{"report_id":"192b75c5-94e4-432c-aed1-14c2e9e3f872","version":6,"status":"done","tags":[],"date":"2025-11-23T18:33:04Z","url":{"schema":"http","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"104.21.10.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"title":"EUUD-077.mp4 at Streamtape.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"104.21.10.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T18:33:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"qt.calyxesdefames.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"qt.calyxesdefames.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xml.acertb.com","ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2020-04-01","domain_rank":721296,"first_seen":"2020-04-15T07:34:28Z","last_seen":"2025-11-23T12:22:04.136352Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"advertape.net","ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2025-11-22T08:51:24.012347Z","last_seen":"2025-11-22T08:51:24.012347Z","alert_count":0,"request_count":16,"received_data":1067109,"sent_data":10564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"xml.revrtb.net","ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2019-01-20","domain_rank":862364,"first_seen":"2019-01-31T22:15:28Z","last_seen":"2025-11-18T05:25:41.704025Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.popviking.com","ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2025-01-04","domain_rank":792106,"first_seen":"2025-03-07T10:15:47.651822Z","last_seen":"2025-11-21T23:22:30.589147Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.popmonetizer.net","ip":{"addr":"174.137.133.18","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2019-01-20","domain_rank":715683,"first_seen":"2019-01-31T22:15:55Z","last_seen":"2025-11-21T23:22:30.422749Z","alert_count":0,"request_count":1,"received_data":139,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fikquctziqku.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-11-23T18:01:59.010837Z","last_seen":"2025-11-23T18:01:59.010837Z","alert_count":0,"request_count":1,"received_data":3189,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-16T22:20:16.151448Z","alert_count":0,"request_count":5,"received_data":2585362,"sent_data":2403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"holahupa.com","ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-14","domain_rank":17290,"first_seen":"2024-05-20T21:30:41Z","last_seen":"2025-11-20T12:49:40.045212Z","alert_count":0,"request_count":3,"received_data":160909,"sent_data":2516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"thumb.tapecontent.net","ip":{"addr":"172.67.200.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-18","domain_rank":734553,"first_seen":"2020-04-25T22:38:09Z","last_seen":"2025-11-22T08:51:24.575448Z","alert_count":0,"request_count":1,"received_data":116667,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xml.zeusadx.com","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2019-08-07","domain_rank":629445,"first_seen":"2019-09-23T06:14:44Z","last_seen":"2025-11-21T17:07:38.393836Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.cachegorilla.com","ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2021-07-23","domain_rank":905846,"first_seen":"2023-11-27T04:48:43Z","last_seen":"2025-11-23T12:22:04.185607Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1126,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.xmlwolf.com","ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2024-07-27","domain_rank":749098,"first_seen":"2024-08-16T21:18:16Z","last_seen":"2025-11-21T17:07:37.803924Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-11-18T15:27:43.950175Z","alert_count":0,"request_count":5,"received_data":1044081,"sent_data":2344,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"epidermispushupvariable.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":104539,"first_seen":"2025-03-22T06:33:08.230583Z","last_seen":"2025-11-23T09:37:35.986648Z","alert_count":5,"request_count":5,"received_data":165709,"sent_data":4162,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.xmlwiz.com","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2021-04-22","domain_rank":856229,"first_seen":"2022-01-09T14:16:30Z","last_seen":"2025-11-21T17:07:37.566005Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"qt.calyxesdefames.com","ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-07","domain_rank":2967157,"first_seen":"2025-06-05T08:14:35.739634Z","last_seen":"2025-11-23T15:31:37.253576Z","alert_count":2,"request_count":1,"received_data":1448,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-16T22:20:15.656981Z","alert_count":0,"request_count":3,"received_data":83304,"sent_data":1856,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.xmlking.com","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2020-07-27","domain_rank":734121,"first_seen":"2020-11-12T15:10:01Z","last_seen":"2025-11-21T17:07:38.588382Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"campfirecroutondecorator.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":37605,"first_seen":"2025-03-16T06:26:47.544899Z","last_seen":"2025-11-20T14:53:49.951291Z","alert_count":0,"request_count":5,"received_data":206551,"sent_data":6280,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xml.adxnexus.com","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2019-04-10","domain_rank":855030,"first_seen":"2019-04-25T00:41:28Z","last_seen":"2025-11-21T17:07:38.242914Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1118,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":2,"received_data":32566,"sent_data":1054,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.poprtb.com","ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2020-07-27","domain_rank":875718,"first_seen":"2020-08-26T07:08:21Z","last_seen":"2025-11-23T12:22:04.287569Z","alert_count":0,"request_count":2,"received_data":278,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ad.cpcstar.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-24","domain_rank":1598640,"first_seen":"2025-07-21T15:03:49.530998Z","last_seen":"2025-11-22T08:51:24.7684Z","alert_count":0,"request_count":46,"received_data":31446,"sent_data":23816,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba6dca9c0555e01bdfe358f5c6e5f00c","sha1":"74b4b753fb8b5d8416440a51d0e9e6791156bc35","sha256":"370afbf6da08283c1915a5852d19149a0ac17e01344baa0088a84c67b7ba181d","sha512":"70554b9e1581ae27e5e525c0d29d288c856076e1494cfb094f9f929cb2651954f4c2820938dfee7516a288318f79ec65c8be65493749a4e97b6969af528fe714","ssdeep":"","tlshash":"dc11ef3ef6213a5454d605b5343fe7d8743217613956aca2c47cda18b4b0cda0822bad","size":864,"data":"","first_seen":"2024-11-21T06:39:32.751313Z","last_seen":"2026-05-17T20:55:45.457817Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bc62f14551585341c8cbd8bd25bf9bd","sha1":"5ac892659bd6fb834f173dcfb7dc8ea29ff5a005","sha256":"8f40d0bdd8842f8972435442bc98bd891a23eba37c2ccadcdf3aca545b922f5d","sha512":"8dc2e1c9676fa8a1d1366dbc24b7a59a86c7a0c4eb47e1a3b000286f168beb40c1cca1cc72974a04be5c04ddd5178a73154aef52510e3a754d3bb14e1bac66fb","ssdeep":"","tlshash":"1321fe5fb6705be458a1c4713a3fa79879b146757b42a082e1bcc98b7468cc78401b9f","size":1443,"data":"","first_seen":"2025-11-23T18:33:17.334694Z","last_seen":"2025-11-23T18:33:17.334694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eec42d699df08f84fdbc047041c30aa6","sha1":"e333969c742f9d60bff9841f81ed430cefc91c39","sha256":"a03c4b62c96cd2858edb304efa369541889e2b985bc5acc0f3d4f9fe0ea8aee0","sha512":"4616a8bd52fb3259cd6a7b2270eb1b08a1ccc5e5cb1a0723aafcb351118438b169b8d4b2534b9b5ecbe91621a48165f95d4ea21d1b04cf6fd7f16778b0a3e9a8","ssdeep":"192:h4+vqmUo/gEKY8/3Vn16FuUuzKnfdo8E9wqpbztyksr6aBvWDGj1z+:RvxUo/lKp/Tcdnfm8E9bzskU6ZDGj1z+","tlshash":"9902f8b22282e47d83a51ced617a6868f4760941348bc194f0fcde537c2a547dab2ebd","size":8810,"data":"","first_seen":"2025-11-23T18:33:17.335575Z","last_seen":"2025-11-23T18:33:17.335575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb6f375ba64ddade9fcf5e52cde8d50f","sha1":"254b26066d1c047699a7b6970932761cda8a9787","sha256":"46fe412d4cbd377349202dc4037afd7aeac91dda71e561f6b9b9b9bde884b9e8","sha512":"4d88edeb6aee630960ce42ebf458426a4bd731264cb0e086969a93862fb05b79a42a4961d517e749a9204c5203c6823c434e3d90f384fcc0df982db1a0a0f107","ssdeep":"384:D1RMxu4b9mCoCGi4vBp8CXDz6s5g5SsJlt2LCMg8:D1Rou4bnEvBmCXDz6ggLts","tlshash":"3382e7f9b2d6107241ea1569643f7b52b233202968069054be39cdd47d3cf47a16fafc","size":19098,"data":"","first_seen":"2025-11-23T18:33:17.336546Z","last_seen":"2025-11-23T18:33:17.336546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"04c162057826c04a78cc8d3c67938418","sha1":"54671b1fa77dead14ea8e8f6da8739bcc0317d4d","sha256":"b8d71e7716a4006617b0294d61d801ff9ab31ca5311a23451d50f6daec2c24a4","sha512":"9b3ca7f8193b309623984b6f9c93c4bf5495d7fc4c76625238ac5bf8519ecaf29c4f1ba01c31328ee0dd99969154d4facfbfed7d8bafc11539fa187aa6875007","ssdeep":"","tlshash":"d37000882c08a028002a3220002b80088822380020000020022088808ef280a8203808","size":22,"data":"","first_seen":"2025-11-21T08:01:28.139011Z","last_seen":"2025-11-24T08:00:15.849632Z","times_seen":3767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/prebid.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a305bcdc8e061bbd43294a477a3678","sha1":"506582a1d912d546f5942d95ffae95ec7f4c37ce","sha256":"8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa","sha512":"feb32ed92acbef86c4ce3cb32637ccdf02519d1725db5af667cfe29b842efe4a195ad0deef44fb6c592a50d7e4759bd4c819c2dc439a4d373ef186cb7d2dc553","ssdeep":"","tlshash":"9d70000222808032c03c8000808800088020000ac08320222a000000000030200002c3","size":20,"data":"","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-06-06T18:25:56.281214Z","times_seen":2351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa300a6f0054ef613eb6f081892145c0","sha1":"87cd6f70bee69e393284e8bd79f378308d08d9b7","sha256":"dafd297a4e2fc3bfb59678a769e307116e859a9ae5fcd0ce28410ee9dc807722","sha512":"59a8f2f77af713fa1d6450742c5cd12e412b61fe3bede5a03fbb8d4ef406d67d82d171d624d0e113eedf775024062eaffe1c7cc586fc4948ff325e80afccf0eb","ssdeep":"","tlshash":"a611d51af6d38079117ba7f44477d70d70622006f907cb68f99c86e00f9c9b2976399d","size":915,"data":"","first_seen":"2025-11-23T15:31:42.615893Z","last_seen":"2026-04-21T07:02:02.778351Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"803990d8b87b314cba029ee6e3f18447","sha1":"331aafa8f3ae0eef4b58b8f7384f60595c57789c","sha256":"bd6b0211809c084cf89b79c199d2889e91208aab1ba823594e42608f39b43868","sha512":"bdb3e5192d11721b86b9d944ce1b029bae5dd991a6c362b19cc37ce6aabe72b329b13e7343ce6b8be06eb7e7463acb275c7e55a6cdfe08c8af0d79ef232e9fd4","ssdeep":"","tlshash":"e0f0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":489,"data":"","first_seen":"2025-08-09T14:08:40.22413Z","last_seen":"2026-05-10T11:01:09.084396Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"418b04247fd0fc5f9b26f03b9e15f10c","sha1":"eb375ec02b5d3a25ed2272e6de2d33eea037a560","sha256":"d37933ab6fe44475d856f5bc31b80d0f763b0b08ef8b7e69b0e46e75e2a5776f","sha512":"3abe779e4707e89e8bbb85c1fdf6ca9a50249ec804fe4d8bc12f3f2d9b87c99f26cc39fcc5bab1af1f8c5448257eeab04095d932e37e05f3cd8857ef04a71009","ssdeep":"","tlshash":"6911b11af6d29029117b66f44427d70c70622006f807cb68f99c86e00f9c9b2576299d","size":921,"data":"","first_seen":"2025-11-23T15:31:42.666397Z","last_seen":"2026-05-10T11:01:09.054631Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c32277ab11fafbce21a459ab09ddd8be","sha1":"1f91fed6d99179783bbe2194e72fe924af0e8c94","sha256":"8c5204cb88ea81db69ecb9acc7143a9871097d533b131a2cdd27c96e61c568cd","sha512":"b5603367642861d5215de966afbc62e7b030ea11a1eaf58919ae5a4e95648af81e9e0f571de505961cca914613d92f6960e57a7447bcef186dd4a3a09614bfb5","ssdeep":"","tlshash":"28500030003c000c000000030c000f0000cc00c000000003f0c0000c000000c0000300","size":11,"data":"","first_seen":"2025-11-22T08:51:35.658229Z","last_seen":"2025-11-29T09:18:00.586906Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"126711479b4bae4605bccec49865687c","sha1":"2ed188a6cae7b19fa7a4a1b571b245e334451aca","sha256":"0c958e63cda706c015a79a6d12885b6e2d0af8af15ed77052a0b86dccf7f5b80","sha512":"ffe12400050182e0301ed836289d6e54377aede14a034e0f0817618c1f0ab12380a323830693759b303b35d6f20e8ee1b7630ce4434b058ca0837207eaa4ec52","ssdeep":"192:F4+vqmUo/gEKY8/3Vn16FuUuzKnfdo8E9wqpbztyksr6aBvWDGR:NvxUo/lKp/Tcdnfm8E9bzskU6ZDGR","tlshash":"540209b22282e46d83a51ced657a6868f07a0941348bc194f0fcde573c27547d6f2ebd","size":8530,"data":"","first_seen":"2025-11-22T08:51:35.651276Z","last_seen":"2025-11-29T09:18:00.544398Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"986ed1e2eb250b4c9961c3f2dd009b47","sha1":"5cf67ff4db07c4feba11aa5d73ebccd381f43013","sha256":"c85fc9ba89b925b24699ab417b5f0e51d35643f7a20d46caf28660c5e030b695","sha512":"f3acf647d1c8c4c710038a99fb68141bc3901c5af63bc111443b349a599984c0f372fb97cfc8c21bb0172faac0589b1e3856071e5e11204f1bddd7bf7d90eda5","ssdeep":"","tlshash":"27319a7ca622dd4c6c336977eca46b75c2046f53f8d8abc8182540573fe053d7004795","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.07507Z","last_seen":"2026-05-17T12:54:14.764816Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/player.ec3b7f.