{"report_id":"14b4d9a7-16c0-47f0-94aa-6b3d4f1dca66","version":0,"status":"done","tags":[],"date":"2026-09-06T22:54:19Z","url":{"schema":"http","addr":"rojadirectta.com/","fqdn":"rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":0,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"title":"ROJADIRECTA | Tarjeta Roja TV | Futbol En Vivo | PirloTV","dom":{"size":16846,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (689)","md5":"e125ac89977fff733118ff55e7320240","sha1":"4e8becc1f23f49a747781ae9de3c583af209eb76","sha256":"7f4907d0a6ae9e08c0966c9bd6fb5963003425a75f1c5f5d8d60c91c4dac5c0e","sha512":"343489060bbc4fb155c715ff75963d1692a98f67a080975e39deadd8a43da3025cc376f5932b60c0dddb684f0828c78073fd51c0aeee65ce22b49714f5043368","ssdeep":"384:7RqlA/6gPFUZf9jPFBm/UqbuT6SSB0MW55BBbqpUYgYKucMW89tRpGYIY8waPGzk:7RqlW07m/Ji","tlshash":"8572bfb266e9c07a05b2988dd6b4ffadc1e150a4d7501811c85e0fafdc8cfb5a153b8b","dom_hash":"domhash1d5784a5127feef91fc15d0d23fe6251","first_seen":"2026-09-06T22:54:22.321848Z","last_seen":"2026-09-06T22:54:22.321848Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rojadirectta.com/","fqdn":"rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":0,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T22:54:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.rojadirectta.com","ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-09-06T22:54:20.455191Z","last_seen":"2026-09-06T22:54:20.455191Z","alert_count":0,"request_count":4,"received_data":120323,"sent_data":2030,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-08-30T23:53:14.545992Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":831,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":600014,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adexchangerapid.com","ip":{"addr":"104.21.35.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-04-28T16:05:54.392839Z","last_seen":"2026-09-03T10:18:29.309818Z","alert_count":3,"request_count":1,"received_data":1752,"sent_data":1469,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2026-09-05T22:21:51.332173Z","alert_count":3,"request_count":1,"received_data":575,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2026-09-05T15:35:02.695098Z","alert_count":4,"request_count":2,"received_data":238472,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"rojadirectta.com","ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-09-06T22:45:43.340312Z","last_seen":"2026-09-06T22:45:43.340312Z","alert_count":0,"request_count":2,"received_data":35156,"sent_data":1002,"comment":"","tags":null,"fingerprints":null},{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2026-09-05T23:47:54.160051Z","alert_count":1,"request_count":1,"received_data":7707,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6620099ef0a9237fd1c25835a4d47473","sha1":"06f155ac71a5f0e43d087ab1d1a678f06ffb23f8","sha256":"0bac35168ee791e4ee2933ec767ef9342ad3a2744a74fb83d49c0c2f11defb04","sha512":"5bbb5b12138567d0eaf977a746f86204ce30f3e15fba48cd3dc14677887772deaaeaec913345d3c10ec66ddba0dd4e437566e209e4327b7cf5c410582769f142","ssdeep":"1536:LhArYuYdNHLPltZqNREc7E2mBXCT8gh5UJl0Huh04dYMgUNdqSmfqIR9sf24MO1J:GY5HLq15T8gh5UJlAu9YMvqouI","tlshash":"40f360512280994263565fbf371eb4f9dd062d4f789908bfb2487c68a047a7bfaf4132","size":168871,"data":"","first_seen":"2026-09-02T15:02:08.202414Z","last_seen":"2026-09-06T22:54:22.32903Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b12d8157c37530b6c333dda13d2c00a1","sha1":"9545c8e4ba77e5c9ea651b24ad8a36cc3877ff12","sha256":"d1eda05435600f9ffe648d96770ad814b016bc12f4c2995bd81b85581f1feb9f","sha512":"55bc225704d2a440886177616