7gTsaNj0","tlshash":"4f82d02c814dfaf801e96daac3fcf511aa8da82bf64960859f5fc7c41fd06015b1c1b1","first_seen":"2025-12-22T09:35:52.199211Z","last_seen":"2026-01-10T15:27:47.086024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1680,"timings":{"blocked":1587,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/base64.js?t=","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cloudnestra.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","date":"2025-12-22T09:35:29.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /base64.js?t= HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cloudnestra.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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 22 Dec 2025 09:35:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFYAECXA9SYgRJMfg3tkNKSHT0BSYjtHqmQ0tt8hEre1vVmwb0pna9Q8tom0qiomwpjk003g8tOZYBD6h1Is%2B2EbvGuFUwuBjuR8hFo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11e5f2fb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7bf585a3366c5dbbc65a5169a7be98da","sha1":"2d31cae2bb36e14268656a9cbe284d98b818d773","sha256":"631fafb429c84b9aa0a78ea5b570026d894867bfc70b683b0ee2e0cd5a271911","sha512":"b8e98efe67818333de0be907be98618e1e373284d11ebc0e5c25453a740e4c3475cf20b868c8ef956f0ff331738d512225425c12427c12362c3bea62d3143eaf","ssdeep":"","tlshash":"14d0ebee6083738b082218a038c226c7268813f6643e45a82c85d0c382085bdccca1c9","first_seen":"2024-02-28T20:04:40Z","last_seen":"2026-05-01T09:23:19.708743Z","times_seen":588,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/yKAgNQhI55Ennhd3SmU1UxvXiQ3.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/yKAgNQhI55Ennhd3SmU1UxvXiQ3.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16594\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 04:22:47 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-290\r\nx-downloadsize: 21809\r\nx-bo-origindownloadtime: 16763\r\nx-bo-compressionratio: 23.91%\r\nx-bo-processingtime: 7\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 04:23:04\r\ncdn-edgestorageid: 755\r\ncdn-requestid: 35861c779de6dd07756503c28d3fc4cd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c489ef4d6ac11ac6e09859b18f767553","sha1":"8faad69514262bbd26b5867c3c249e1cb9c0e111","sha256":"2e96b2bee3ec9c1393684d2d3ed30c43e793fe308eb8c01aded6386259951fc1","sha512":"68be8bb0ab194ef7a6fa6ec3485210aa218822b76110f0c3ebc32349593994e33fdf447002fea45d18ff784cc30410642af163c5589b1b1f3196bb601d78623c","ssdeep":"384:4SqduNt+0zaZVJhqr4K1ZTXISar5IGXNvAg0sPS2syN:P6S+0kZKLXja6KvvP3zN","tlshash":"db72c0eb6a7eafa44c00582134b22f4e685ac9654ef935019cca77e42b9e9a464d30f1","first_seen":"2025-12-03T01:10:13.830353Z","last_seen":"2025-12-22T09:35:52.20031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3316,"timings":{"blocked":1606,"dns":1549,"connect":24,"send":0,"wait":88,"receive":7,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=Nunito","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 01:01:57 GMT","end":"Tue, 17 Mar 2026 01:01:56 GMT"},"fingerprint":{"sha1":"52:BB:9D:7D:7C:D5:3D:D4:B5:52:CD:E0:A8:9B:A1:12:8E:BE:DB:1B","sha256":"1C:37:1D:BE:D4:A6:9D:A5:65:BC:90:6F:9D:6B:F2:40:68:F2:84:A2:00:CE:AC:08:7E:6C:56:FF:50:C2:CD:2E"}}},"request":{"raw":"GET /css?family=Nunito HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 07 Dec 2025 14:29:19 