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"105deb72360ffe22cd3c5d8eff38ae81","sha1":"39376249c2819f8d1e763353fac55817ffec3443","sha256":"2157a28c1746e2cdea19e9c2f67022acbe6f990b4d5d2baaae96e869a3212442","sha512":"bc81162f61262bf1e33d5df73a8931ce8f072c35a66ff017056f6be2399a686e7c71f7a3789978523897c52c80ae48cdfa359bf4917de66a3b768bcbaca715a1","ssdeep":"1536:vgSnzdHTOfC7IPScxi0n2KSBFkljzZtfWl2tLNGuvjMK2TuxCF0k7ccZHrNFY8Rq:HO6VxrQICBkdjJU5oNOpJhLf","tlshash":"76e309ca738ab131c29730ad503f520a72375b996405c258f939e9d86d7ce4ab277f38","size":148149,"data":"","first_seen":"2025-10-08T20:44:30.937705Z","last_seen":"2026-05-17T20:55:45.448589Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84a697c2fb5d811c9a3fed4c289f9e93","sha1":"f6dbed179d859cd58986ed85039d6e71bfadb3d3","sha256":"38f0f6fe920c5e424175211a217d931bd8d3d4c4d97477fff93e2d13af735fb7","sha512":"ff6ad906cb7d2edcb085d813429c8247edefc0e90713a34cc2c49225cc1a6e4e4c4cae115e38676b3ca41733ffd551883b468e4278f6262fabfc86356496fbf5","ssdeep":"","tlshash":"54f0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":486,"data":"","first_seen":"2025-08-09T14:08:40.195581Z","last_seen":"2026-05-10T11:01:09.100185Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"560b282f0f65347e43f0bcfc8506d865","sha1":"244b23d100d8707391849541c86eac2af59cfcc7","sha256":"a0d62dbc9419a972935bf0c4b04c10cecbf2b8d66679f29a429efd080c099abf","sha512":"8d02642fd164bdb14c7b4ba2886701f0cfe6475c23c6f2ec78679f0752f4fe12e7c71a0d4d15350b7f6c850abfec07f7f82169057a85d9523892899395baa85d","ssdeep":"","tlshash":"1111b11af6d38039117b66f44427d70c7062200af907cb68f99c86e00f989b2576299d","size":930,"data":"","first_seen":"2025-11-23T15:31:42.663754Z","last_seen":"2026-04-21T07:02:02.784637Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e86ef63756f809dc9db9106d62bcce4","sha1":"6a3ed8961f53aac3371243e0d6f15066132571e3","sha256":"7bead0dacf6b99c96bc7f0e8fce5138637c830547816384ee7374ca66178591e","sha512":"4fcce49ec5367946bda2e0e3caaa78c4279c7962231793272aa406139413c2bacca4c7674b6151aaa1069c2a2774f66c021c6ffd436a65fb6fc8068c87275ed2","ssdeep":"","tlshash":"7751b67ca222d94cad73697beca82f71d2446f53f8d8a7c8081940963fe062d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.086411Z","last_seen":"2026-05-17T12:54:14.768826Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f4d0e741ddcb618f77d0c985d7c7f13","sha1":"60033f717f27094d68d798cc1a1a239e5c6b4f44","sha256":"8d0c4066daac7fe8442c2131e9f30911d2abdab473cd67f0cd76691fefb8078d","sha512":"41de47eb911bc106956344ca48ca9e19fe20b9609626e7923485a55a9ab669d383e7c3971b356d7e29c9a148173686f5c48a16da3f43d3ec2e3a98e5addd20b8","ssdeep":"","tlshash":"f5319a7ca622dd8c6d336977eca46b75c204af53f8d8abc8182940572fe053d70047d6","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.08827Z","last_seen":"2026-05-17T12:54:14.769405Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab348d055cf84ac76c9b8d87f7a088da","sha1":"04b2e7a1db97354a65e1bdcb114359db90b7fc61","sha256":"0196986c1306253734ff0da09de3bf3b5e99abbc9b503446a13f05d8d81059f5","sha512":"8c99ad654642e9b2f683a40b8a6e098838aab5008675f6282351ace49a04ea92739b488fd67f47ba107984ade7a86afdb4b8647ebe1e3b14995a8f31fde9e2b2","ssdeep":"","tlshash":"a651b67ca222d94cad73697beca82f71d2449f53f8d8a7c8081940973fe066d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.089962Z","last_seen":"2026-05-17T12:54:14.770656Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a8d6c343556395b36ac4a268f017ee6","sha1":"08e1d2fcaa8f3c6ebe967851f4bbbaf2c06043c0","sha256":"fd417495267650fb646a7c9a3776849f73a44d1880128268a401ab8d94fb0842","sha512":"aea6263bcde5f59aafe2ef7abb113a4dbb651e6507d5da2cca70758b62ed4c3cd276aae5430e9de86540b2a85d7d5fbf699b5c45a27ef4796d88a64f10a216b6","ssdeep":"","tlshash":"4e31887ca622dd4c6c336a77eca86b35c2046f13f8d8abc8182940532fe053d74047d6","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.09195Z","last_seen":"2026-05-17T12:54:14.771278Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ceb8de1fe60e81325827519d8bed386","sha1":"cf34200288157eea58dae75933526707332ff800","sha256":"1e4144b4672ea28e5870ce1db6455ccaed9ed7796fbbfb5c19cb4c2244fe9f4a","sha512":"20bbcbe3ba221db2984f6c5acc61cfc3a0a26e4652e181eed77bcf9711a7fc9648ddd57a6e6b731c69172aba765be6a231cef3b42b5bc36a9f158a694b76a6be","ssdeep":"","tlshash":"b3f0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":510,"data":"","first_seen":"2025-08-09T14:08:40.23753Z","last_seen":"2026-04-29T16:33:18.774176Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd330db5e6b63cb02762527bbe5a6dbb","sha1":"f676c3b154ac37bd8915f15eff8a6660628ddd88","sha256":"89e17ac0475c2e63b37a7e0fec2601a0f46159a9b34eed11cf5b3ceb612ffe3c","sha512":"9ec5eadf4d2790206ff691352b29e1315867415adae395e20e4e8d507dc1018b83fe54384122d57e09ba748fa2ff68e0106df5fa36ee742b72da89022d8f1aa1","ssdeep":"","tlshash":"1551b67ca622d94cad73697beca82f31d2045f53f8d8a7c8081940963fe062d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.093475Z","last_seen":"2026-05-17T12:54:14.774847Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1404da35e57ad12ceaada360bdac1f68","sha1":"707bd4fc642fe6e7910aad03a0f6699eaed784bd","sha256":"0c3e3c32d509651d8c3e9f6ed6ba5fb8e54a76a8a893a9ac626de4702e0c248d","sha512":"cc5ab4c7d037c2be41f6a1bd8f20fdbadbb2fa761ba86a475891655cd605b452a8b8f29f2d2d60dc7276ed943a1ce4548abcb7b46cffc96136c0795fac84021d","ssdeep":"","tlshash":"f631887ca622dd8c6d336977eca46b75c204af13f8d8abc8182940572fe063d70047d5","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.095274Z","last_seen":"2026-05-17T12:54:14.775767Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"494ed1bb8dfff9b0864387f1e5c8e755","sha1":"36f07a95c8617f6c3950bbc327fd5ffc986ac469","sha256":"95cce2511755cb5499a534f0515f67da382e06aee80296fc6445e932cde82c94","sha512":"e30d8c4b258209a7a8b084fd6cb4a676db270a23d2e77afce6200a217f219439aa279741051878119e7bec2e5de7ad3835db481f7a1c32512ce7ceca88d375a8","ssdeep":"","tlshash":"6451b67ca222d94cad73697beca82f71d2049f53fcd8a7c8081940963fe062d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.097061Z","last_seen":"2026-05-17T12:54:14.77847Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2063262?zoneid=2063262\u0026jp=_clihinandmfsrntaqoyskd\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=o3dhooQaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906501632\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2045\u0026rlp=%5B0%2C42%2C439%2C341%2C17049%2C10034%2C1208%2C9795%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62af360dca1e7934c976837465eac802","sha1":"0b8a73a93f54b5ba69533d6b4c02c257e8a4d847","sha256":"31a14cf94cea8c6fd9f211c4ad711441fdb1d04559bdfe47d162d2b1eb6c03ec","sha512":"7cf68ea4c8e25b82545d64ebfe6b88de97231ff3d28480b882326267e8ad0688856f9400aceb2959ff88e6707ebed059bfd434ea878ef21fedd63329562bb959","ssdeep":"","tlshash":"27616349fa3bdfae9940089b1efaaf42264c2d02b913e5394054d7c0b33dceb6722403","size":3259,"data":"","first_seen":"2025-11-23T18:33:17.301802Z","last_seen":"2025-11-23T18:33:17.301802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"da92131ed6829d39d7ce830ae1bf990b","sha1":"9088645446376e72dfec0417e0d11b23f6958716","sha256":"8e5c81a07d5b56523892b00f411915b87a0a6ad9791c3d713756083142dfef4e","sha512":"652d8e2b55d86f9856acd940fb9593d2db653008cecc5d36ac2f35c6ee263ad9b621820e775400347d2bee92c3b760afe93e2128a58e8cfb09e33473947fae86","ssdeep":"","tlshash":"197000882c08a028002a3220002b000a0822380020000020020088808eb2c2a8202c08","size":22,"data":"","first_seen":"2025-11-21T08:01:28.132754Z","last_seen":"2025-11-24T08:00:15.851968Z","times_seen":3763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11648891eebf99dc180a448c68338e13","sha1":"15ab6a492f4ee19fbc0268cda06b56f0a65e5015","sha256":"c774d9651373165b85550fed8dd62b49a5ce1a6a548f0bbbdf53e420dc3735d4","sha512":"8de8cb5023e5a474ad74dd35096127a9574a7758e92adcd4e1abc4db0bd39042ca8af183f63626673148fa83fe2b1641a5532bee3137b2da67daeb27f2ae3019","ssdeep":"","tlshash":"c9f0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":495,"data":"","first_seen":"2025-08-09T14:08:40.226682Z","last_seen":"2026-05-10T11:01:09.088448Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62450f3b786b92eb49f2ddf915e82798","sha1":"97c9c260e7da07aebcf493eac525793404462f3e","sha256":"c857f9e6d227adf47fdbf4f860c84c5ae84cba8527a259350dc67daf8e5b1bb4","sha512":"b3ab5811c157ac49e87f93dcd3c789f5740fd3e0792ba077f15d20a7173e96c901ac1302aec86b4d33018d810ef5674492a0ebea677c8859e31ef6539c3ea28c","ssdeep":"","tlshash":"6811d51af6d29079113b67f44437d70c70622006f807cb68f99c86e00f9c9b267639dd","size":942,"data":"","first_seen":"2025-11-23T15:31:42.626823Z","last_seen":"2026-01-02T22:00:53.419856Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/jquery.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-12T01:49:15.954093Z","times_seen":133446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/on.js","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbfe0538eea0082ceddf9b3865adddee","sha1":"c0eefc510ed02dd390d3207d2ba019527b765961","sha256":"990eeb4c171f598a11168462220a4e5c8ac6b633541db5f3b7f806dfc392d3c3","sha512":"ae4bec7a3116540789ab50a7a038927d23a542d1cc53a4e8c6c3d64a2cdf3455bd0b36f0d3b0c307a6f5c4e366e2ac6a85a4b3210703fbf0ef894927bbb305ec","ssdeep":"1536:Zr99edSf1mHoH41wszIkopbfynmEDzcOJlhenn+ggar+rmk9E/ydzBY1AAt:ZreS10oHiRIkYbfyYOJvrmnTt","tlshash":"f1e3768cfa4b2435426fb0794c2f662ade27c8d1a45dc0c6d8abd1d93d789069131efb","size":154927,"data":"","first_seen":"2025-11-17T20:23:14.342378Z","last_seen":"2025-11-24T09:31:58.868453Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0378f163c918f7d1c379d2a3dd289e0","sha1":"53098dd5a4ebe8bbfb2f57d3aea8bbbbb1187445","sha256":"a6f326dcc822d2a43ef86e0e1884c416171edad6bfed375f91c2b7489d9a0b13","sha512":"1fe0d805404cd6c19bfbc6d94e621649c193c92ef18745586b1d696f625b977456545d51b90c09973de76f9a6f43446673ac47a6168ad094cd457362c1312da0","ssdeep":"","tlshash":"3111b11af6d28029113b66f44427d70cb0622006f807cb68f99c96e00f989b2676699d","size":927,"data":"","first_seen":"2025-11-23T15:31:42.64009Z","last_seen":"2026-05-10T11:01:09.114305Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a3deae547c867a2404eb00f78e59d8","sha1":"c8d6b1d44bba232e21a9c7ffd99d3f447fdbfe55","sha256":"69f25e221943c865fcc6bab27b3312c8e2e2ff037fa7af7d58ea92d315509569","sha512":"f2f30856a935bd4682b9e05f24d300c173b80f1d0b0a65f78bc8392aa16bf04ea0d4f3e97e0a3c3b34f689f3d531663f48f1ef9647166defd2507e627f9ec334","ssdeep":"","tlshash":"f731987ca622dd8c6c336a77eca46b75c204af13f8d8abc8182940933fe063d7004796","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.100798Z","last_seen":"2026-05-17T12:54:14.780202Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"746efa1fb566aa2d8f3f05f298bda25f","sha1":"c914bb08765fe8f806a5b3dd12b5ccd4ef0cda0c","sha256":"b7b467b76e3561713971542919c1850d2253ff3