525520a7e620f9c8bfce8b0b6f8de0f26719720db6f1efa961d74c3202f8681c9e0b52b4c9d521eb2826e5018749f6dae3c5702","ssdeep":"","tlshash":"d2a002eb0081081137d33003dc60205b10737cdfba480541c163c3455001b6c6373ccd","size":64,"data":"","first_seen":"2023-03-07T13:55:44Z","last_seen":"2026-09-06T22:54:22.349883Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"54343c22c02c9b651fbbfe3b2e951d19","sha1":"4ab79a391e9185b4bedb51500a797fe1afe49bcb","sha256":"3813638f23afb599f83def4b6d32530f9c3b6bd1bd3b4e4cd790086dd9a7ad9a","sha512":"804981eef2afaa37664deb16dfa1d183a061d1a9db5ff16f7f96be9276100b8a7da170d701e61e004dd58ce97b1a1a39fc6b42f00102a480961f5c9f75022473","ssdeep":"","tlshash":"98b0127dda60342050ab2a32e85a230835f0c0817345b0c1939cda288dd8d2727d9efe","size":111,"data":"","first_seen":"2026-06-23T18:58:08.285063Z","last_seen":"2026-09-06T22:54:22.350703Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"560165abc2f4715280f2aed2aa77b261","sha1":"c6d8d958c28fa4df3ce358db4e08d8934545e74a","sha256":"a3476992d03a69a219a913e00ae3d2dd2845d84f791ce8f777201c6352ddfd69","sha512":"75f1613fb16b218a4ecdabdf5797d816321760b48706884c34ff54f3a7aab5f38bddc633276eb5c0b909a36d921e6b830a0239054c7c95e8214c43222f3837d8","ssdeep":"","tlshash":"db90027a00a1851515426448c90d8d54545d10039808a6853f8c11948b240941026514","size":49,"data":"","first_seen":"2026-06-12T02:21:14.467205Z","last_seen":"2026-09-06T22:54:22.351453Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9d6713e6b96ce68f5b6b1eda61cb239","sha1":"ea50f8b744caf76a0b0a8cd96873d2848f9a68be","sha256":"222a9354c6eee88efc83de355fc521f76b509be183f2660895628586e8ff82e0","sha512":"faab851716966899b185905a86c572072664a9e16368ece01e165213e83ea706eb437c3e21a6235064a9d33fa3a6040560032d725c71d684393c0d86a9a797aa","ssdeep":"","tlshash":"5ca0029c95fb80bb4508960055f94adc73b0220965b06320720c1d28559f60c24c5665","size":65,"data":"","first_seen":"2026-09-06T22:45:48.730223Z","last_seen":"2026-09-06T22:54:22.352797Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e961f61b8c40dee3ae3b19fc3aaa6381","sha1":"089f229fc5ef626880c58e4bf2010c69a469f898","sha256":"6562ff5e077edbc88a2ef2259376a0e198ffc1de00305a3d95f61414d249aaae","sha512":"7de9146afcb41a614bd11b1d710a046ab2cf993dfe4cb78c8f992d60f10a12ba0642e160890099a1aec15c607bda0f0fefc248fb6fd232a9044a6d7d2370e584","ssdeep":"","tlshash":"d9c02b8c210f1c7052f727008b3ffa00f0013204d4f469330c0d67044d60e13d784810","size":149,"data":"","first_seen":"2026-09-06T22:45:48.73139Z","last_seen":"2026-09-06T22:54:22.354103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/s.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffc3d62fb9b339d4f5a8524830fca600","sha1":"31c24b638664dda220ee36debd960f74dff10a55","sha256":"f2425150de49b4fbfe087e42149b3139166cf00fe5c07c3d2cdf4904a4a0ca70","sha512":"e36929f8b00258850dc1ae23c7a31d83d79447fa87581ca2de833df5da202c4b70d8887af9f3d7a9199d299b15aacaf3cb97eb656e330ccc8c758d628d1fcf62","ssdeep":"96:sLmj1tRXb+5MJu1Bofocackw9AD6MxkPtkpb9mCh5K7sRhVPHBCC3V:GSU1BofohPD6MWPtkV9L7hVPhCC3V","tlshash":"53e1c775215224a25bf241aaa0bf730ab431517fae57c001059e84f878a8f1f617effb","size":6924,"data":"","first_seen":"2026-07-21T18:51:14.116154Z","last_seen":"2026-09-06T22:54:22.338985Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YQD0VXBNTZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"412b8165cea842c296e0299e35a64595","sha1":"7a9eef41d38daa25c6b31b82aa4eb62956567843","sha256":"5eb02e8aafb23cf2bda64f976a4c647997fbb941ed6107de5f706fe17894a92e","sha512":"461caba6834aab1d72351703c6b10b6c35e304e86090b05b0d7f078c0cf7dadfae08145e199a5cb3f4974605b2c4de19680e4159a5a8624050924cc4b572cea3","ssdeep":"6144:GX