GMT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/07/2025 14:29:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a315b64f3c5cfbd35847efe6ddea7a7a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2242,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f57ac805bd7e28b51931cbe0799a9022","sha1":"dce6ac52b94b6b1a0a0d7f144460cad6dd7f3732","sha256":"b6673a09bde86b5b30e9ad9bc7220a2e4ac756c13d78c5e3f3be798c723ed9b7","sha512":"7c0e9978df0f76ae432147b29d0cde63ecf0f3e59e737c43c5e3e6ecad9d29bb7fcf38bb5c8f8c08edc35344e03f4f710f3e7633298b64a4fc17455d33bcb96b","ssdeep":"","tlshash":"ae41bbb3841d2082278a3c9763d75d165e5fa41230457426ef28cca8cdb7d3697a3fae","first_seen":"2025-02-11T03:16:28.944573Z","last_seen":"2026-05-02T09:37:09.727587Z","times_seen":209,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","date":"2025-12-22T09:35:23.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /embed/tv?tmdb=60573\u0026season=1\u0026episode=1 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidbox.casa/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncache-control: max-age=60\r\nexpires: Mon, 22 Dec 2025 09:36:28 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXHkuP7%2FjKV07Pzxg6NDU2JAnJWJo%2FngXLIbz8sPSOa7EtNbn3aJCt7HPfosisDj%2B4LGB2mDnpbAUf3vtBxVr1zZtOluxhin0MY32RG7Gg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11b3c055ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":13498,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2633)","md5":"e30b2944b04dc07d385c50c8b818045b","sha1":"fb785cf524efa9648d1d148a0b86d9998b9c97c6","sha256":"9b1371947a905584723221fbb4aec5c8919230645632a4d1c7cffa346ea0c472","sha512":"0d6b018bb47e4c9e79a1cc91f83a2a6e2222e42281a3022e0e26d07c3ea233356b9cde690280859023d8495e521a7f16cfa00f3c00a2bca96c17ae51f81e4ae1","ssdeep":"384:W/RI2QcQ0I2QcQgjwPnPVXKXQEubv2aaNj4Ms:W/RscQ0scQAwPnPVXKg92aaNj4Ms","tlshash":"69522944fda5627968b3323c266ba43e3576e14b6009ec963dcd91a84fc878ecc11bd8","first_seen":"2025-12-22T09:35:52.202041Z","last_seen":"2025-12-22T09:35:52.202041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10310,"timings":{"blocked":5038,"dns":5027,"connect":1,"send":0,"wait":234,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/style.css?t=1710289820","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /style.css?t=1710289820 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 13 Mar 2024 00:30:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjTssSYdF7o1lYMiRqPsiiHBbF3moulp%2FdPOpiFxuEBEZy0M9Nmf1MnBajhsgyZ011mYMJ5AsKXbTO3kuzhjhYAOF9Orx9CfdtIieCdyAw%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sun, 18 Jan 2026 06:51:29 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 269039\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11ce8255ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12250,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2a8eac9a3b7e091711ed1deafebcb0dc","sha1":"bd4191ee816f44ab3aa79c5de06e9e23e5cf8678","sha256":"4e0b5dbf6ff338c9708aa179259c4fc7490a630c2e93bc8e8643a44a5751a6e8","sha512":"899997852cf00f42ff2910cbfaead09ae4af1cd12a0ba710f2cd2add32733ca0b052ac645ca72174de5a6ee6bc136420deb26e85f8a01dedf7a19864f903bc93","ssdeep":"192:lkHNafvfggogV3ukAkrg9ScF3z5BJSMFNZFF6NXBFNePVtF611BFNeP2:1ggptAkrofFgMFNF6vFitF65Fl","tlshash":"0b42ff2557a62b02720bd3fc1fdba3547f3ec002ed294d1a32963b794b861dc90b6785","first_seen":"2024-05-05T17:05:03Z","last_seen":"2026-05-01T09:23:19.711335Z","times_seen":625,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudnestra.com/asdf.js","fqdn":"cloudnestra.com","domain":"cloudnestra.com","tld":"com"},"ip":{"addr":"104.21.39.