e0951334844decd9b688713f9","sha512":"de498e822a6b4a5710d99fa219f71fa8b16064fe443f33546896fec19d9a449719295d8053d2f73d30cb8978366a63585eebf18f7334536198fb18fe8b082d93","ssdeep":"","tlshash":"d651b57ca222d94cad73697beca82f71d2045f53f8d8a7c8081940973fe062d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.102429Z","last_seen":"2026-05-17T12:54:14.780764Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2090176?id=2090176\u0026jp=_clfgazskdererjwafgtepn\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=3wbdJA1aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=4056250116032000\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1094\u0026rlp=%5B0%2C12%2C145%2C93%2C2214%2C2670%2C831%2C2431%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"626e80575892c850a95a5e6ec28dcce0","sha1":"fa49d35c478fa5785d72608d6eea5a726802d6e9","sha256":"8d8510dc7f33c2151cccb572b50c990153cea8aee9ad257641672f4bde953aed","sha512":"aa6f5dfe1770411109c1f8fa08a820f4495aa2b875adc3ec3131c0df87c62537c922d7b4c2c6da730067e1b1fb99525a6cec7feca003f81580109f9d94a58f3d","ssdeep":"384:K2pi0YNG7VN1c/QwGP4YZIcMroG98ZoqKlOL+K:liapnPQExZorYL9","tlshash":"9f424c2c0f64cdc0dace2e4e6e783e3b895479b2a97e8644daf5d6851b17bb0135de00","size":13028,"data":"","first_seen":"2025-11-23T18:33:17.324145Z","last_seen":"2025-11-23T18:33:17.324145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4444a7bc36954110c9988b72f64deeeb","sha1":"c60a7f9cb09d40ec657783ca188cc761abecaa6f","sha256":"9e161f8bc011b327d4a7579fe39265b8f60a5579c6380f0874e5d3c23eeeb404","sha512":"5123f3261dfe65b4eaf22918aea08a3499461bf41eea41312bb17295fb0bcd63ceee4afd097fb6eaa66c73cebda9bd78429f3a0aaca8dce67c68035dc6360b93","ssdeep":"384:YzK+o7ue0yif+cqbZh4Gp8QE62y55Kwnaea6tTzbjr5GB:vCGjbP4Gb1KqaeVtXj1G","tlshash":"8a82a6aeb662b02942b2b1b5463f140de1bb3c115844681df21191e5af71ace486efbf","size":19047,"data":"","first_seen":"2025-11-21T08:01:28.153855Z","last_seen":"2025-11-24T08:00:15.86938Z","times_seen":3757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8ef44bbb618ecedf332c9a7e2d64685","sha1":"19e41526a508085427f62b711143b00160c4b811","sha256":"de44061b927db5b4921bd3498c9f4635543b9036b332b069995d81bbe16d12c3","sha512":"6d78af3f28cd3c7097b20c5da2e458b0d54a55f09e68c0d7ac027e943280329e59ac303399716d7866494fec62156cc262de23ac25b180c21dc1d22c5216e9ba","ssdeep":"","tlshash":"8f319a7ca622dd4c6d336d77eca46b35c2046f13f9d8abc8182940532fe053d7004795","size":1706,"data":"","first_seen":"2025-07-26T21:17:57.104127Z","last_seen":"2026-05-17T12:54:14.783806Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50f72aaf09ac777616f989d98503b96b","sha1":"d8533da42d1211a6796b657786928aebd0dbca9f","sha256":"673fcf42ae98d79206f2d73ea08f3e1b56ea7b11e1c45747b5045214155c5d7c","sha512":"5a3efae2235c4a7660d7d0c09c7d1dcbe9f084989c1535ce8af6911695b3aa5d51d9e5ea5132924068112b2d0d73c1c329b2f259eb60500e720da5e910d1d0a2","ssdeep":"","tlshash":"2e51b67ca222d94cad73697beca82f31d2085f53fcd8a7c8081940963fe062d71047ab","size":2489,"data":"","first_seen":"2025-07-26T21:17:57.114676Z","last_seen":"2026-05-17T12:54:14.788539Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=UVxpYAjaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906448384\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=809\u0026rlp=%5B0%2C12%2C145%2C93%2C709%2C1174%2C444%2C935%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bbb1cb5249b0f469e9b3521ee36eb00","sha1":"f332e3955b0e1f930188a5d0079bfe7daedfad9b","sha256":"d19f9a221a2330d9fe146639cf9d2e25b771589ace08e6913106a36a93623963","sha512":"e0febd91ae4b0b9543325919e39d06aa5bf1ddc63ddf6c3a707f1c9c1310451a5889ceed09240cdbc3dc330f8e69a5843b6fd6ee70079cd98bf8f88cf5e61c90","ssdeep":"","tlshash":"ce41867244d688f29cc7ec88e1a94e58b3917ad0c9b36503ffbd85729c95eb2063ac51","size":2165,"data":"","first_seen":"2025-11-23T18:33:17.306023Z","last_seen":"2025-11-23T18:33:17.306023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5196cb2f8296391d9596395e6b41399a","sha1":"e9bb71fd17583e2d6b2dced6192ccdb2ba4bd4d2","sha256":"756eab8094e2efee1557f58fe66ced53c463649a256047fd96bc0292d38051ca","sha512":"40b96b826fd3284d0dad5abcbdf6f5decc8b7253277c6aea3083878ca7c7f206a6a8de8c5f28b871eb49f341421a7e9d32a81ae39f5b1321c82ba51f6a31a335","ssdeep":"","tlshash":"81319a7ca622dd8c6d336977eca46b75c204af13f9d8abc8182540572fe053d70047d5","size":1706,"data":"","first_seen":"2025-07-29T08:08:49.95066Z","last_seen":"2026-05-17T12:54:14.789853Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/bootstrap.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-12T01:54:32.230177Z","times_seen":27069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"321774eee25a2f77c2af047d184ba28f","sha1":"2b64aec05ec2027c30e386211333612c72d10d63","sha256":"229216280eb5fe2e1313affeb479c2447502210798bb41532b6b0c9bbad725a4","sha512":"a0a3d3fdb3deb0d0c41ca6b576da86fb98bb66c79a242f778e53994d06757badbc1ec84fdb7f617cc26b4af785b07a5b95e632c560f844f8b5264707f1f27c50","ssdeep":"384:/zK+o7ue0yif+cqbZh4Gp8QEq2y55Kwnaea6tTzbjr5GF:YCGjbP4GbvKqaeVtXj16","tlshash":"d2a2b6aef662b02952b2b1b5463f140de1b73c11d844681db21191e5af31ace486ffbf","size":22761,"data":"","first_seen":"2025-11-22T02:06:02.743607Z","last_seen":"2025-11-23T18:33:17.354019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67848a7646b5242539b7469cf3ea6f5c","sha1":"494166ccbf865ddcdde587cbf32ac7deae05769e","sha256":"855393e2b4aabc6b634d1000f6e3b8b070d5537acbafd5d7331999713491fdc9","sha512":"1b6f7e32e8d76595a4ee5d859148f5ad8ea4eb369179a4272ed89a60045109a94c0e57a26f9971990fc06d9352b8369fb7de59b7db43008bf1b77e45c2271559","ssdeep":"","tlshash":"dbf0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":492,"data":"","first_seen":"2025-08-09T14:08:40.213609Z","last_seen":"2026-05-10T11:01:09.087002Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3214fd68b97480272e2ffbd4c0bc3d8a","sha1":"5f832f2d5b9625bf86e406a0402f2f4723f5f9d8","sha256":"5530fe6ab4fa4b7a03df4e597030da2b92ac65e9bcb62f81ac9fa1a9af908c6e","sha512":"c65467443bb3e630dac7c42c091fc8b4edd4034a94bb88df47461709ffae3aee93dc0397ffd544b7519901a7788997693b1084e4301e33da025dae28f097e8b6","ssdeep":"","tlshash":"1b111f731a19f03a4b7209e1e2ffcbb1e582742cf15c85e8a559dac81e79dcbce04985","size":1051,"data":"","first_seen":"2025-11-22T08:51:35.626014Z","last_seen":"2025-12-07T20:48:17.144248Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qt.calyxesdefames.com/tpMk5N8tJ1h9wL/48005","fqdn":"qt.calyxesdefames.com","domain":"calyxesdefames.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-06-12T00:01:08.239045Z","times_seen":15045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fikquctziqku.com/fabomjv/hic?zxGSdu=fRm0\u0026pko=5\u0026wn=_amerbgvbceqypelcrjcpzg\u0026hg=2587053\u0026amjb=cz\u0026trf=252895\u0026cd=unhxmb\u0026dk=3\u0026yaa=zt\u0026bipgpf=841056\u0026suz=aq\u0026yn=369406","fqdn":"fikquctziqku.com","domain":"fikquctziqku.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f06e8e2a5fdd70c9b14b5f2adc5e8db","sha1":"a0fbf814d11a4a4cae979fdc6984e65da96d965a","sha256":"45b093c8b182312d28b694d56b37068bbe4926af37a8624ed60e0b2370e2644e","sha512":"bff660fd47f02ae19ecfd4bb828999d752bfd98cc2582d0a7bd558be20fbca3eaa300076b7ca6397155053011975882bfdcf5de4159be90672c51c2ab34cdacd","ssdeep":"","tlshash":"9d4178b994a3d5985ab4c80fc6f92d81210facebda5bdb632304f780a6af9745503906","size":2152,"data":"","first_seen":"2025-11-23T18:33:17.329506Z","last_seen":"2025-11-23T18:33:17.329506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e52b82f4b33f6fc7b3e21239d4446dc","sha1":"f350e723feeb890ea06b357f8d7a35849739ae95","sha256":"75c068ec218bc970c4f015376ef6cc58b5c9d2012c7a85b81109c4c0a10e290a","sha512":"ac76d537ca54b14263a818a810f52d38f9a5dc80e94edbfc3f562b5608ffd02314396d3fd57abb867422fda91b66289414bcdda8787aaf0a61c95ece4d9b9f5d","ssdeep":"","tlshash":"dd51b57ca212d94dad73697beca82f71d2049f53f8d8a7c8081940973fe066d71047ab","size":2492,"data":"","first_seen":"2025-07-29T08:08:49.95444Z","last_seen":"2026-05-17T12:54:14.790751Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c95e1cd370e9b2f4133c00b0bb7537","sha1":"953198508ae1163753c84a98164743cb58cb5489","sha256":"782738a194c52a5b88a1be2e187c765431a1c7145af62d1ae4bfa8c2d3fa166b","sha512":"632f69c86b0b229fcc1311bf2d4c4417e1c7dd63d7c0f66eb4c15ae4fea1ff81e36987fc3ba2ec531edb9ca8e4a8aad648071d19b3fc3318e5461b6dd1ccac8e","ssdeep":"","tlshash":"3af0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":483,"data":"","first_seen":"2025-08-09T14:08:40.229956Z","last_seen":"2026-05-10T11:01:09.086153Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"438b773bed4586358480b9a155844e21","sha1":"9543860d91a853b9972510e57bedd7397dc88101","sha256":"0cc58ce3f40c8975378a2d6c9f42d54521a3d7909497fe938e6eeefe63c19528","sha512":"5d305a1c33b58b59de674376bc8da4b2d56090adcf06ea1d42ce99bef550095c13e12e0fc289a75a29f83734da7b6b4fbc8718a9eb643c92f7e1119d549929eb","ssdeep":"","tlshash":"1911d51af6d39039113b66f44437d70c7062200af907cb68f99c86e00f9c9b25763d9d","size":918,"data":"","first_seen":"2025-11-23T15:31:42.605125Z","last_seen":"2026-05-10T11:01:09.044039Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c288313aa31c35484dac313fd890d03d","sha1":"b0a2d77d50855ab2080b3474d4dae5f8de56df33","sha256":"88c1d549997a998b0b70a092938b303449bec6fa4e22399b063d56b7655eeb6c","sha512":"c5578f34f1ce4f6746a0615e326fcfd4a8157fc479249fd47b855050daded4e4d854cd0edc281528757855257e07274100f6eb864034db86fb17e6384f7cded3","ssdeep":"","tlshash":"71f0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":507,"data":"","first_seen":"2025-08-09T14:08:40.20042Z","last_seen":"2026-04-21T07:02:16.766969Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e728cad9ca197d640a61de5303a42cb2","sha1":"0ba33f7415fdc5a1c8a2cefd3dfa2ea481ecc28d","sha256":"7529314f8d8682d32131ddb024914b570d7074a4e024c3a301db3c72e1d8d4fc","sha512":"857498797fc3525a6615a3e3eea72e67347fe8cb693bf8faf274e3bcae2891f1b6dd20eb8c15db53a0dc0c4b103500eb39082a5a823219e3915ded4619e840e0","ssdeep":"","tlshash":"4231887ca622dd4c6c336d77eca46b75c2046f13f8d8abc8182940972fe053d7004795","size":1706,"data":"","first_seen":"2025-07-29T08:08:49.956107Z","last_seen":"2026-05-17T12:54:14.791602Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ae021741b357a356a1f1e697bd6cb5","sha1":"15641a59dbbd3b7986541e1d58ef3162ab345bc6","sha256":"0dca20eca00fd249d778485e40d509e2b23716ad642a42b396a79ad01485b8d8","sha512":"d0acf8b7d14aa3294701a3af307cecff1c775e7175ed4c24b5690813880cfcb1c70461747a9256407f993e26a138272d43c2c40795cb493bbe00a942aceab064","ssdeep":"","tlshash":"3c51b67ca222d94cad73697beca82f71d2045f53f8d8a7c8081940973fe066d71047ab","size":2489,"data":"","first_seen":"2025-07-29T08:08:49.958569Z","last_seen":"2026-05-17T12:54:14.792218Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f0e0d36a6e4ab26f169c9f5b8f70323","sha1":"d496a33ce750b78c5852c105284ece48134fa6f3","sha256":"7d659ba541f141580e216ed59e30147077652599542b5baa99c72453b067d4b8","sha512":"38fab4abb711c0ec8acfea5dbf64cd2cce1535d495395c5e5c44cbb20e715b6bb385a734230d19a8a581c2a1cd725f734b0546606f777e2bacfd9b0bb4b4f54d","ssdeep":"","tlshash":"6a31887ca622dd4c6c336e77eca46b75d204af13f8d8abc8182940972fe053d7004796","size":1706,"data":"","first_seen":"2025-07-29T08:08:49.962356Z","last_seen":"2026-05-17T12:54:14.792753Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7610c2445d15989e68cf85c3d6498250","sha1":"08a3916b8f28fb24b80e768dd9df0f1f26e290ef","sha256":"80a5df2c1bc59a88947bf24e3912a78f72ffeaa5b0902bdf8ee5f0c2e01035a8","sha512":"46459be0621e0df3937a52164efbefec72c637169f8175675bd938cd5bf790316151547646bda437cd71e06c46928ce2932046ef7ff571060d966d6249d701df","ssdeep":"","tlshash":"c511d51af6d28039113b66f84477d70c70622006f90bcb78fd9c86e00f9c9b2576399d","size":936,"data":"","first_seen":"2025-11-23T15:31:42.656654Z","last_seen":"2026-01-02T22:02:05.550043Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0ecd649be6f1219e7e3d3d085f4205","sha1":"976a9d069827ca738763c01da69d563ff1e4a466","sha256":"752676a8dfc9c9c22e2b825b16c67457390f4ac9a4ac07c20f6a204caf766ec2","sha512":"79f528d6c83e6f86265256cbdad8787cc3