5jH1lhNPZfKXrrzudf1UZyc3DR/dEpv3ygb07HCMlQZ7arIp:GX7hZeqHge07HdQtX","tlshash":"abd4f9de73c674229396f578903f02cb697b28a2b49cc89af189dce02d3454a5167f7c","size":599410,"data":"","first_seen":"2026-09-06T22:45:48.716096Z","last_seen":"2026-09-06T22:54:22.339952Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9804a9c37e5ee4394b0653cc929b9ffd","sha1":"8b559e8b83547c7740b87297fb676c663cd9fafa","sha256":"68e120cf1b2f45d3ee647d19bbbb19fa965d3bf84b8b5df241eb23828a2550a0","sha512":"802e180c2fe203da39c2348ce0ee442f0e01afcf3bad30457ae355b328a54e83d255fb052442d6273b53ac3695950c769f7d47fcf8e7463633486fe388943985","ssdeep":"1536:ltS5CCbDA4x275ZuQ+Z4t989f6jGEAt6S4/AyiIjT:leDUXuQ+ZZynViI3","tlshash":"f16372073a81610b3b096a777b2764e5d995340b68480d9ff6187cd476ca67bfbf8230","size":67751,"data":"","first_seen":"2026-09-02T15:02:08.205232Z","last_seen":"2026-09-06T22:54:22.341444Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"","filename":"https://acscdn.com/script/aclib.js","line_number":1,"column_number":128316}]},"http":[{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.47742327915509064\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.752Z","timestamp":1788735229752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:19:36 GMT","end":"Sun, 01 Nov 2026 16:19:23 GMT"},"fingerprint":{"sha1":"EF:23:F1:4F:A4:56:BA:B9:0B:25:F4:D1:A6:8C:6C:BC:66:3E:AD:A2","sha256":"A8:F0:C2:3A:05:7B:9F:67:7F:F3:BA:4F:03:DB:0C:4F:6D:2C:D9:D4:BF:E0:A4:88:63:45:84:A9:03:DC:99:51"}}},"request":{"raw":"POST /ut/hb.php?cb=0.47742327915509064\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1909\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.rojadirectta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1909,"data":"{\"clientHints\":{},\"isScrollable\":1,\"totalClicks\":0,\"sessionLength\":1,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":1,\"isMouseMoved\":0,\"pagePercentageSeen\":69,\"belowTheFoldSeen\":0,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"ufp\":\"Linux x86_64/Mozilla/Netscape/true/false/1280x10240en-USunknown824 bits\",\"sessionStartTime\":1788735229,\"sessionId\":\"24649b7b16c967465e5894b8a4904dc4\",\"timeZoneOffset\":0,\"zones\":[\"6701726\"],\"pUrl\":\"https%3A%2F%2Fwww.rojadirectta.com%2Fhome.php\",\"pReferrer\":\"\",\"pTitle\":\"ROJADIRECTA%20%7C%20Tarjeta%20Roja%20TV%20%7C%20Futbol%20En%20Vivo%20%7C%20PirloTV\",\"pDescription\":\"ROJADIRECTA%20Tarjeta%20Roja%20PirloTV%20Laliga%20Serie%20A%20Tim%20Liga%20Mx%20Champions%20League%20Roja%20directa%20indexa%20los%20canales%20y%20streamg%20los%20partidos%20de%20Futbol%20en%20Vivo\",\"pKeywords\":\"ROJADIRECTATV.TV%2C%20ROJADIRECTA.ME%2C%20ROJADIRECTA%2C%20ROJADIRECTAENVIVO.CLUB%2C%20TarjetarojaTv%2C%20tarjetarojaonline%2C%20rojadirectatv%2C%20rojadirecta%2C%20rojadirecta%20tv%2C%20en%20Vivo%2C%20ver%20en%20Vivo%2C%20link%20para%20ver%2C%20ver%20futbol%20online%2Cfutbol%20en%20vivo%2C%20universitario%2C%20palmeiras%2C%20cerro%20porte%C3%B1o%2C\",\"pHasIframes\":0,\"pWidth\":1280,\"pHeight\":1499,\"vWidth\":1280,\"vHeight\":1024,\"inIframe\":0,\"bsd\":\"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImRvZXNVQUNvbnRhaW5IZWFkbGVzc0tleXdvcmQiOmZhbHNlLCJpc1dlYkRyaXZlclByZXNlbnQiOmZhbHNlLCJpc0NEUERldGVjdGVkIjpmYWxzZSwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOmZhbHNlLCJpc1dpbmRvd0NEQyI6ZmFsc2UsImlzRmlyZWZveE1pc21hdGNoIjpmYWxzZSwiaW5jb25zaXN0ZW5jaWVzIjpmYWxzZSwiaXNDaHJvbWVGb3JUZXN0aW5nIjpmYWxzZSwibWlzc2luZ1dlYlJUQyI6ZmFsc2UsImRldGVjdENTU0Fub21hbGllcyI6ZmFsc2UsImlzSGVhZGxlc3NQZXJtaXNzaW9uTWF0Y2hlZCI6ZmFsc2UsInN1c1VzZXJJbnB1dCI6ZmFsc2V9fQ==\",\"sentTimestamp\":1788735229749}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqHIUqSojhNrstEOiqpIg3SZaRi80j4aKTsLUisXzKXFH2J7Px5RT9fuhbO%2FHnKYtMwJWC3rPWVxbmC%2BTxu%2FSSYW0SIw%2B9qUqUy2lYcAnk5%2BT5ll3wyZNhWS%2F0gN3dt0\"}]}\r\ncf-ray: a3710d520aff76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":3042,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T00:13:55.061548Z","times_seen":18319651,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/css/layout.css","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.195Z","timestamp":1788735229195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET /css/layout.css HTTP/1.1\r\nHost: www.rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/home.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 13 Sep 2026 22:53:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Aug 2026 19:36:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 424\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":891,"mime_type":"text/css","magic":"ASCII text","md5":"a1996ba954ee400e240720a3ae576090","sha1":"15f213995bf59fbd3bc9344ed2873ff22f2f46ea","sha256":"b3cc731c35007656baf9a9697d87ad93c9883365721659ce13c81aefb62166d5","sha512":"807e4e8696be4f4a3da390d451e2076a0f0ac5fe5dd26e8139614cd6d772b083fcce52fa9a20866ce6b8b71caa6ac2a285ba5395e9e439f0eeea73200d8ef91d","ssdeep":"","tlshash":"25211266b7fa1528702bd01aa495e350307cc447c14f5f157ad9fa30d7ca3aa6533798","first_seen":"2026-09-06T22:45:48.72125Z","last_seen":"2026-09-06T22:54:22.326265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.197Z","timestamp":1788735229197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:41:58 GMT","end":"Fri, 27 Nov 2026 22:41:50 GMT"},"fingerprint":{"sha1":"F4:89:89:23:08:06:FB:30:83:0A:81:5E:A0:52:75:88:C1:87:D5:F5","sha256":"CE:8A:E1:8B:85:FB:96:E8:BD:94:9F:B1:DF:73:62:87:4B:13:05:26:7A:AE:67:A1:93:4A:83:D6:85:EA:85:B4"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AJjja9bkjvKwY1PI9EpxOACgFhURanlx4Sh4EqQTtyo6uB9wuJQ0KkqEFlwgZVqknYr3_DogeGrtg53QIGsSHA\r\nx-goog-generation: 1788356879150222\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 168871\r\nx-goog-hash: crc32c=wlvO9A==, md5=ZiAJnvCpI3/Rwlg1pNR0cw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sun, 06 Sep 2026 23:53:49 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 02 Sep 2026 13:47:59 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 3309\r\ncf-cache-status: HIT\r\netag: W/\"6620099ef0a9237fd1c25835a4d47473\"\r\ncontent-encoding: gzip\r\ncf-ray: a3710d4e9c6e56aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":168871,"size_decoded":47467,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6620099ef0a9237fd1c25835a4d47473","sha1":"06f155ac71a5f0e43d087ab1d1a678f06ffb23f8","sha256":"0bac35168ee791e4ee2933ec767ef9342ad3a2744a74fb83d49c0c2f11defb04","sha512":"5bbb5b12138567d0eaf977a746f86204ce30f3e15fba48cd3dc14677887772deaaeaec913345d3c10ec66ddba0dd4e437566e209e4327b7cf5c410582769f142","ssdeep":"1536:LhArYuYdNHLPltZqNREc7E2mBXCT8gh5UJl0Huh04dYMgUNdqSmfqIR9sf24MO1J:GY5HLq15T8gh5UJlAu9YMvqouI","tlshash":"40f360512280994263565fbf371eb4f9dd062d4f789908bfb2487c68a047a7bfaf4132","first_seen":"2026-09-02T15:02:08.202414Z","last_seen":"2026-09-06T22:54:22.32903Z","times_seen":57,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rojadirectta.com/rojadirecta.jpg","fqdn":"rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.202Z","timestamp":1788735229202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET /rojadirecta.jpg HTTP/1.1\r\nHost: rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 13 Sep 2026 22:53:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 25 Aug 2026 