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudnestra.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 02:20:35 GMT","end":"Tue, 10 Mar 2026 03:18:21 GMT"},"fingerprint":{"sha1":"B3:0E:17:E4:AC:D4:E8:D7:3F:54:4B:51:FE:65:08:B1:B9:C4:30:B1","sha256":"DD:D9:99:E6:0B:5B:D9:20:E5:60:A9:CF:9F:7B:2F:3B:91:F5:67:BC:C1:CE:7E:A1:E5:97:51:D5:81:C7:03:08"}}},"request":{"raw":"GET /asdf.js HTTP/1.1\r\nHost: cloudnestra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidsrc-embed.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Jul 2025 14:28:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iRyv%2FS8k5OY42vF5EZG8hQaP1%2FWzT1QqHMxVMKAM96YdYyu9l7pWBau3OvX92fNhIHnCeZIhxB3dcFYnnTVu%2BSxAJ7cepyXKhinL7k%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sun, 18 Jan 2026 02:20:54 GMT\r\nage: 285274\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11d0e4bb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"98115f7dfa4d10335a3c68dd0dc72b61","sha1":"08ec7b310cfe25427ccab2a3326fe07b53f8a756","sha256":"51dc15dff4f8159bc02322a3cf5a8dbb6a424cab203c296f8a16e977bba019c6","sha512":"08d495c985eaf0cc0c0ae11011b3049b3b8133d759e6c8344359e95d197d0f772389b88f20bc795a66ae863708c3704c9485dd3488a45a23c9ca3e19da9d6c32","ssdeep":"","tlshash":"d360000fc00300fc3000003300033030c330cc000c030030c3c0000030c3000000cc0c","first_seen":"2025-07-01T21:21:11.530912Z","last_seen":"2026-05-01T09:23:19.725015Z","times_seen":494,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/build/assets/style-BFjNVayi.css","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /build/assets/style-BFjNVayi.css HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Apr 2024 07:38:07 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysFMUYOGWccpEYzjJcQYO0Uf49mRUtjcya3MjchG5%2F1MNqPL%2B8dy40KqyV%2FDfdUaefhIH9OAoehufq5SiNgCCpHmKGKKxjOL4yrKJp0%3D\"}]}\r\ncf-ray: 9b1ea0d8af340b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54124), with CRLF line terminators","md5":"8251b1d675c6d551857f107d11c31501","sha1":"13d2bfa5f30222b20468fe922b4396feb9896b25","sha256":"a37a4b66025e4af92699fd3dd942ca680b3a51c291c7c183016e49b3b1a90978","sha512":"2e1a01b30fa40185159c2bbeb02f5f61f49e13c72f0dfd07c840080041bb853971f5239df05c44e76c17e8391b9aaa77bcdec3ad6edc0c665108842e784ce902","ssdeep":"1536:U9O6y7twXuFVP3tzr6gYj1Yf0TtSGQKbfl8GmY:Uc6ylGmY","tlshash":"c733b632a9ac105c703bd243fc977ea939299506d2270beff725b939c2cb96d1271709","first_seen":"2024-08-26T13:42:19Z","last_seen":"2026-05-01T09:23:19.718269Z","times_seen":16,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"attackertv.cyou/images/logo.png?v=1.1.2","fqdn":"attackertv.cyou","domain":"attackertv.cyou","tld":"cyou"},"ip":{"addr":"172.67.198.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"attackertv.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 07:45:37 GMT","end":"Sun, 15 Mar 2026 08:43:46 GMT"},"fingerprint":{"sha1":"F5:B0:F4:1B:E1:CD:B3:79:50:57:81:11:63:8D:4D:61:86:FE:33:62","sha256":"A9:A1:B4:F6:19:FF:D5:7F:5C:81:47:24:29:25:0F:C3:C8:1D:31:1C:73:F5:11:AD:4B:33:80:EE:6C:B1:ED:B8"}}},"request":{"raw":"GET /images/logo.png?v=1.1.2 HTTP/1.1\r\nHost: attackertv.