b63065f666c4925d07dc655925a53e9b16d350cdc3c38e1d1cc421905a0c51ef6b51411c7aa7f9ba384e9c0c3f538f","ssdeep":"","tlshash":"6811b11af6d28029113ba6f44467d70c70622006f90bcb68f99c86e00f989b2576299d","size":939,"data":"","first_seen":"2025-11-23T15:31:42.606479Z","last_seen":"2026-05-10T11:01:09.090184Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9553f8c4041b54650136b7c79f4c639","sha1":"ad8e214f09248641866ea7bc16229e9597525825","sha256":"3b2f37716207f48b49f36ed7701bbee1e9d675ce68798707b9555c553780cddd","sha512":"1f188dac16055436592fd86ee2fc26cae264f4ff499cf338182fa29400bd2f7bca3582967ef9fddb41c67bee37e28638cdfea36b0aa27605166c4468e898dfc4","ssdeep":"","tlshash":"3551b67ca212d94dad73697beca82f71d2045f53f8d8a7c8081940973fe052d71047ab","size":2489,"data":"","first_seen":"2025-07-29T08:08:49.969404Z","last_seen":"2026-05-17T12:54:14.794133Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f04465bf25b535a78d05f64abe6c1742","sha1":"ede4073d3d37b1d60ab3a3b5eede460f2528dcbf","sha256":"93f12d357f76b8dd0244a16ba8481f240f68fb3a45020c85bd0dea457acd3b1f","sha512":"1b6caad664361e0ca29bc44d1a45d1df21de3dda14d9cf67652614286faa642909d3cd46b3bc493c3177cf152c3b50c4e806255e8ddb79fdd2a5ff198f5c1de1","ssdeep":"","tlshash":"3f319a7ca622dd4c6c336d77eca46b75c204af13f8d8abc8182540572fe053d7004795","size":1706,"data":"","first_seen":"2025-07-29T08:08:49.971739Z","last_seen":"2026-05-17T12:54:14.795834Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"ffa9ff55532ed93b46f22009fb35989c","sha1":"a6a7c5e30286b0428c917ee1fbf22abb71f5ae64","sha256":"f78fab1a828a5716a917db734cb35dc41ed518c93b99961806968a910853e90d","sha512":"5054069690d82b7a23d6d62fc3afa6c7fa053f7180a13b5394696809b90419032be49ad870917f3b154483c8bc971c2c040a4bff4443be6d284d4d5f1c21ae5e","ssdeep":"","tlshash":"445000f0000000330300300000000c30000000c0030300c00030000c300c0000000030","size":11,"data":"","first_seen":"2025-11-22T08:51:35.669506Z","last_seen":"2025-12-08T07:37:45.141879Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c68723823162e57a83efa2488d03fd66","sha1":"2993ff01a685761fb676b272f88ed1738ca5ebd6","sha256":"caf5e1ce781cea783dfd9d956b24885b8c9665089dbb1e45cd1ebf8bc19c6035","sha512":"1046a624350e979e8a8993294ee218a92df5c53daf2a56371652187645c1a678a5f7df4eec64300b5655d83e9550e4cb9ebb79fd628f12dc62323fc7e8f644b5","ssdeep":"","tlshash":"5751a47ca212d94cad73697beca82f71d2049f53f8d8a7c8081940973fe066971047ab","size":2492,"data":"","first_seen":"2025-07-29T08:08:49.973158Z","last_seen":"2026-05-17T12:54:14.796662Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"999ec77e0f4ab560916cef8c93a87265","sha1":"cf237f82581da457048e8de97cf84225c7371073","sha256":"83516dd854126226bdb5ec0e0a3d1cc08822f976ce15234120eba88e1db5cb7f","sha512":"07ca539e09525c165816d5990681c638ac2eeabfb7014e274802798f10ccee09701b196fecf6167b381bcb9e08f4231f42737e2560c9f24756a405e746c17aca","ssdeep":"","tlshash":"e011d51af6d38079113b66f44437d70d70632006f807cb68f99c86e00f9c9b2576399d","size":912,"data":"","first_seen":"2025-11-23T15:31:42.619938Z","last_seen":"2026-05-10T11:01:09.077098Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e2bcc785cdab2e1003f3ab105e4289b","sha1":"3c836fdfde25ca86a8fd97e401cd6dd9df4b77c4","sha256":"1f742e02d364354e9dddb6c7ffc28eb15ee204904f59c32ed6958e2378bac40e","sha512":"0ad2ace1fea3052707b927bc978ec60ff0c4e0913309964870e5f7ffee186f1422dfe6dde788507134bb54fd7d722543b8f6f8c04ea8581ec06605c1c2694024","ssdeep":"","tlshash":"9a31887ca622dd4c6c33697beca86b35c204af13f9d8abc8182940533fe053d7004796","size":1706,"data":"","first_seen":"2025-07-29T08:08:49.974756Z","last_seen":"2026-05-17T12:54:14.797466Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd1f5193a9068e77de100cb27afc5d7f","sha1":"4ec12153919f04c815c7affd98cf05386f2d8da1","sha256":"69ce2b7a42e077f03422d042729b9bb25677999df5622507cf7f880b62398a2e","sha512":"527f0b8299319b8a59c2589e569f231b2ba7ee00cf5fae6249fb4abe044f93c6ce4ee1b73e5039c195124bb8f669d6b3d126efc01dc7b23b02ca8290d699cc99","ssdeep":"","tlshash":"7051b77ca222d94dad73697beca82f31d204af53fcd8a7c8181940963fe052d71047ab","size":2489,"data":"","first_seen":"2025-07-29T08:08:49.979045Z","last_seen":"2026-05-17T12:54:14.79926Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8109e47dc642325928c847ba7834e7b","sha1":"08d99f57cc17cc942dd57a81d293901fd76fe5be","sha256":"5f9bce7c22a87af3921e5c418eec498de16ddbe573eb30202b9ba5444a5ef8e6","sha512":"d6942804977cb54584c1f36b822e8785ceb97ec349f42d2046142c138ebec8d401a024debac5c02d32aba30888d407d2740dcc252f8477b4d0b8db67c2ee27ac","ssdeep":"3072:vjm2cTaLN4nJCi/ZbFHyYFuit3+yMfwp6ya00Yg3UokxAELd2cj5pAAbXGYLcY3H:rBtB4nJ/ZbFSYFuitOyMfwp6ycYQUokl","tlshash":"d90493dc3b5c2075411373af9c2b2525a8fdbcd3986d40079cebc284a9fa649e633b56","size":187418,"data":"","first_seen":"2025-11-18T15:27:47.394769Z","last_seen":"2025-11-24T11:59:21.817725Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vhdBIQ2aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=7433949836593664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026pload=1516\u0026rlp=%5B0%2C12%2C145%2C93%2C11207%2C7141%2C993%2C6902%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8687a86c244e52d7da1f4a00b3064c27","sha1":"08d4f95af71d35875e56de15326c812d328c02be","sha256":"4f2016fa73aed7e31f1aa0f2adcd9865b83105ead0fdd6f20d3ddbe0cbaf7363","sha512":"3927a697194e94df952bbc55b944d0db92daad1c8de52eb50b26e9a430e771c7508242edd544c8cfbd6dc5a73a0cf11695d5252f5b8637488d735b378d017b9b","ssdeep":"","tlshash":"8e6181ff14e6da98cd4b8f14163ffde434814956bf52f608a31e48d5a8290eced191a3","size":3284,"data":"","first_seen":"2025-11-23T18:33:17.306955Z","last_seen":"2025-11-23T18:33:17.306955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-12T01:47:59.12489Z","times_seen":466838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"903cf84343d5c8c4131528b73ab9e088","sha1":"2e67b696e6a1374587d9091f19bd1317537ff899","sha256":"2ee3b5720ee52fa6219775e81af823e814888630f9d6a3963a8cf4eb51019a88","sha512":"de4dafbb6b892357e701e4e2cfed91a9afc65902fdd87b1860b8df32ae53ec5e1c1e0ef056ff3d029ed3bd5518dac763be5a09a0c8261865e4448b9ee67e7c96","ssdeep":"","tlshash":"6511b11af6d28029123ba6f44477d74c70622006f907cb68f99c86e00f989b2576299d","size":933,"data":"","first_seen":"2025-11-23T15:31:42.623865Z","last_seen":"2026-01-02T22:02:05.541472Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a2286829c9f36ea1f3163d570ad20f0","sha1":"16a31746dc3175cd4a0cf4c882e6104b92d128e5","sha256":"aca4ae1e41e43dd3774f5adb1093bd504243f14ec00eb43d7125a98f8d542d9a","sha512":"f224c166f3977027d23102caf547683443070e2884ef4df992dadc3103e0995e993d14b4e23195d487bc855a6aa49a1f32a5d56ccc5390e6d55a85daa851ff54","ssdeep":"","tlshash":"6b5103cb6ea5f043678c2fa3dd2a55fbe16ee7d174847e03632875cc6814d02f055aa4","size":3005,"data":"","first_seen":"2025-07-21T15:03:56.217418Z","last_seen":"2026-05-17T12:54:14.801037Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2dda4ef72d58e2738ed071487ccc6ce","sha1":"7e02ef106288b78bd0660be912d1776c35f7517e","sha256":"927a897fe2f6f5e0d6991bd1a4efc2024df5d8c5915f1b3eb563111223a1e945","sha512":"215eba06ee66054da78c9c38edbc6806f1643b1330704b125e0f28aee1d82e48ec057a17a240a8df5a000f3ed5aecb3639cb0f307734d94f13684351ba478967","ssdeep":"","tlshash":"41d0e779454b5e1c316902d4175b241807376f239140590dd58c00d028f0bc4c1e1933","size":288,"data":"","first_seen":"2025-11-23T18:33:17.367075Z","last_seen":"2025-11-23T18:33:17.367075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35eda7548f3ff40adcf1877be67da01","sha1":"89ce11d1b551fb9514b3db3efe9c6f9f6cdf8671","sha256":"0e1e07b4118b91f851619e79e9da6022f5404bdb36e6d4f01c6f28a9a148be51","sha512":"ead2006714feec2656294502f67a410bc07a93ebf96f2f956880d7568418d0807c0765d94a0abb73294172a388351038427b269e16023b726040037627ea0e50","ssdeep":"","tlshash":"a5d01213ed0deafc121824d26d35d1ea743cc6e4f913fa2799bfb95852dc94c094ac14","size":207,"data":"","first_seen":"2025-10-08T20:44:31.026286Z","last_seen":"2026-05-17T20:55:45.493913Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41cc58e5da3a06326891b8646afc7548","sha1":"a4a725eadb523ca5dee8b3a9a411357a8ed33976","sha256":"ecbb8b7b69fb79c8909082c10e5d79f11b280d9a089cfde1b89f08f8364d25af","sha512":"5c68fb1b10308a2b8561dcaad54ba92ad0722a8a36315f9a5ddc3aab9194901393878932fa0af3870dec59ee6956e9863a624e1f02b4b23c5b5190d76acbaaf2","ssdeep":"","tlshash":"c8c08036dc60017518e5145f3b17b7cd3976dc41d6026450844b9c5454e8923c5379d4","size":176,"data":"","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-05-17T20:55:45.505678Z","times_seen":618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe6c4d101b6712e3bba6ba8524a49774","sha1":"cce6fcb23603f900ff76c9b3bfa4029916f702ad","sha256":"e7a1c523ff485c618f62811115262c5c2accfd7308cfb8e0d86368a28b4be823","sha512":"739f53e5c586533018b21f0653b4cdc12915fe41f42d54eb951e8d0fd7f442fb9548295f255b294d4b49ff15344d6e5ee4c275a6e80cbbcf2fe61bb7a9f34b54","ssdeep":"1536:Uy73qnYJ8nuCIEpkRHP8cO60LIVAefVV958p6bQozQkd:pqnShicALSL/9HQgd","tlshash":"c263b026b35330efefbe8f515be1e7ad233d58892483049c26eb15814a78ad167791cc","size":70636,"data":"","first_seen":"2025-11-23T18:33:17.369772Z","last_seen":"2025-11-23T18:33:17.369772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9613fbc63156497bd7ea33e5a4da7409","sha1":"b74e7b9dc095a489044be3c1109872bc6fae224a","sha256":"23855cdbb4ab99b12b9273c16e5f4e40834caadd9c1be0fe1872de1638e80ce8","sha512":"cdb069bd9366217b0b784969ada5ee64cc99582095cb953ab529bf53eaec93e881d99ae6b664d511265ae0f59b6665196cf56a1153e9ad525af5dc4961fd532c","ssdeep":"","tlshash":"d911b11af6d28069113b66f84427d74c7062200af80bcb68f99c86e10f989b2576399d","size":924,"data":"","first_seen":"2025-11-23T15:31:42.661547Z","last_seen":"2026-05-10T11:01:09.070284Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5625c618e763490752acd4fde826a5a3","sha1":"1367f0e096dffbb88381c77045c4b6a67cdf9b83","sha256":"ab62a88a9bf44d849e36ae528ab6d7900bf19e1d1b9e2b8387ed353b405357af","sha512":"18c2af079b52e754b4f81256cb4b032745ab1917e5ff00f91cea7e31420fe8b1e7b5b1b4adeed39a81aee628796f121e93c4a2c8e63bba592f315b877c604977","ssdeep":"","tlshash":"e0d0c98be39c6fba373a2d9f0515e0eb53689d92b94dbc0098608400dd87635714784c","size":217,"data":"","first_seen":"2025-07-21T17:00:52.790308Z","last_seen":"2026-05-17T12:54:14.811283Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"faeeec67bf267b3875b8af356cb57e7b","sha1":"aaee21ed5ad32eed9f5b7c8a71a66d63cf0935e0","sha256":"1918cc3f5d8a24db6b09dec2df383e24ef239d0c6286e1f9321d52fe7e80f94b","sha512":"7030ba77874e424d18a5c79ad13ced97c1a53b4ebafaa78e694bff8ee85ab8a4f96a242b2c32d54d87cf79590a7146fc29485538a56597c2d33db3d7a3cbd3ab","ssdeep":"","tlshash":"d8f08b44e37d2437e93a6583cc1a3085c07dc1ff02188c9ffc35c5101da81180a31d36","size":616,"data":"","first_seen":"2025-07-21T17:00:52.792054Z","last_seen":"2026-05-17T12:54:14.814526Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0b3bcede1fd2b542c1823591be7332f","sha1":"caa0cb294406b1bc249993246411f21948798188","sha256":"d1b60e8c9d3912f61d0d46dce492bbd66e0e4e301e692f3c3d5362a50695b057","sha512":"21d439d00ade2d33c9fdbfdb5affbca025ea7f7e602b23ece4562ccd54df757af5e1253558e3229341d6b4a2e9c3575ab1c39c757e72d8f8b7ad7c3bc886857a","ssdeep":"","tlshash":"cef0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":498,"data":"","first_seen":"2025-08-09T14:08:40.187758Z","last_seen":"2026-05-10T11:01:09.0281Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"766c88fb3a3034c083a80133e5a6e36b","sha1":"baeba6d89fcc7be3e202402c801d0c1a164cb9d5","sha256":"5b86c3f43a9ebee9a52b54fb1b8d82e02e4eb000e51b8699961b9b5d6f7b66bf","sha512":"de0d17b95adb3e926e1eaeb7e3fa41277a5faa23ea4fde3b9ff1db852ff89581f6dc080a891758eae801858e76255938dc6b9239ac55a5b300257fed9b1eb722","ssdeep":"","tlshash":"4ff02863b0a20c34049946bb2b8c01592ae0b3e7982154f6c84a0670b4547c269bfde1","size":558,"data":"","first_seen":"2025-11-23T18:33:17.373591Z","last_seen":"2025-11-23T18:33:17.373591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3eeb479c556b8bfa11807a2e4118f7f1","sha1":"7a1ce85cf1b76297b9dc3b975ff7cc6e3b04fffa","sha256":"c60d45dd392a5d8d1bda6bc476