19:36:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34563\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34563,"size_decoded":34811,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, orientation=upper-left, xresolution=134, yresolution=142, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2026:07:24 23:15:29], baseline, precision 8, 310x310, components 3","md5":"48b3a0be96535c5c341d002a922066cf","sha1":"8865c2e5d9d5d6e7937b002cb4fd936e2e99ade5","sha256":"a4aff9df5ef315af38326b30d238e4d26fe3c37404ad58aba2cf1d6fb59a6521","sha512":"5b0846b3ca2e3220b6b019997ae05f9a405f61fa63cb79c640c5d031edc9db23522d6cb422d009d412feafe849a0f443f9483753c261b2a18c6528288fd2974f","ssdeep":"384:GYNg7xH87Nqtf+vNpYYYNg7xH87NqtfKsnoEMBdHhCrn1IHbx0YQfGIJNLjt0/f5:GYylc7UApxYylc7USsoKiHbfQlNLjtiR","tlshash":"3df27c386b708ff3f8e1d53490f0ef1693662e55a7ab2842795ca44a3f90692dd4e310","first_seen":"2026-09-06T22:45:48.711664Z","last_seen":"2026-09-06T22:54:22.331967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-YQD0VXBNTZ\u0026cid=937427163.1788735230\u0026gtm=45je6921v9231520382za200zd9231520382\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938465~115938468~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=735757910","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.645Z","timestamp":1788735229645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-YQD0VXBNTZ\u0026cid=937427163.1788735230\u0026gtm=45je6921v9231520382za200zd9231520382\u0026rcb=11\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616985~115938465~115938468~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=735757910 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-07T00:08:57.527772Z","times_seen":1056217,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rojadirectta.com/","fqdn":"rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T22:53:48.695Z","timestamp":1788735228695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Sun, 06 Sep 2026 22:53:48 GMT\r\nlocation: https://www.rojadirectta.com/home.php\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T00:13:55.061548Z","times_seen":18319651,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/home.php","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T22:53:48.769Z","timestamp":1788735228769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET /home.php HTTP/1.1\r\nHost: www.rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3094\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 22:53:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":15999,"size_decoded":3273,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (696), with CRLF, LF line terminators","md5":"6073c58bad67bab00c0b2833e335aa59","sha1":"93ec024c14b0ef3367205855920b0d2951510c65","sha256":"c170d26d1fda2e07cb6b9d5cd9dbd9a0926fdbcc332f999333691a3833df83b4","sha512":"bdcfccc5c57259f9670cb3db93923c8af76ac29084cd56f05ded79168070eb13a51c9c5cdaedbd843a40cd7d7c81825bdf03c30a27ec0dd056a89c5ae8b35ac6","ssdeep":"384:vbskPYPh/awBmBEpppGPF7iiaa2XUpYRYFfd7VV8sIS7YrY1zN6TIolpM:vbsg8h/aEM","tlshash":"1e729da25ae9c23905b7949cc451ff9de0d050e1e76428508d6f0fafcd84bb8a267bc7","first_seen":"2026-09-06T22:45:48.710598Z","last_seen":"2026-09-06T22:54:22.336655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":6,"connect":22,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/s.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.198Z","timestamp":1788735229198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 02:05:50 GMT","end":"Sat, 07 Nov 2026 03:05:29 GMT"},"fingerprint":{"sha1":"C8:A7:A9:38:52:0A:B8:BE:DD:2C:1D:FD:97:5F:3B:2F:76:A7:EE:A2","sha256":"62:24:38:57:32:85:6B:2C:70:33:87:D9:E5:C0:74:36:02:D4:7E:61:6C:A0:94:FD:24:67:E1:05:C7:47:A3:B1"}}},"request":{"raw":"GET /s.