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVlejBRU1RPT1dVSmtjYmJjUGVYRmc9PSIsInZhbHVlIjoiTlB6eVpWMm1lZUpObFRuMFIyb0Z1b2VrS3I1OU8rd01wbm8yUlFuczdrMStXMEVkWWtkbloxVnM1L081MFhYY3JiWkhwb05zbWEzcDlEbDdDWU5yMnNHZlY0MEgvQXQwZGR0aU5uNWUxeXB2Zi9yejJmRU02TGRXY2lmQkNDdWUiLCJtYWMiOiI0MTkxNzFlODdmYzc1ODdkNmE0NDZkMTg4ZDE5ZjEzOTkxYWI3OGQyYWRhZDM2MTAxMDk0ZGY4MmM1OTMxZDg0IiwidGFnIjoiIn0%3D; attackertv_session=eyJpdiI6ImNmdk10UytZb09uaGJVWjlidTZFZmc9PSIsInZhbHVlIjoidTd1ZVJOSHJSa25XT3pXMlM1RG0vV0Zla3I0YTBwRU9pZnd6eEN3K25vMlZwNzJ2ZmJxKytEZUlNQUQ0Z0Jrc21YeUE3RjBQMGV1N3hCMUE3VmsyckVFcFhZaHhtRC9TRUc1QnVrUmJlcVhYWjdPNGdwaytXNWdFUzd5NmJKOGoiLCJtYWMiOiJlOGMzNjUwZGE5N2Y2ZDMwNjE5Yzg1OTJmZWZmMGMwZjRkYzI2YjlmNWYwZTVhOWI0YWNkNWM5MTQ0YTJkZGRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 380\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Dec 2025 07:45:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV%2F8nTPuKxzHmTBs7V0aWdSGAmSEWrrGI0Qjm0UscCceaCadyUNm%2BrHRlwf32lD4h5LsyVhKZOTccYOiDGF73Tzw9TrUYS0OgstYDDo%3D\"}]}\r\ncf-ray: 9b1ea0d8af360b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"95076699b6ffff59cdf1da6c46732cc4","sha1":"263ddf6781ed67669b76f9ccb343df317af7f99c","sha256":"85b85d08c3d589f9bea3e7556eb4c84b1222f873c3e3758d98be51e29d9856f7","sha512":"3a4990a536a07c92ab894b273cb482f9ad35c863af37548a27097cd02c30734835c27a89d66d3e8de33c4bb7c8ffecd9609c775eaceec339a44649d2b81dc09d","ssdeep":"","tlshash":"07e060b08a4e9c3d89940fca41689028d0ae2e318e95a73e4f2ebf70033ab42c4c20d0","first_seen":"2025-10-22T05:41:14.559154Z","last_seen":"2025-12-22T09:35:52.181527Z","times_seen":3,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"104.69.222.129","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sysmeasuring.net/lander?oref=https%3A%2F%2Fattackertv.cyou%2F","date":"2025-12-22T09:35:19.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sysmeasuring.net/\r\nOrigin: https://sysmeasuring.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: pdTwpjr4fYU0ys/941Dk3uVVucYWBjNqbZarmxK++hkGTrXYRfChor6HWbjMkCsJKJpP9Zt2R4U=\r\nx-amz-request-id: 5R186H5V2FY9TZSE\r\nlast-modified: Wed, 10 Dec 2025 01:01:08 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 36ZdIG28e6aJYLWqZc2Gxq51VeZRnPQ_\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-length: 0\r\ncache-control: max-age=31536000\r\nexpires: Tue, 22 Dec 2026 09:35:19 GMT\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"falsifyprobable.com/80/c1/ea/80c1eac90d5851958ce12d29fb8b530b.js","fqdn":"falsifyprobable.com","domain":"falsifyprobable.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidbox.casa/player.php?play=https%3A%2F%2Fvidsrc-embed.ru%2Fembed%2Ftv%3Ftmdb%3D60573%26season%3D1%26episode%3D1","date":"2025-12-22T09:35:23.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"falsifyprobable.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 21:06:23 GMT","end":"Thu, 19 Feb 2026 21:06:22 GMT"},"fingerprint":{"sha1":"14:01:A1:88:87:FC:B6:A0:ED:0B:73:59:2C:67:09:F5:54:15:25:55","sha256":"D0:FF:87:C4:5F:F0:BD:6A:68:84:3E:0D:B0:68:B2:DF:DD:F3:2A:3A:72:E3:73:02:F6:77:51:FE:A2:92:19:71"}}},"request":{"raw":"GET /80/c1/ea/80c1eac90d5851958ce12d29fb8b530b.js HTTP/1.1\r\nHost: falsifyprobable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidbox.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 22 Dec 2025 09:35:23 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 45447\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: falsifyprobable.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 78af9556b00cdbfe49b1854fafcfd347\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":121119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb6066e120f15d9ea0eb14254feca8ff","sha1":"0f6e16adfb219079fc604fc70073b8f21d95a26e","sha256":"36e9905c98b676fd0198d00d4f3fca471e8b0202c4fc03b74b01a33c68b809d5","sha512":"4f56f60aad8b877bd724f1f889048e96045fc5d7cea7fc76dfcc043016747eb70c233069f6f3db5ba34dfa4b2ec4cc26779bce7877b47c535f082b72c4ae8635","ssdeep":"1536:rftYwad+XtemOnAWney94sIbUEibawTldZg2Gu7eP594wQvQLsbNF:QRKibawTJD77i34XZ","tlshash":"d9c3d5887fa1f25c03867472263fa41ae12a9e41509cf1b4e106f4ad2dbc36fd4be764","first_seen":"2025-12-22T09:35:52.20513Z","last_seen":"2025-12-22T09:35:52.20513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1028,"timings":{"blocked":357,"dns":47,"connect":102,"send":0,"wait":110,"receive":204,"ssl":207},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"falsifyprobable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/zXr9tjwoL7L3YYKiXjMutwRS20U.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/zXr9tjwoL7L3YYKiXjMutwRS20U.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7878\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 18 Dec 2025 13:50:43 GMT\r\nx-bo-server: LA-291\r\nx-downloadsize: 13326\r\nx-bo-origindownloadtime: 145\r\nx-bo-compressionratio: 40.88%\r\nx-bo-processingtime: 4\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ncdn-cachedat: 12/22/2025 09:35:19\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3d4f0242170a94ae6ba6caecf5b7ac83\r\ncdn-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c31c5b5c7341110c93192fea04b646fc","sha1":"ff73773870a383d0158f598ff582e5e13411108b","sha256":"e911191b3c62d384789fb0dbf3bc7d84cfdb23c523cd5e992070d9b137647ef5","sha512":"fb60bd97cef4f099c7541ae0bbd1d654e4b9ffa043b5082c8b7f16feaf3fc5874bbe7941290594b21eff0f62cb753c1dc4b1bde5997182d2609678879b5ad081","ssdeep":"192:31H0iGdsPeASdSNNJ90u5GrG+VTx163PJK5Nl:31UiGgSUN/9uHV1qPo53","tlshash":"3ef1bf06acc06136ea015604bd8975237bd16dd0a4b311d7ac5e38b33de768822dfb7a","first_seen":"2025-12-22T09:35:52.206139Z","last_seen":"2025-12-22T09:35:52.206139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3281,"timings":{"blocked":1589,"dns":1549,"connect":22,"send":0,"wait":93,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w220_and_h330_face/gVkGLJRpK8KijUdVzQXm6v8cA0h.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.36.10","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://attackertv.cyou/watch-tv/silicon-valley-season-1?pl=Server+C","date":"2025-12-22T09:35:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 22:03:23 GMT","end":"Fri, 20 Mar 2026 22:03:22 GMT"},"fingerprint":{"sha1":"FC:BB:0B:99:B3:EE:F8:30:90:F3:C5:41:0C:7E:BE:40:FE:BF:68:13","sha256":"05:F7:40:90:8C:E1:5B:8E:8F:04:73:AB:1D:AB:3F:17:FF:6D:5A:0E:62:7E:1D:76:9A:1D:59:57:2D:67:3C:8A"}}},"request":{"raw":"GET /t/p/w220_and_h330_face/gVkGLJRpK8KijUdVzQXm6v8cA0h.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://attackertv.