c203eb9b83c9cca5d582dabc5b777679b8d7b7","sha512":"888fc541fbec32ac7dbf1e85a8c8327048a0b027e51bd5acaaea7f0f00e11aae6ed89873891209a96242bc3523b6803cfeffb2f34167772929828f18b50a4aca","ssdeep":"192:F4+vqmUo/gEKY8/3Vn16FuUuzKnfdo8E9wqpbztyksr6aBvWDGNb:NvxUo/lKp/Tcdnfm8E9bzskU6ZDGl","tlshash":"270209b22282e46d83a50ced617a6868f07a0941344bc194f0fcde573c27547d6f2ebd","size":8530,"data":"","first_seen":"2025-11-22T08:51:35.663201Z","last_seen":"2025-12-08T07:37:45.12612Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6336373a6da8bc3c8e3dd17a16e23661","sha1":"1a4af05fcad4abefb705cf250960441e5c6693b0","sha256":"eab10305ef1d0ee74e3ebbb2d527a5523d5a9b7fe1e436fa53d19cd6cc801cda","sha512":"d1d01f84b8c5a046dd1bd14a7a6a755b56e45f005e6a8e7569788e16821681328fed41772e8162152460fcc8bd40824e9fdafc347b86e609f01584b87dfe66ac","ssdeep":"","tlshash":"39e0c0e67cc4903683b622696263a15d7316293e584d5c30c51e8862787acfd0c5b50c","size":367,"data":"","first_seen":"2023-03-07T13:50:45Z","last_seen":"2026-05-17T05:06:46.408313Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3a47d675e7cc9e5f2d5869728a7f4f7","sha1":"5f637bc829920c68ee3c9c423afa5a69f3314909","sha256":"26c2da928d66b18f1699b3857b1b8a02c8289824e75e433460fa7189b05ca3ab","sha512":"7cd3b8f5538c8b2421d5c09bed9614becc074207b2123656981abdf5697f233f8f55e35096200a335924d80f4d9bbaf2bd2ef9d4934e91ebd9126980a1dfa1d1","ssdeep":"","tlshash":"0ae07d64f1cc581548b33a958437d6986b7f3902a9035384f40cd2918f1caf06063a4d","size":308,"data":"","first_seen":"2025-11-23T18:33:17.375855Z","last_seen":"2025-11-23T18:33:17.375855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/aas/r45d/vki/2063262/105dadc5.js","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a6804f1a7200b0acc176dcb7449ebca","sha1":"c8145ea2c561b6220f965c7ddf302e11198d0363","sha256":"f29f89e4c4abbb3cbb58cd7a4565ea68318f452c16642f29c63db28a5bee83b7","sha512":"f7d20d2094b40816c01dc25d24f80e2b4a3a48cb68050f00546fbfe473b47895cdefde293e2e5d8cc232d0d1e125c4454290d048e37b422113e30cd157a1284a","ssdeep":"1536:shFi9uwX4u7bbP/gUds+NJy93xA3o3Qc6dgsPShdMn6hmKn0/XHUynP8MWL2WA6:shgHJbbgEwLA3o3Qctp0PUVXA6","tlshash":"1fe3a58caea7a0354206a469083b7a0f632b17d1ed6d40c494b7f5c83d6f446e916ffb","size":154930,"data":"","first_seen":"2025-11-22T08:51:35.629311Z","last_seen":"2025-11-23T18:33:17.333615Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95929e166689f9727f7df9ebbef71c72","sha1":"890128945d42b9cf00aea226480aeb3313a5bb2b","sha256":"d7d0f8b641bcbaf9e7ebb71031809213c900ba917d57bd468984dac829a9a83b","sha512":"41526399ddc3cc4f6255150e692095106cf789887eb9189466a665fc4a5ff2d2b7767ac14a2686db285b004b8023df85ffc70adedac12a7e4bbf707c7ff2647b","ssdeep":"","tlshash":"cbf0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":480,"data":"","first_seen":"2025-11-23T15:31:42.672489Z","last_seen":"2026-05-10T11:01:09.078226Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c2f7e11f3b0dd6b270f51cbd3420701","sha1":"5bf3d306404468c2499ed4a5ce4357a23537bda7","sha256":"e13a78b41a602cef4c726894548da1bfc970081fe1bb73b0e452f810ac541aa1","sha512":"625b6d310d0663fc7e813224849b3fb400c97819a7426bad7fd85e2a65eabb75453e57fa0a1418c2d85bca1db58b59387cf32ac36c4c0ab473edf74572370c58","ssdeep":"","tlshash":"daa0026ebd0ee8160d7561564537011bad9b741076d01a44d8768f95e77019e1a028e7","size":64,"data":"","first_seen":"2025-11-21T08:01:28.129964Z","last_seen":"2025-11-24T08:00:15.870103Z","times_seen":3763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dbbe4e70b5df349cb500e8b7f28f8f8","sha1":"c182c6b61b405f04493371e03f037519f167fbe0","sha256":"7d19a0876758fa07d9597e48539e9af194a748d3948b6984786923fc92616721","sha512":"d2547b0c1995f78232ef99991713075af2770e85979c84de3f607eb077bfdd039f08640a1f9b2f454ffec8a6af99a96d83299ee6a7b84311da0339ac1b3ebf31","ssdeep":"","tlshash":"0ff0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":501,"data":"","first_seen":"2025-08-09T14:08:40.175514Z","last_seen":"2026-04-21T07:02:16.743335Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff1c13adf53c0f263bede33f8b267349","sha1":"3cee67dca954d7e071b7bd4e6ca61f4183b25502","sha256":"215dbed2252264cd8b141f3573753e9f5e59b39e836a553d326e32560c6492d3","sha512":"eba9cfc038870193c424d5d1bd828cb24d9e8b4164703a791e2eba19ac2797d8815c8f0385d77296cf575d1e7e156b96f9d0a2682bced326502d58cf3056be4c","ssdeep":"","tlshash":"5ff0df0ef6f61236103727b9823bdb4970a2200af808c724bdec46c00f948a51b428a9","size":504,"data":"","first_seen":"2025-08-09T14:08:40.19063Z","last_seen":"2026-04-21T07:02:16.774886Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d279f5a2e4018216f4546638e0926efd","sha1":"410238a9d7e21fa5583866d77e46e6779c0b9f77","sha256":"fae4a2a17d0205a5b78a8619e24c2692e6b81ffd579081ae1006f2bd749f02ad","sha512":"9ed60658e63b791b81766b4963ba64d1800f494df8dfb7f1cb96264995cbbb384e6d76c113e8a81402c920aa7d2fec993bf330df8a1b5ea59039ee656ae98e50","ssdeep":"","tlshash":"b0e0d8bea9b8228f336330275abe150dfd1f9013741d6e107edc92849fa8c9e4456f55","size":375,"data":"","first_seen":"2024-11-26T12:17:47.378119Z","last_seen":"2026-05-17T05:06:46.408925Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"9c34848f12d946858d1eee02d0ada7f4","sha1":"6757d66ed95224472a8d5b560a7a7efee9e528ab","sha256":"d6fd281b17b58b63f99f1bc59619390e0a2eacccbc4a3791cb96c67c03329a62","sha512":"eb750a27f389b149eef1af5b613b56e346179971df36c03dc15e3110f5956f3c011c194a82fd8ecec0d4cc7cdb1ceac424f0b4d82a5c6eba0f6f5e1284ef9d0d","ssdeep":"","tlshash":"80f0810b3ad59139013b77b5853bdb4c70a2700eb90ac729b9e886d10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.195773Z","last_seen":"2026-05-17T20:55:45.536044Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1ce0c164e3adf5fdff570e75989d8cdc","sha1":"73238ae4cd9bdf4966eebdf422f0d94629cad7f9","sha256":"c4ed6c0088398d2238a4bb64443cb0f77ccf5645dc5484547cc8ea52d8db33b3","sha512":"6f65c3962abf962f588661f4052a842d933c1e1665a843e7389207a5a1ac832fe230ab6c0129a000f829c78ef0463ccd96f3722aa72c115c113579cfad3ba062","ssdeep":"","tlshash":"b601121a35d69029123b56f44837c70c7062200ab80bcba8fd9c86e00fdc9f65b6299d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.18067Z","last_seen":"2026-05-17T20:55:45.559018Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"851af9e549a404eafda8c58fb569f834","sha1":"aeb0033a0c9edd22ffc6a09c56c31e4cbfa6ce7b","sha256":"51ac47ed225b1bff3e66a76c48e48839b077618ab750621b4403b51161789b12","sha512":"0eecbf6378b5c1595de79015db4990aa22045ed46cd7a7f989ec2dcd2a78c59d345e6c262fa9261e15c22abc80b8a9fa1fc639c04ad85b953238bfbae91166ec","ssdeep":"","tlshash":"f001121a35d68039123b56f44833c70c7062200ab80bcba8fd9c86e00fdc9f65b6299d","size":821,"data":"","first_seen":"2025-07-29T08:08:49.989479Z","last_seen":"2026-05-17T20:55:45.532733Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"719b74605587e0c64f2e2c5333c73966","sha1":"c6137055416e9d6bcba6f06d48df82971bf170b2","sha256":"2e90afb337a1d35861e2d9bde45032f332a696ef0f6e486896388b4b5aaeb392","sha512":"26c663ba3968fb4d2517014aaaa2e9557f8c1b3a8dbb1c46d38b9749a449c28941767bd986fee11f48feee3644746687708056f3fa98b78f423a1e5de5462a14","ssdeep":"","tlshash":"8c01121a35d69029123b57f44433c70c7052200ab80bcba8fd9c86e00fdc9f66b6299d","size":820,"data":"","first_seen":"2025-07-29T08:08:49.993164Z","last_seen":"2026-05-17T20:55:45.545962Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1d2284f70e2645bfae8e8396263a196c","sha1":"528f4fc4695fe4ae87bffc660e4d2fbbda320f4b","sha256":"54ba1e9d63e878e42ed32a8279479973b423fe14e7486e118f8358c961a12c73","sha512":"0cff096cfa588558a8f70a4ff9738a9996884cb539612471a6bc680947555e56f7be414fb14de102192e5a18507780ac37e1c3ead679d110e8a82eac548cbb25","ssdeep":"","tlshash":"529002066d05c0b4050428c51438d01910208554a122e51551a56008169958d4881449","size":44,"data":"","first_seen":"2025-10-08T20:44:31.119376Z","last_seen":"2026-05-17T20:55:45.546873Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a6c2e34f87fd8a2d8e9d30b5b6c0681c","sha1":"2efa3e651c8e48bcb4946ace6ee0ff71a485343c","sha256":"bc93ab2981ba2d638944c4ba2565f773a1c388c635756ee1f102cae110457eb9","sha512":"2d0a9137d3fce830947b40dc40018c1cbbfbfc3ebc70a1e402b22b9435ea682cfe5569857ffbe99da7b249e25f6e962d75f1038e642deee740ee96904ff5b00d","ssdeep":"","tlshash":"b101461a35d68039123b57f44473c70d7062200ab80bcba8fd9c86e00fdc9f69b6299d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.18838Z","last_seen":"2026-05-17T20:55:45.525003Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0201091899d7d4f252b8d532d36f6eaa","sha1":"9c43bb4097787b2988bdc00271606267af2231b1","sha256":"a8534a8af0475eae89a1ffee6b9778026fa0af7316364bc73aafb4c08ea92205","sha512":"a91f4e4538c2efcb8be291451f146ce289173ad14cbb9ecd085e8a42dde3541e7187ce75b82bad1f93d6d1aee6fd429907a5d934ce558c77bb6ec6810d55226e","ssdeep":"","tlshash":"a6f0810b36d58136003b77b58537db4c70b3700eb90ad729b9e89ac10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.208222Z","last_seen":"2026-05-17T20:55:45.526699Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b708d94761a537528a318b210bea7a4f","sha1":"d075ae54ba889055e3dc75bec51cb1435fe7153f","sha256":"c8e15b343dad4c80fa81484d17cea7e815f6fc72f04abe5e75df2c1b2f158823","sha512":"19ac732aa1222f8ea4d0e088341a9786acaddde9812ee24875209fbec9ca2ea27ed39dacf106f1fbe23c17574cd121ee9ce877d0647cc018637df559f2eeca43","ssdeep":"","tlshash":"a3f0811b3ad68139003b77f58537db5c70a2700eb90ac729b9e88ad10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-29T08:08:50.001297Z","last_seen":"2026-05-17T20:55:45.531145Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5630632c97846ced222ebb39df72377b","sha1":"cc70acbc29b624b0fb3a189d73c1c12a86ebf753","sha256":"4bc05a2ed4769107241ee5b0a106982ed74194d9f2fe2207520c826d0e3cbb28","sha512":"53319312bf86920e06934e5cecb33831aaca901a6de3c986f35c7e4355402f47ecb69647f2d1332b666a782273f27daee3bf31e178ae800c41a914731a2d09ea","ssdeep":"","tlshash":"75f0810b36e58136013b77b58577db5c70a2700eb90ac729b9e886c10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-29T08:08:49.984779Z","last_seen":"2026-05-17T20:55:45.552305Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bc1c88eb9ef42f5a5336dd8868c340d9","sha1":"9a295054e7cf929dc4862837efb092130818a669","sha256":"0f00aab093fb8f8898dbbdd8677be7ce487a1f85f9a75338dec440358a901c17","sha512":"e61435f53ef1e03189b57272f4aaadc1467389eff841fadfd1ddca1f03d95ff2664bf6428e8be2a1075b75fb5b0413084eb48e5c23c78b5eac5dcc13bff9fcc2","ssdeep":"","tlshash":"b0f0810b3ad58135113b77b58577db4c71a2700eb90ac729b9e886c10f9dce55b518ac","size":559,"data":"","first_seen":"2025-07-29T08:08:50.007521Z","last_seen":"2026-05-17T20:55:45.534988Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5c4e906c3df72f5476626eae1f598e58","sha1":"593786f86283d5f8d1cf62f9580c8cf1c73688ac","sha256":"ddd26809efba49233904afb411fd0d10bf52c2708ffa5a29657e9854380dfaff","sha512":"5aeeeb9e53b32e614b26fdf614ef2da15d56f7efc475ab7deef717014325cd6fb95363961b8960da77dddc8e2be1176fbe251afa0e007053b6e445ed107f4955","ssdeep":"","tlshash":"4301121a35d68029123b56f44473c70c7052200ab80bcba8fd9c86e00fdc9f65b629ad","size":820,"data":"","first_seen":"2025-07-29T08:08:49.991195Z","last_seen":"2026-05-17T20:55:45.544219Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9ea2cce10637e205bef26f5da2027487","sha1":"4aba030540d053ac0db7229b277204668caa6e2a","sha256":"c515681ce0075ffda08be425d8f58ff88ccf0b437fee331973be452e2069df6b","sha512":"6c79c3d20b3845f11836ab3f6adb2ef8ba8a4bfc4e4e1ec0cfb5c58d32c07871cb61f8cc4ca43df71b67ce6825505eeb564b367111021bf8486e5f4675336f65","ssdeep":"","tlshash":"2201121a36d68029123b56f44433d70d7052200ab80bcba8fd9c86e00fdc9f65b6299d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.21347Z","last_seen":"2026-05-17T20:55:45.520703Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"380bfff3410f86dd745f07172041e4cb","sha1":"cd2ddd2f6e161f2dd0103b64303f0ea741b1bbad","sha256":"182a7bfd9649244cebfbb53b650ba0296c63f1785b43ac84ddf761689c5e4f51","sha512":"5f2ea65014dcdeeebb6cb737430b8bc5733a3e5085861dbd994aaa00ce725c24a0daaab54d061e6cfb6d7d60d257d0b1591bc89449a532d09b825f64c02ba469","ssdeep":"","tlshash":"96f0810b36d68175003b77b58577db4d70a2700