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 01 Sep 2026 13:00:17 GMT\r\netag: W/\"6a96cc61-1b0c\"\r\nexpires: Mon, 07 Sep 2026 22:15:31 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2297\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BP1KQfZ6mLPJ8KX9gNFB82HA3MUxr70Dqtdqs5wt6wNgkVSAreLmoVNG7HbdarvgK58A1ubRm9Td704%2BmH0f38w0g%2FWHFwIZTOia%2BLbsrX5yezv%2B4BRSJak9\"}]}\r\ncf-ray: a3710d4e9ce5783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6924,"size_decoded":3959,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6924), with no line terminators","md5":"ffc3d62fb9b339d4f5a8524830fca600","sha1":"31c24b638664dda220ee36debd960f74dff10a55","sha256":"f2425150de49b4fbfe087e42149b3139166cf00fe5c07c3d2cdf4904a4a0ca70","sha512":"e36929f8b00258850dc1ae23c7a31d83d79447fa87581ca2de833df5da202c4b70d8887af9f3d7a9199d299b15aacaf3cb97eb656e330ccc8c758d628d1fcf62","ssdeep":"96:sLmj1tRXb+5MJu1Bofocackw9AD6MxkPtkpb9mCh5K7sRhVPHBCC3V:GSU1BofohPD6MWPtkV9L7hVPhCC3V","tlshash":"53e1c775215224a25bf241aaa0bf730ab431517fae57c001059e84f878a8f1f617effb","first_seen":"2026-07-21T18:51:14.116154Z","last_seen":"2026-09-06T22:54:22.338985Z","times_seen":199,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YQD0VXBNTZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.200Z","timestamp":1788735229200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-YQD0VXBNTZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\nexpires: Sun, 06 Sep 2026 22:53:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 194740\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":599410,"size_decoded":195344,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"412b8165cea842c296e0299e35a64595","sha1":"7a9eef41d38daa25c6b31b82aa4eb62956567843","sha256":"5eb02e8aafb23cf2bda64f976a4c647997fbb941ed6107de5f706fe17894a92e","sha512":"461caba6834aab1d72351703c6b10b6c35e304e86090b05b0d7f078c0cf7dadfae08145e199a5cb3f4974605b2c4de19680e4159a5a8624050924cc4b572cea3","ssdeep":"6144:GX5jH1lhNPZfKXrrzudf1UZyc3DR/dEpv3ygb07HCMlQZ7arIp:GX7hZeqHge07HdQtX","tlshash":"abd4f9de73c674229396f578903f02cb697b28a2b49cc89af189dce02d3454a5167f7c","first_seen":"2026-09-06T22:45:48.716096Z","last_seen":"2026-09-06T22:54:22.339952Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":38,"receive":67,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.312Z","timestamp":1788735229312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:41:58 GMT","end":"Fri, 27 Nov 2026 22:41:50 GMT"},"fingerprint":{"sha1":"F4:89:89:23:08:06:FB:30:83:0A:81:5E:A0:52:75:88:C1:87:D5:F5","sha256":"CE:8A:E1:8B:85:FB:96:E8:BD:94:9F:B1:DF:73:62:87:4B:13:05:26:7A:AE:67:A1:93:4A:83:D6:85:EA:85:B4"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AJjja9bCmILS8-SqzXTTZAWaT66gpMDcSkq30HXzhEqOXRH1wP4CRO3TJDv3AxfyeU2mPM0\r\nx-goog-generation: 1788357043808809\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 67751\r\nx-goog-hash: crc32c=nskc9w==, md5=mASpw35e5DlLBlPMkpuf/Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sun, 06 Sep 2026 23:53:49 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 02 Sep 2026 13:50:43 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1441\r\ncf-cache-status: HIT\r\netag: W/\"9804a9c37e5ee4394b0653cc929b9ffd\"\r\ncontent-encoding: gzip\r\ncf-ray: a3710d4f3cc256aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67751,"size_decoded":20709,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9804a9c37e5ee4394b0653cc929b9ffd","sha1":"8b559e8b83547c7740b87297fb676c663cd9fafa","sha256":"68e120cf1b2f45d3ee647d19bbbb19fa965d3bf84b8b5df241eb23828a2550a0","sha512":"802e180c2fe203da39c2348ce0ee442f0e01afcf3bad30457ae355b328a54e83d255fb052442d6273b53ac3695950c769f7d47fcf8e7463633486fe388943985","ssdeep":"1536:ltS5CCbDA4x275ZuQ+Z4t989f6jGEAt6S4/AyiIjT:leDUXuQ+ZZynViI3","tlshash":"f16372073a81610b3b096a777b2764e5d995340b68480d9ff6187cd476ca67bfbf8230","first_seen":"2026-09-02T15:02:08.205232Z","last_seen":"2026-09-06T22:54:22.341444Z","times_seen":47,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangerapid.com/script/suurl5.php?r=6701726\u0026cbur=0.7730387527569099\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=ROJADIRECTA%20%7C%20Tarjeta%20Roja%20TV%20%7C%20Futbol%20En%20Vivo%20%7C%20PirloTV\u0026cbpage=https%3A%2F%2Fwww.rojadirectta.com%2Fhome.php\u0026cbref=\u0026cbdescription=ROJADIRECTA%20Tarjeta%20Roja%20PirloTV%20Laliga%20Serie%20A%20Tim%20Liga%20Mx%20Champions%20League%20Roja%20directa%20indexa%20los%20canales%20y%20streamg%20los%20partidos%20de%20Futbol%20en%20Vivo\u0026cbkeywords=ROJADIRECTATV.TV%2C%20ROJADIRECTA.ME%2C%20ROJADIRECTA%2C%20ROJADIRECTAENVIVO.CLUB%2C%20TarjetarojaTv%2C%20tarjetarojaonline%2C%20rojadirectatv%2C%20rojadirecta%2C%20rojadirecta%20tv%2C%20en%20Vivo%2C%20ver%20en%20Vivo%2C%20link%20para%20ver%2C%20ver%20futbol%20online%2Cfutbol%20en%20vivo%2C%20universitario%2C%20palmeiras%2C%20cerro%20porte%C3%B1o%2C\u0026cbcdn=acscdn.com\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits\u0026ts=1788735229357\u0026srs=24649b7b16c967465e5894b8a4904dc4\u0026atv=87.0-pa\u0026btp=0.01","fqdn":"adexchangerapid.com","domain":"adexchangerapid.com","tld":"com"},"ip":{"addr":"104.21.35.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.714Z","timestamp":1788735229714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangerapid.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 23:48:49 GMT","end":"Sun, 22 Nov 2026 23:48:48 GMT"},"fingerprint":{"sha1":"8F:18:8A:BF:69:17:0F:15:9D:8A:C2:35:9A:1E:D0:33:AE:61:C3:FA","sha256":"DD:8B:36:25:93:8B:77:87:0F:0B:2B:EC:F1:26:84:E3:C4:52:21:CE:9A:AE:05:E6:AC:8B:28:55:4E:8B:3D:7C"}}},"request":{"raw":"GET /script/suurl5.php?r=6701726\u0026cbur=0.7730387527569099\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=ROJADIRECTA%20%7C%20Tarjeta%20Roja%20TV%20%7C%20Futbol%20En%20Vivo%20%7C%20PirloTV\u0026cbpage=https%3A%2F%2Fwww.rojadirectta.com%2Fhome.php\u0026cbref=\u0026cbdescription=ROJADIRECTA%20Tarjeta%20Roja%20PirloTV%20Laliga%20Serie%20A%20Tim%20Liga%20Mx%20Champions%20League%20Roja%20directa%20indexa%20los%20canales%20y%20streamg%20los%20partidos%20de%20Futbol%20en%20Vivo\u0026cbkeywords=ROJADIRECTATV.TV%2C%20ROJADIRECTA.ME%2C%20ROJADIRECTA%2C%20ROJADIRECTAENVIVO.CLUB%2C%20TarjetarojaTv%2C%20tarjetarojaonline%2C%20rojadirectatv%2C%20rojadirecta%2C%20rojadirecta%20tv%2C%20en%20Vivo%2C%20ver%20en%20Vivo%2C%20link%20para%20ver%2C%20ver%20futbol%20online%2Cfutbol%20en%20vivo%2C%20universitario%2C%20palmeiras%2C%20cerro%20porte%C3%B1o%2C\u0026cbcdn=acscdn.com\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits\u0026ts=1788735229357\u0026srs=24649b7b16c967465e5894b8a4904dc4\u0026atv=87.0-pa\u0026btp=0.01 HTTP/1.1\r\nHost: adexchangerapid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.rojadirectta.com/\r\nOrigin: https://www.rojadirectta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psds5ruGTIM1%2FjzjuemNZ0g5TTCH25PiF9N95ZYpRzsLm9e5vJm3HldfPol1kS5zYiSgbWM%2BjbpFjQarZ0fgiW3hjJ8b1DK3mviMP%2BFlSvtCFJJBWsc%2Fc%2FGoJdz7i8w6axO4G7f7\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3710d51dc7fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":983,"size_decoded":1575,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f71cb95bd8a08066da57dd99787a2574","sha1":"f84a9238e13e7750c47755bb85606371f509ebe4","sha256":"fe0bdbe3af4a9e6c6e5090b5956dcb8c55d48fec7e17bd0b70e07619838a24c5","sha512":"e95db8d60c939694b6960463096ed5994f6630bc32bf19b2990d945abeced1a78008fa73abc7e8b20a9245a3d2bfba6d6416f01a2d6b5947ab04cfa9c40760c0","ssdeep":"","tlshash":"c911c85336e62e68c57f54d4ae14d011cc10b8d74de4300db1f9966ac3309c80a7f633","first_seen":"2026-09-06T22:54:22.343458Z","last_seen":"2026-09-06T22:54:22.343458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":3,"connect":17,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"adexchangerapid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/favicon.ico","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.360Z","timestamp":1788735229360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/home.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 13 Sep 2026 22:53:49 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 25 Aug 2026 19:36:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 69690\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69688,"size_decoded":69985,"mime_type":"image/x-icon","magic":"Targa image data - Map 32 x 4130 x 1 +1","md5":"43f203b852875029999d43ce956f641f","sha1":"fd6476d491b912c28e7dd47396611670697be606","sha256":"9fd1e2b6c6382d99f99a57c6f63bee45d58353dc5cbec7c9de4cc200584dee77","sha512":"a3e89983673fc05a65013d96495b7fa947086adbbaeb87f2013efcad221e24dfd415ec1fd685958eefc2025e3a1f1833dde934b769d0832c1662d7ae7def6b84","ssdeep":"1536:jIbrrjfrQt7rZeobaBDtjxR7iHxWhgCQ9CjQRWyv1H9x:kAAtD7i2gCQ9CjQvt","tlshash":"4f6301f7cc12fd9059d69020778808c2034bdfd182ed8e9d0b8675b7ba275016aa7ba3","first_seen":"2026-09-06T22:45:48.726138Z","last_seen":"2026-09-06T22:54:22.346666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirectta.com/apple-touch-icon.png","fqdn":"www.rojadirectta.com","domain":"rojadirectta.com","tld":"com"},"ip":{"addr":"45.81.21.31","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rojadirectta.com/home.php","date":"2026-09-06T22:53:49.358Z","timestamp":1788735229358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rojadirectta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Jul 2026 11:59:06 GMT","end":"Fri, 23 Oct 2026 11:59:05 GMT"},"fingerprint":{"sha1":"72:B9:73:5F:51:14:70:87:2D:DB:FB:76:0D:97:79:27:99:A8:FB:40","sha256":"8E:E1:13:61:35:3F:30:A0:BA:C7:C9:94:FC:E2:F2:1A:22:98:90:7D:0C:FA:68:52:DA:BA:E6:02:2C:6A:F2:4B"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.rojadirectta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rojadirectta.com/home.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 13 Sep 2026 22:53:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Aug 2026 17:41:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32036\r\ndate: Sun, 06 Sep 2026 22:53:49 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32036,"size_decoded":32283,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e015ce8509cb61babcc7dc387322e504","sha1":"739cdaabcfc184a7f46fdd51bc32c33e9fb2e197","sha256":"50ddfc7a88ce60e180876a23794cc5d912e95d9eb3b9db7ef91b3bb240fef723","sha512":"ef81b153b7a3e1f8ae451832a975957a42c50c2a5d928f48b45a0f02c8beb13ded9785aeaff367fc0721e084c1f0f542a238c5bae87f5e465bf3fd397df0620a","ssdeep":"768:umlaT0bt9lHzKbOa31fVY7efsNf+GfyG88QMubpGWAAisiVTDsjQfBWo7N1:ba2zIOu/OG5G8GubwLAisEsEMop1","tlshash":"c6e2e18687f2a0adc309b473d642fd052d82f2be5958ec4b799d6feb0c029e1d019982","first_seen":"2026-09-06T22:45:48.717298Z","last_seen":"2026-09-06T22:54:22.348156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}