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15610\r\nserver: BunnyCDN-DE1-1053\r\ncdn-pullzone: 775336\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 02 Apr 2025 03:18:03 GMT\r\nperma-cache: MISS\r\nx-bo-server: LA-296\r\nx-downloadsize: 17907\r\nx-bo-origindownloadtime: 19710\r\nx-bo-compressionratio: 12.83%\r\nx-bo-processingtime: 54\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.22\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/02/2025 03:18:23\r\ncdn-edgestorageid: 1076\r\ncdn-requestid: 1f8d19b426522460a752d541ea1c411b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x330, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b149215e260af256ae90808ef087db45","sha1":"5bfe3d10a56e22253939e8937febb8bbe9a4b3b5","sha256":"fbb0dfe6285c06b85e2af1b7a612fe56cb96e46ec959d92575b45827d21626f7","sha512":"1c4e927c087377e23adde5b52deafc896053d4ff8866cb215393e303214867e234ef73df49cda094169b65ba26fcd88994270b5fe055c435f8878e8da65d0728","ssdeep":"384:pSTdbaFqzbjwGH+J6iS0iyR5w4psZOJa0kuTX3E1Ix4WMS:pSTdba6K6iS09R5w4pxJaMTX3u4lMS","tlshash":"bd62d0c05e3e24160224763e6973b139a1b81b17d71847f2883b9a0c16f9bf1f316a3e","first_seen":"2025-12-22T09:35:52.207251Z","last_seen":"2026-01-10T15:27:47.089929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1688,"timings":{"blocked":1586,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidsrc-embed.ru/reporting.js?t=1688387834","fqdn":"vidsrc-embed.ru","domain":"vidsrc-embed.ru","tld":"ru"},"ip":{"addr":"104.21.66.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1","date":"2025-12-22T09:35:28.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidsrc-embed.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 22:40:24 GMT","end":"Sun, 08 Mar 2026 23:38:00 GMT"},"fingerprint":{"sha1":"A6:EE:C6:27:DF:1E:06:71:15:7A:DE:10:14:E8:D5:C3:EC:94:40:46","sha256":"CE:C1:70:23:4F:2A:12:99:41:6F:C8:CD:C0:FE:6F:FF:7F:F4:AF:65:17:E7:77:E6:4A:26:50:49:42:D1:18:C6"}}},"request":{"raw":"GET /reporting.js?t=1688387834 HTTP/1.1\r\nHost: vidsrc-embed.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidsrc-embed.ru/embed/tv?tmdb=60573\u0026season=1\u0026episode=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:35:28 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 03 Jul 2023 12:37:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs4bVEgkywLNPy0oUqw9%2FuFP1%2Ff363A11YvydHFIvDY6t9E1TCUndxAih9MqqI2NrXxOIcaxgxeu3XD1DNhfurbfL8HHx6dQNa8Ak9M2YA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sat, 17 Jan 2026 04:45:21 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,range,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nage: 363007\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b1ea11cf83d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1043,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c97d1f5339eb7a54a87d6f794846f617","sha1":"f75125dd0a298e6a4b7d409c2f2dbb0cd636fc95","sha256":"cb17b1d569f6e850b7ffd4576c43022a033502c67628f6914b999641cb243e27","sha512":"de5ca3d528631cad4ceec18ccd02ca1fffc3f25e05811e975735440522a85f84f23f8ad7804fc73baaa688f0979fa0c05b3b6c79b6b52a2bb6cab391506e1b39","ssdeep":"","tlshash":"ac11251df0ad1d19427b31d74d1bc480bc35680fa2099f85399e07d44f0f2e9c876b0a","first_seen":"2023-11-14T08:31:50Z","last_seen":"2026-05-01T09:23:19.685422Z","times_seen":678,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}