eb90ac729b9ec86c10f9dce59b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.184912Z","last_seen":"2026-05-17T20:55:45.521743Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f78367f7b8abd1e1986fe5df5fe3757d","sha1":"e6611dfe2ea7c1a0f83eb4e98548fd9c5dda8d9a","sha256":"d74e6742812416e81221337bd4038b33fce5276f34b5933c7cc0a8a27b992665","sha512":"1f81acee353e315cd3ed7d2e270a5664ab84cbe6993ab870f6667c50c2b0099f67868e70fab04c34250678fcb9d15d714db499a1ce4271cbb977b1f31f09d4fa","ssdeep":"","tlshash":"e5f04c0a36d69135003b67a58537db4c70a2600eb90ac729b9e886c10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.191031Z","last_seen":"2026-05-17T20:55:45.551228Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b3db1f388ca1b2dbf44fe50e5985c3d5","sha1":"d6bf6e4cafe72aec3e2976c514452552c2ba6c60","sha256":"a76bdb8b606da095ab7e52a19203a726bbf38263c1d9cd6acda48a7952546621","sha512":"3f774cf9799ea0b593ce9879ee1318b6eea5e37601ad10c648a0f9e0e582674884205a18ece0972c4b60defbeac72530c5d2a1f8605b39ac124b96f1b5b12832","ssdeep":"","tlshash":"2501461a36d68039123b57f44473c70c7062600ab80bcba8fd9c86e00fdc9f65b6299d","size":820,"data":"","first_seen":"2025-07-29T08:08:50.003248Z","last_seen":"2026-05-17T20:55:45.534117Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"180f75f1a69506226cfcb00e1492c799","sha1":"744aa852cce955a91ab3c80fa8bfe99068be1b03","sha256":"b871bfd191fde317ea88d77ed87764243179b737a1832b98e9d44887aaa4a076","sha512":"a915202a7fe16af116d98f7f45c3879815b38a5175c1d3f15ead55338e4069956d2536632879478f7f143db874d78ead86cc9daa95daba45447c9110799b5cff","ssdeep":"","tlshash":"ad01461a35d68039123b97f44473c70c7052600ab80bcba8fd9c86e00fdc9f65b629ad","size":821,"data":"","first_seen":"2025-07-29T08:08:50.009145Z","last_seen":"2026-05-17T20:55:45.556678Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d5b12c6d356bab17bc34b682dd4b66a2","sha1":"c5ed884cafa08ea09b521d2ebd904f9464da325b","sha256":"185a5226257fc9f151daea9790606e2c61b0588653dea6dd6e371a74e8f46557","sha512":"54ce291b6cb549d7cb450dba7fea0e269fba3b8eeb26865a1a17bf49b935a76cf7f9f8691d7a0b21be285c7fe7c97aa8f845b713c55c1ce032e5b99599c3d983","ssdeep":"","tlshash":"73f0810b36d68176003b77b58537eb4d70a3701eb90ac729b9e886c10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.21127Z","last_seen":"2026-05-17T20:55:45.547404Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cc7136a9d502ecb66132c2f67aa46156","sha1":"9ccfa9808dd5cf825273a1e1744711eaa45e7e4e","sha256":"98b360cf5e8859151e8c435f219b083110d5c32f1cf817da96dc7c9807c73700","sha512":"d0d02f2351a528fbbd86fbad91b4836b10123283ad82e3be4536d64d51c0c6f7c442412744d81d90096eeb91a12fe1a1f1a0e4daae6b71585163a34d9b1f0cd4","ssdeep":"","tlshash":"5d01461a35d69039123b57f44833c70c7052200ab80bcba8fd9c86e00fdc9f65b62d9d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.193127Z","last_seen":"2026-05-17T20:55:45.557987Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5aa99e769073b62214b9ff9e8712203b","sha1":"37394d58ba273542447ac532c44a0a7698998922","sha256":"3af807b0fdf12c46c24b6eec5373c2d6a6afcb595ecc43222eb4f6ece25d8f2d","sha512":"9589220cbccd53ed6a5cbe31f6382284928717f2481fc378b633d72726a9e587674bb70213f9a937a2c618a2d1c4fcf8357ac54cb84347fc910b713c2a9720b0","ssdeep":"","tlshash":"c3f0810b36d58175003b77b5853beb5c70a2700eb90ac729b9e886c10f9dce55b5189c","size":559,"data":"","first_seen":"2025-07-26T21:17:57.20266Z","last_seen":"2026-05-17T20:55:45.53761Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4018aa96c5f8ea72ea12e0a91860bdbb","sha1":"43a6dcbb5b22805e0b1ec5dc8bcb22ad8fff9496","sha256":"92eae8f3bb164bfd25faeb90190c4b775a0d2c00b7e6d027605d6cc9de8d144a","sha512":"95ce0ce6f18db8455f392d0268fe168a2df9cd93a434217d9ab6f717d1139731c432e55a338c547857c5db681ea4b8bc7f3645ff5d4f524b5c6c48711afd8f6d","ssdeep":"","tlshash":"3001121a75d68029123b57f44837d70c7052200ab80bcba8fd9c86e10fdc9f65b6299d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.205205Z","last_seen":"2026-05-17T20:55:45.539436Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6b44a0e4fc451175265d8d715c0fed92","sha1":"df01dabab2784b05befc878367ade2eb76532a4b","sha256":"76203b9697c62f7a3dc522ff5735080254882d77649b829e921b38a75325098e","sha512":"e2d8a00da6db4ca1961b0c777229be573762b0fa51ffa38cb40a0b1fe2e04a0f59a96bf6acc135513a961afed206da238f563e45354c428e81072bf62ee5800e","ssdeep":"","tlshash":"9b01461a35d68039123b67f44433c70cb063200ab80bcba8fd9c96e00fdc9f65b6299d","size":820,"data":"","first_seen":"2025-07-26T21:17:57.216165Z","last_seen":"2026-05-17T20:55:45.542397Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"28555ae9cb3e82dc6af4f3d6be8f8064","sha1":"a9138adcc741dd18e78d0802c7ce7e72495e7ac3","sha256":"5e1ec5861be0db0d20ceb8a1c81a466109d5e75c8484734536625274181c5c28","sha512":"1703fa3a7257893982a5b8555c057343da0a998eafcc1487522a95b6cb6bbb475936bb1da045d3124d7e3963565a79d6d3cd6aead0cc6fda639c8a0df23ae538","ssdeep":"","tlshash":"c8f0810b36e58135003b77b58577db5c70a2700eb90ac729b9e886c10f9dce55b518ac","size":559,"data":"","first_seen":"2025-07-29T08:08:49.986232Z","last_seen":"2026-05-17T20:55:45.545043Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"de4a5c36049cd9e2fda3d8e6e420f2c7","sha1":"3bcc9bc1c0d19422f373b7da28b96a9fe37d6495","sha256":"598b062979ffe660072c54feb7f01b3cabdac9d2e0ca1eaa2b257959a45c4550","sha512":"8d02282139ebb3929bddc90297a9fb803d2a633dded739bac8acfbf975b024660ef2f3afa7f8048b9a543a2b53055e90b1e294b230d7d909074ce31af56cde64","ssdeep":"","tlshash":"7df0810b36d59175003b77b58537db4c70a2700eb90ac729b9e886c10f9dce56b5189c","size":559,"data":"","first_seen":"2025-07-29T08:08:50.005038Z","last_seen":"2026-05-17T20:55:45.562255Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Nov 2025 00:15:00 GMT\r\nexpires: Thu, 27 Nov 2025 00:15:00 GMT\r\ncache-control: public, max-age=604800\r\nage: 325063\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-12T01:47:59.062765Z","times_seen":652146,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/qprK12e\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.revrtb.net%2Fredirect%3Ffeed%3D806644%26auth%3DGjfr%26pubid%3D221742"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.revrtb.net/redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmCJybHtTbPDRrq7MwSjd9gus3xYTgJ0kSNgMkKVKqaGkypad6y97fscEwSYHi7OUinyiPKxyMii0vz2UhZLigHjdAW%2B5CzYNeeiPU9y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c067fe9d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qt.calyxesdefames.com/tpMk5N8tJ1h9wL/48005","fqdn":"qt.calyxesdefames.com","domain":"calyxesdefames.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qt.calyxesdefames.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 09:44:23 GMT","end":"Thu, 19 Feb 2026 09:44:22 GMT"},"fingerprint":{"sha1":"10:CA:9E:88:EF:B8:B0:07:1C:F3:FD:35:48:B2:3C:8A:6C:5A:61:58","sha256":"04:B0:74:E6:98:55:E1:0B:4E:B6:37:E7:2C:E6:52:7B:AD:32:CB:85:77:A8:51:63:30:52:57:18:65:50:BE:4F"}}},"request":{"raw":"GET /tpMk5N8tJ1h9wL/48005 HTTP/1.1\r\nHost: qt.calyxesdefames.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://advertape.net\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 24-Nov-2025 18:32:40 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViD0LglAYRu99ESGS4gGHRpdW0VLBJSTndGhoaBILEcRXrtrH1F9pb4r%2BVWtTWzacA%2BcIIcicgsoGRujaoWN7C9v1PcgClKSgvIaesDpnV0gFcpYgVWOcthVbMfd1N%2Fwc2r8hS0zWVXmxtlz1Xcl1CxoYxawaVll3hGx0Cer47%2FZgCsiTPgNVmRFtPu9Xcf8OwUY0vz33u9UD1LTQHD8IfrcSKq4%3D; expires=Mon, 24-Nov-2025 18:32:40 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-06-12T00:01:08.239045Z","times_seen":15045,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":100,"dns":70,"connect":17,"send":0,"wait":21,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"qt.calyxesdefames.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"qt.calyxesdefames.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/DbD630d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.xmlking.com%2Fredirect%3Ffeed%3D806701%26auth%3D1A5I%26pubid%3D221769"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlking.com/redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yOvUUFSSl67HPywMoqFpdCWK5KdXnBhkXfrqX7YrSziZg5NSi6idRgSWXUZ14ps3gBpMXlYAwPfD%2Fl0bkURGusxW7wBvtn7WJuxoPpQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c083b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2063262?zoneid=2063262\u0026jp=_clihinandmfsrntaqoyskd\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=o3dhooQaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906501632\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2045\u0026rlp=%5B0%2C42%2C439%2C341%2C17049%2C10034%2C1208%2C9795%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:42.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"GET /get/2063262?zoneid=2063262\u0026jp=_clihinandmfsrntaqoyskd\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=o3dhooQaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906501632\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2045\u0026rlp=%5B0%2C42%2C439%2C341%2C17049%2C10034%2C1208%2C9795%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\nUID=2511231332660136a59e164a7ba40d1101fa; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3259), with no line terminators","md5":"62af360dca1e7934c976837465eac802","sha1":"0b8a73a93f54b5ba69533d6b4c02c257e8a4d847","sha256":"31a14cf94cea8c6fd9f211c4ad711441fdb1d04559bdfe47d162d2b1eb6c03ec","sha512":"7cf68ea4c8e25b82545d64ebfe6b88de97231ff3d28480b882326267e8ad0688856f9400aceb2959ff88e6707ebed059bfd434ea878ef21fedd63329562bb959","ssdeep":"","tlshash":"27616349fa3bdfae9940089b1efaaf42264c2d02b913e5394054d7c0b33dceb6722403","first_seen":"2025-11-23T18:33:17.301802Z","last_seen":"2025-11-23T18:33:17.301802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.cachegorilla.com/redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775","fqdn":"xml.cachegorilla.com","domain":"cachegorilla.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cachegorilla.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 12 Nov 2025 00:00:00 GMT","end":"Thu, 12 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:28:02:3C:C3:8B:27:70:55:C3:CB:99:19:63:1A:AC:DA:85:21:27","sha256":"83:FF:94:B6:1C:50:DE:2C:85:9B:63:16:FB:F7:60:82:F1:CC:96:4D:A8:EA:77:CF:40:B2:D9:40:F5:D1:D2:B6"}}},"request":{"raw":"GET /redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775 HTTP/1.1\r\nHost: xml.cachegorilla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.acertb.com/redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787","fqdn":"xml.acertb.com","domain":"acertb.com","tld":"com"},"ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.acertb.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:F6:89:60:08:E2:96:75:14:D9:DB:62:A0:1A:A3:C3:6B:1A:47:72","sha256":"A2:28:57:B5:3D:E7:BE:50:88:68:1D:79:5F:9A:BC:DA:BC:C5:FD:38:64:D7:8B:DA:5D:DD:21:1F:C1:65:CA:4E"}}},"request":{"raw":"GET /redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787 HTTP/1.1\r\nHost: xml.acertb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/fonts/Lato/Lato-Bold.ttf","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /fonts/Lato/Lato-Bold.ttf HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/scss/style.css\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73316\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\netag: \"5e849bf8-11e64\"\r\naccept-ranges: bytes\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEDCoRk8F2gEqWLT1ODwTtreEeC7BQKUnSYu7pEjYE0nJxrf92tSi2yNBiwtXri%2FkZ6fP9sb7a2mGnYBuaNKD28jKE%2Fm4iC5dD4J9VY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c02ad9f01ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73316,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name \"Lato\". Licensed und","md5":"85d339d916479f729938d2911b85bf1f","sha1":"d67fee08c79a82ce375ab9629ae5a903da8bb321","sha256":"7b720599f8aed3bac5b9531fecf6750c8fa7e593b727739bc0692fcc0f55b678","sha512":"1197c24ded0d215186116c21925e7cfcd1e74212638036e09168f01c47e5ceb2e69279c197362bbc4b4c85a97d9771a4bbc2a277e9de05bde07bbc72b69c1cb4","ssdeep":"1536:35A0RreeaonU7NtM1V5i1j8B8RVR58waZ27oN:tR5ar7A1V5+4yRVb8wZK","tlshash":"ad63f719fb8bb741ee265f39147e1337aa34fc392b0687af280e33248d522c159567d6","first_seen":"2023-04-08T09:43:18Z","last_seen":"2026-06-11T20:32:47.94897Z","times_seen":1809,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlwolf.com/redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823","fqdn":"xml.xmlwolf.com","domain":"xmlwolf.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlwolf.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 27 Jul 2025 00:00:00 GMT","end":"Wed, 26 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:13:32:B7:B9:88:49:B4:34:18:D5:8C:16:C6:40:C2:2A:1A:C0:54","sha256":"90:F9:B5:EE:98:A3:2B:BD:99:33:2A:58:6F:8A:27:90:EC:05:73:36:48:80:72:24:5B:28:96:B5:BD:9A:F8:3A"}}},"request":{"raw":"GET /redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823 HTTP/1.1\r\nHost: xml.xmlwolf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":395,"dns":20,"connect":142,"send":0,"wait":97,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/9cf/556/129/9cf556129992841f8d263b67bc16b97cacd67c3f.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/9cf/556/129/9cf556129992841f8d263b67bc16b97cacd67c3f.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4166\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=4291\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 037f15ab748c23578bd0ac449c092fd8\r\nexpires: Tue, 25 Nov 2025 06:22:07 GMT\r\nlast-modified: Mon, 26 May 2025 11:30:02 GMT\r\nx-cdn-host-id: ds5951,ds5833\r\nx-openstack-request-id: tx7b7d20b80f5e4013ba758-00683452a1\r\nx-proxy-cache: HIT\r\nx-timestamp: 1748259001.82435\r\nx-trans-id: tx7b7d20b80f5e4013ba758-00683452a1\r\ncf-cache-status: HIT\r\nage: 43835\r\ncf-ray: 9a32c02f3abaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"aea2ec136cd44d8b3d8ae30d93cfe4af","sha1":"f0fb53b53ff647f51676682fadf4b6eb1a83007c","sha256":"7f23650567dee18deb5ca65c3b2b02f856aa399761a19c60cab85a38cb0bd315","sha512":"69d36173c858f55266d153719ad24f068d73c558b87d805b143ffaea37834104f4ec90dd989921b3d7f32b6f0cd8bc62a2673be4be351de561410ccd8be74ca5","ssdeep":"96:3Ew8f33Pf9N1egQMTv29r3b5JH9R3auMajtrBmDVzgUuO0:0w8nhvaRP9R3auMa+DV0bO0","tlshash":"fa815e485b4ad2f6cc3921b3d5b16cc6de5122dc916ff75ee3e6f65318b044908b06a3","first_seen":"2025-07-12T16:24:26.171496Z","last_seen":"2025-11-29T09:18:00.502954Z","times_seen":54,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":59,"connect":2,"send":0,"wait":14,"receive":13,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:42.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-security-policy: script-src 'nonce-E8d8ySwmJOvvw3M1-RI82Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79549,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"7e66540303f062cc0ad356c2004b82d3","sha1":"1f7a806d3fc0b2b3bbaceecde911174b16698e62","sha256":"a8f67da6b1437fd1b0654646ad9e943a50178dff749f218d61c6186f4ccd4548","sha512":"64c9a077a5d468a1021da58b5e2445f3e28c8cf3344811a82e8f9ee77be67de302638dddfcff7349728e368965246c04c072cb0bdb2e6e9817ddd7656cf49394","ssdeep":"1536:tHXKy73qnYJ8nuCIEpkRHP8cO60LIVAefVV958p6bQozQkk:tzqnShicALSL/9HQgk","tlshash":"8073bf11a613309aefaf4ec167e6bb79633e5445208304ac6bff14948ea6d92537938c","first_seen":"2025-11-23T18:33:17.303963Z","last_seen":"2025-11-23T18:33:17.303963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371669\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/images/Logo@2x.png","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /images/Logo@2x.png HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 15155\r\nlast-modified: Sun, 29 Nov 2020 16:24:53 GMT\r\netag: \"5fc3cb55-3b33\"\r\naccept-ranges: bytes\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFd%2BWL7Sz9oOMDpYzCa9nRtR0Ng6ucDAhO34OF%2FR%2F4orOvUw3NbY58RiQ5W3UuudAvLsBsdOnrdyLYSIyqcka%2Bv7riuD1sZcmXqKlgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c02629b41ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 570 x 136, 8-bit/color RGBA, non-interlaced","md5":"0d15e6255e9f60f4cb40df0a94e65413","sha1":"eeb43066a20588b93a8ee849c1fae0094e64afba","sha256":"363c13fbb83512df1791dffbf8db77281759e131129a73d056016ce9b047b423","sha512":"6d082bface0567df33788b24a451163b288fdf02bbd942a82375554fa10eb52f683192caefcdd5bb4ecff108756e25262c5b1148c2e79201b8144ffbd6e0f177","ssdeep":"192:fq5yuJX4HrYriSP/kPoTNeWf3LZHIob6/BIu0sRkLt2ZHesjNy6tLy83K36peJSM:UJX7zTN7vLZNbKvnRytEeoNyQLFr8SM","tlshash":"1662cf966ca2046fd4c87f73400fb181b706b1e72f948a552a0935d97beccfaf1e6512","first_seen":"2023-05-04T10:50:47Z","last_seen":"2026-05-17T12:54:14.701455Z","times_seen":297,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=UVxpYAjaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906448384\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=809\u0026rlp=%5B0%2C12%2C145%2C93%2C709%2C1174%2C444%2C935%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epidermispushupvariable.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:04 GMT","end":"Wed, 21 Jan 2026 14:27:03 GMT"},"fingerprint":{"sha1":"F0:C7:9B:B6:97:19:D4:9A:58:09:16:80:C0:E4:58:65:67:8B:57:E0","sha256":"64:93:A9:5D:D4:4A:1E:77:E4:F2:12:F0:90:89:A1:6A:4A:81:D4:2D:35:E2:92:1D:EE:0E:EF:2D:EA:8E:EB:4D"}}},"request":{"raw":"GET /get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=UVxpYAjaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906448384\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=809\u0026rlp=%5B0%2C12%2C145%2C93%2C709%2C1174%2C444%2C935%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: epidermispushupvariable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nUID=2511231332a6add8cb40e145fe8d9cb7d033; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2165), with no line terminators","md5":"0bbb1cb5249b0f469e9b3521ee36eb00","sha1":"f332e3955b0e1f930188a5d0079bfe7daedfad9b","sha256":"d19f9a221a2330d9fe146639cf9d2e25b771589ace08e6913106a36a93623963","sha512":"e0febd91ae4b0b9543325919e39d06aa5bf1ddc63ddf6c3a707f1c9c1310451a5889ceed09240cdbc3dc330f8e69a5843b6fd6ee70079cd98bf8f88cf5e61c90","ssdeep":"","tlshash":"ce41867244d688f29cc7ec88e1a94e58b3917ad0c9b36503ffbd85729c95eb2063ac51","first_seen":"2025-11-23T18:33:17.306023Z","last_seen":"2025-11-23T18:33:17.306023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/qprK12e\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.revrtb.net%2Fredirect%3Ffeed%3D806644%26auth%3DGjfr%26pubid%3D221742"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.revrtb.net/redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TZjZb9BV2CabzdEwf7nlkJzAKznPDw07PUuE7ALgd0X89RYcb4Cc6RgbuevTOqDCBJPb2ZUIUdYi8ZgbutL4HiE65N8I7ycq%2BhyjnCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c493f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/lxMEGZn\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.xmlwolf.com%2Fredirect%3Ffeed%3D806902%26auth%3DCir5%26pubid%3D221823"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlwolf.com/redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnDgAQu0mWZjxPBdpnPkpBbpKKNun0if%2BgM9KK%2B7QuUvKFKn8IjGBXhTvVSr5RBkOSlyQHWNW9UI2OERmsS%2BnPzwgU9cb5lrhmfZXpch\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c068d9834c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vhdBIQ2aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=7433949836593664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026pload=1516\u0026rlp=%5B0%2C12%2C145%2C93%2C11207%2C7141%2C993%2C6902%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epidermispushupvariable.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:04 GMT","end":"Wed, 21 Jan 2026 14:27:03 GMT"},"fingerprint":{"sha1":"F0:C7:9B:B6:97:19:D4:9A:58:09:16:80:C0:E4:58:65:67:8B:57:E0","sha256":"64:93:A9:5D:D4:4A:1E:77:E4:F2:12:F0:90:89:A1:6A:4A:81:D4:2D:35:E2:92:1D:EE:0E:EF:2D:EA:8E:EB:4D"}}},"request":{"raw":"GET /get/2090696?id=2090696\u0026jp=_clciagvttywiorztvxobxo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vhdBIQ2aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=7433949836593664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026pload=1516\u0026rlp=%5B0%2C12%2C145%2C93%2C11207%2C7141%2C993%2C6902%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: epidermispushupvariable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2511231332a6add8cb40e145fe8d9cb7d033\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3284,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3284), with no line terminators","md5":"8687a86c244e52d7da1f4a00b3064c27","sha1":"08d4f95af71d35875e56de15326c812d328c02be","sha256":"4f2016fa73aed7e31f1aa0f2adcd9865b83105ead0fdd6f20d3ddbe0cbaf7363","sha512":"3927a697194e94df952bbc55b944d0db92daad1c8de52eb50b26e9a430e771c7508242edd544c8cfbd6dc5a73a0cf11695d5252f5b8637488d735b378d017b9b","ssdeep":"","tlshash":"8e6181ff14e6da98cd4b8f14163ffde434814956bf52f608a31e48d5a8290eced191a3","first_seen":"2025-11-23T18:33:17.306955Z","last_seen":"2025-11-23T18:33:17.306955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlwiz.com/redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781","fqdn":"xml.xmlwiz.com","domain":"xmlwiz.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:42.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlwiz.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Tue, 11 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:6F:14:41:38:D9:63:E5:04:B8:11:02:23:E2:34:B9:F2:B3:A1:2E","sha256":"26:49:06:F4:E9:D5:16:EE:37:20:6E:2D:05:5D:54:DA:22:06:71:95:DD:4C:26:28:7D:27:54:D5:29:1C:85:92"}}},"request":{"raw":"GET /redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781 HTTP/1.1\r\nHost: xml.xmlwiz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":8,"dns":33,"connect":91,"send":0,"wait":95,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/4YpnNkW","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/4YpnNkW HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgX%2F%2B8BxV0e%2B4%2F2ZeIzDN382LyfG5rLybN%2BxkGxZQMlVaBlWdRqK7ZNjx%2BJpRcT3J%2Bnw10tZH6jr7Dwm4%2B9sibyGXx%2BOrDFTkucq3xAO\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0289877b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5e78bf2597707ee6d849c8f4a7321937","sha1":"1c7d2c9ed7e3b8c000b819847dca45138ee50e5a","sha256":"3913abac5de92ef49d7c8007682dd2db35aaf5771ba6cdfb71a24cc5e52523aa","sha512":"4d64a9b5e120cefb58fdf8f0aaaca2afd876330f5f83fea3e09eaf3d0b1eec162761b08102cdf559da79fa82f81624d5ca848b9845522a1790b149d40d52d772","ssdeep":"","tlshash":"99d0231a3c30caf0cc4b87ba67ddc24d5c2915011647ea10d156475451817c20953bee","first_seen":"2025-07-21T15:03:56.131574Z","last_seen":"2026-01-11T02:17:37.337135Z","times_seen":109,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":82,"dns":31,"connect":3,"send":0,"wait":121,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/player.svg","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /player.svg HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 13 Dec 2020 16:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1007\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5fd64104-15ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zL4goIJ5B57pMKPNmrhQHNFwmkV1BFCjBVBhw%2F95uYP0Ff2O5HEt970ZUJQ80ie3VTSXkVPt%2BbGSDTbkDYPctZIag8eS81oApFKigmE%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9a32c02ad9ef1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c5ea626e326b207c2ab37e330ec798c","sha1":"73f320fab9bae5aaeaf5724cdff2abde897a1efd","sha256":"1b0a89316b4c4edfcaecd47b2cd0a992c29219a6bf57a9f6dcda37a3f037a02e","sha512":"df56396616e9e81e92ada3027d02e210c23c473e7b1d4f16b722739c1da908ab51ac7ff099ba66013599c77c2cdec287e0783310764686ce09d078ac638c4f6f","ssdeep":"96:ymz9/qu/qhsXsVFnqq8CIZ+U0R1QgRA3/CcHlbI0NSJVUqSn06HNJvlKoAAd:yg9SuSogqqTT1QgNAlM00JqXTtV","tlshash":"eeb1747fc638926e8c8785756f25f0e1629f62da74e840bc6065c7a40f9e5d8f902f44","first_seen":"2023-05-26T09:14:30Z","last_seen":"2026-05-17T20:55:45.420132Z","times_seen":335,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlking.com/redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769","fqdn":"xml.xmlking.com","domain":"xmlking.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlking.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:6D:78:E3:45:60:BA:20:F8:B0:EB:54:95:9E:51:34:5B:80:85:B3","sha256":"80:65:62:0F:86:B5:EF:E3:B1:EA:0F:06:D9:82:40:1E:4B:FA:00:93:21:32:BD:AF:BF:60:2C:94:29:B4:3B:CC"}}},"request":{"raw":"GET /redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769 HTTP/1.1\r\nHost: xml.xmlking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":382,"dns":21,"connect":90,"send":0,"wait":103,"receive":0,"ssl":279},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:51 GMT","end":"Mon, 19 Jan 2026 08:33:50 GMT"},"fingerprint":{"sha1":"99:FF:FA:35:E4:FB:4B:28:B0:D5:C1:D4:AD:3F:43:AA:85:22:87:8B","sha256":"30:D1:CE:98:2F:EB:E2:4A:53:22:1C:BF:BB:4E:BC:2C:CA:E1:CE:CF:B7:9D:20:26:F9:55:2A:6B:ED:AD:DA:83"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 23 Nov 2025 18:32:43 GMT\r\ndate: Sun, 23 Nov 2025 18:32:43 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4e8c5e231c8c4b52a9f1110707827d3f","sha1":"58e2f59c8426047a2671a46fae39f739035a8032","sha256":"4b12d6a235970b2239057a7cae12f85606fc432c6ad4ae32d13fdc27ffee0891","sha512":"064d9f12c63084d2e179e0f0dfe9cfd184af33cf937b3a89e0969ec32f3cca35540c29c3d9b714004d8e95bd394ebc1f9ff1986792a9ee84397fc9930523067f","ssdeep":"","tlshash":"68b012330510d46c0d1082c2d63bd3acf0114234db6082f041b90fd883649e39800400","first_seen":"2025-11-13T21:19:52.258197Z","last_seen":"2026-05-27T06:53:03.730727Z","times_seen":38464,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/31VDa4y","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/31VDa4y HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwyL%2BTMrkGeI7N8JPyO9e07twsRFqSiXZ2BTAEDOhol0zzWDpFM1pRAw8b8A9JFjNhNdqZGACSCDF6xCrEHA9hcaFihd%2BGwYakFKcLrj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669af4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e07fe3e6226669be37b0c88193167cf4","sha1":"b0ec0b92df2b469704315d9adf9007046d681312","sha256":"093f1f6c9be6222ca7057b7aec9103dd0ff01f706d3f1ebce09d69fdafa67535","sha512":"30c0e68a8ac168b70f915af768541f14909c53d5a1e5632c4fb90c3134acefa3a79e793f9fe3c94c7fd0d095fef6af50a9a5b21a9d0b651c51d166c565d7bb79","ssdeep":"","tlshash":"87d023093c20d4f0ccca89f553edc14c082c20403ac3de01c28a43a051807c30942bea","first_seen":"2025-07-21T15:03:56.138612Z","last_seen":"2026-01-11T02:17:37.330929Z","times_seen":109,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/scss/player.ec3b7d.css","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /scss/player.ec3b7d.css HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 12 Mar 2022 01:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 6845\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"622bf673-7b0c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeY6jKPqm6QTi%2F%2Bku8MeW1K9AdM6ywNNrKUcoD97SlNvC8AiFZyBufRD59ZcTQ0vscw1YQY419TEnuT71TQVbsD2fPQw99ceXa0kMYg%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9a32c02629b61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31500), with no line terminators","md5":"ef06c6005aa0385b099dcfe4cf4c37cb","sha1":"7375834c8a0d81548fde10ad1c1d14af262b958b","sha256":"25030a9d025c1e8c6d1bc7a95152b7265ef6eade6ed5d568b4631b828dc5e0db","sha512":"e71ad7f8556d552dede9a93bb5a8f62e33e3379685690237e41a0c45354934bd98ef1e2535857d2f3ae32c37fecc159a84385e68d5c6075571246895e03a0bf6","ssdeep":"768:+b0jnshN8LOXC4nGz86I+pbWr5XRTjgWp1+InO6pdu3xLG:7jnshN8CXnnGzxk","tlshash":"d0e28871b56d1168a033866e3bf1c6ca33bcc202f6e63e5e7255b6708ece19782b7541","first_seen":"2023-04-13T16:56:36Z","last_seen":"2026-05-17T20:55:45.394708Z","times_seen":329,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:51 GMT","end":"Mon, 19 Jan 2026 08:35:50 GMT"},"fingerprint":{"sha1":"21:0F:94:6B:44:9F:BB:AA:A3:6F:0D:C4:85:0B:B0:A0:AA:DB:67:72","sha256":"CD:3A:F0:3B:B3:27:BA:BE:E9:D1:21:F1:A4:FB:D8:3F:09:26:AB:58:5C:18:95:13:99:12:2A:8F:9C:0B:F1:C0"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 23 Nov 2025 18:32:40 GMT\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1051,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051), with no line terminators","md5":"3214fd68b97480272e2ffbd4c0bc3d8a","sha1":"5f832f2d5b9625bf86e406a0402f2f4723f5f9d8","sha256":"5530fe6ab4fa4b7a03df4e597030da2b92ac65e9bcb62f81ac9fa1a9af908c6e","sha512":"c65467443bb3e630dac7c42c091fc8b4edd4034a94bb88df47461709ffae3aee93dc0397ffd544b7519901a7788997693b1084e4301e33da025dae28f097e8b6","ssdeep":"","tlshash":"1b111f731a19f03a4b7209e1e2ffcbb1e582742cf15c85e8a559dac81e79dcbce04985","first_seen":"2025-11-22T08:51:35.626014Z","last_seen":"2025-12-07T20:48:17.144248Z","times_seen":12,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":118,"dns":0,"connect":17,"send":0,"wait":32,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 93\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/31VDa4y\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"url=https%3A%2F%2Fxml.popviking.com%2Fredirect%3Ffeed%3D806733%26auth%3DJLhS%26pubid%3D221793"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.popviking.com/redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTBjG1Uakbmj9rYygRVppVBWMrXJ28BPbB8Dbm%2F0cSxc9aH7TH418jIJrAbZlvb3PWmZwd1R0N3eg33hwAUaDdGTSCXYxTK7NAaLLfVb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0693b234c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/on.js","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epidermispushupvariable.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:04 GMT","end":"Wed, 21 Jan 2026 14:27:03 GMT"},"fingerprint":{"sha1":"F0:C7:9B:B6:97:19:D4:9A:58:09:16:80:C0:E4:58:65:67:8B:57:E0","sha256":"64:93:A9:5D:D4:4A:1E:77:E4:F2:12:F0:90:89:A1:6A:4A:81:D4:2D:35:E2:92:1D:EE:0E:EF:2D:EA:8E:EB:4D"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: epidermispushupvariable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-25d2f\"\r\nexpires: Sun, 30 Nov 2025 18:32:40 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbfe0538eea0082ceddf9b3865adddee","sha1":"c0eefc510ed02dd390d3207d2ba019527b765961","sha256":"990eeb4c171f598a11168462220a4e5c8ac6b633541db5f3b7f806dfc392d3c3","sha512":"ae4bec7a3116540789ab50a7a038927d23a542d1cc53a4e8c6c3d64a2cdf3455bd0b36f0d3b0c307a6f5c4e366e2ac6a85a4b3210703fbf0ef894927bbb305ec","ssdeep":"1536:Zr99edSf1mHoH41wszIkopbfynmEDzcOJlhenn+ggar+rmk9E/ydzBY1AAt:ZreS10oHiRIkYbfyYOJvrmnTt","tlshash":"f1e3768cfa4b2435426fb0794c2f662ade27c8d1a45dc0c6d8abd1d93d789069131efb","first_seen":"2025-11-17T20:23:14.342378Z","last_seen":"2025-11-24T09:31:58.868453Z","times_seen":157,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":44,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/4YpnNkW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.acertb.com%2Fredirect%3Ffeed%3D806725%26auth%3Dktx8%26pubid%3D221787"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.acertb.com/redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sDZ4FPK%2Bp92staQDcWIbcPSY3cJcim9b655e5JNcq9EA9UGBFy9VltqobsehVLtZ58xh5I49JcrOlaDMJYtzMALCKD8UoeR2DRLVwf8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02d0c0b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlking.com/redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769","fqdn":"xml.xmlking.com","domain":"xmlking.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlking.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:6D:78:E3:45:60:BA:20:F8:B0:EB:54:95:9E:51:34:5B:80:85:B3","sha256":"80:65:62:0F:86:B5:EF:E3:B1:EA:0F:06:D9:82:40:1E:4B:FA:00:93:21:32:BD:AF:BF:60:2C:94:29:B4:3B:CC"}}},"request":{"raw":"GET /redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769 HTTP/1.1\r\nHost: xml.xmlking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/xjMAQr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.zeusadx.com%2Fredirect%3Ffeed%3D806749%26auth%3DCrhm%26pubid%3D221806"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.zeusadx.com/redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVu59MRrGHAZertvGDdbY7qWoKlm9vsQ1D%2F2ZvFyDf40rLC4ZJrXJPEBCljLNMoT5wuRi1B1LhNWrG0R%2FwCaXgYZiOk0TjMos%2Fs%2FTn%2Fd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c9a414c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/DbD63EO","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/DbD63EO HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MndUdkEj%2B%2FJEBMNXsDe20fyKxGiBcpwal4c1QUaI47uDERT0UF9tJkH5qTe87q%2BuQjdHdV5HUV762aBn%2FMCpUUPj7b%2Flfevfbpskk4qK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669c04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"49452373368b94bceeab829ff240eb4d","sha1":"41cff4504cce3446c86d9c1700a625f9f7544bd7","sha256":"38c2d5bb8daf66fdd3e6f75392c73b04025d098db19d77c52fcb5c63037a9a60","sha512":"1af54c3135b681db80aa9e273360695d59a0df5f3ecf6bf971f213be51ac1ad661aeedcd3bec0261f1d311df8a9a9281893c5c9ec24ae6cb6f09a796b4147f20","ssdeep":"","tlshash":"cfd0a7263c26c5e488565aa967d5c64c1824660056839a50d697865050807960962bea","first_seen":"2025-07-29T08:08:49.857906Z","last_seen":"2026-01-11T02:17:37.323612Z","times_seen":69,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.poprtb.com/redirect?feed=806741\u0026auth=nooa\u0026pubid=221800","fqdn":"xml.poprtb.com","domain":"poprtb.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.poprtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:B6:11:F4:1D:6F:59:92:74:6D:33:12:90:53:8E:3A:22:AB:49:F6","sha256":"82:3C:DC:85:97:03:50:74:DB:DC:D1:A7:30:8C:66:27:CA:C6:C5:DC:A2:3A:28:62:6B:3A:99:B1:0F:9C:FA:78"}}},"request":{"raw":"GET /redirect?feed=806741\u0026auth=nooa\u0026pubid=221800 HTTP/1.1\r\nHost: xml.poprtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T18:32:40.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /v/LkrZb4ejL1CRG84/EUUD-077.mp4 HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: private\r\nx-robots-tag: nofollow, noindex, noimageindex\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPBRXAtAF5Fn66ECYWlYF6Ghz6PkiO4dpvYKGuFt2wre73PgiqNQ4o4oBx8yIyvvEzzMqBK%2Bj932yenzJliU%2Fe8vu7m0Fovd8PL3\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nset-cookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; HttpOnly; Path=/\n_b=kube16; Path=/\r\ncf-ray: 9a32c023fc11b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":109940,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18950)","md5":"0a7d316e4e2c14a60210ce65f0b755aa","sha1":"28ca8b99a450d7ee04711689aa32357773bd5cba","sha256":"30d9f07a2e1c5ab9a011fbc6381c5400f91a6cee5e48bdf9ee01511988da5154","sha512":"a87ae0a01c661f8f06d0c415de0ecd18cab7d65a363dddc52ef6ebd677a0e4bb28ece1ab53219ca87ce317ab38a3ed932ba75e9249275bdb72edd8490a4453e8","ssdeep":"1536:rouZ6U2souaEpmI6ggLtNHyDjzA2HONg0vt9z6Xp/AaQ:kuo/EajyDjzA2HONg0vtJ6XyL","tlshash":"b9b3737c6612d85d5e7329bbec787b34d1155f13f8c8a7c4786c80823fe0a6ab0157aa","first_seen":"2025-11-23T18:33:17.313107Z","last_seen":"2025-11-23T18:33:17.313107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":37,"dns":11,"connect":1,"send":0,"wait":159,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2090176\u0026pb=a19ba0f120d23a63c266e42913dccb751763929961\u0026pbc=Ul--mWdKG3RpbyNp\u0026pbi=Dg5VXYQUaEhpbyNp\u0026pbu=IXtAaXg0AS5pbyNp\u0026psp=ByU3pynmIgqr2z1MziiCqfJjBlKwxHYQ-BnqMPD18BOeYfxthyQ2N5H2zS8vTgAZ00mxoTA3cTNCgeRzgmGTPjI4vZtpNocsNKccSvKSaDmHLz85-547ypcuj4YXWEdD3LAzaEDPjPi1asJ2T6G115JqGXIDzyePzvlEXOi0A7rFXhYAwy4HiNp0QWpMTJUvbL9QUFCM8eiLzhMiwi3_JgyLSrKFuw7-uSnJYTDYDYePWGI7j-aufqoMzl02Td37gt61Q1-KuU7nPth-9mszwKAuKV_r4uaycXPkGCM6KWnTURGvZ1_J3SnWykw_B1DkqcWSrDzbw8T9OkviYGkeSeIz63w1wIyds2kQ9-IzuCdaHWSLKmkJYLI915bMQGQMJlBb1hrge9-7-VS2KoegSx7hN0GY5pPOBCz0q55uqrQZWboUUeS_6eza4Dray7T7g-KKgJtImdMlzLwFs6jtkDmzlgOvNLcPrXJHK3gZIAaOXq7X4mXNbbqD-RxSK1OOx0UGOTyEBAgSwfQKAPyWD8_wPNBJCd7ZN6-MEX1LqdCDy52WRDrVBMKysRt6BqYXNbhWN3DMMuB38C_auutQ5Nu_3hOGiqJFvzsnzQ-bKiNv9FVrCT0FbhMO0j77pBmZI4I9aVg-kNFuvLeQxvvfBmBYT-fkE7U-UonPEIj_UiVGd3iWksfAOSjCrmwAArHR1vk-KGhjqmHzgbxEy7h6O8j4r0X1YdZ9iT2CEiJNjD6me-1enhfNtV7QPDnfwq_lsjP1aR4XvMRGQzfFP68dmT6uiwKgAk-UJNw1MR82bS7aNYa0VDjodXEb2WBgLt3iP8NbbgPw3Tu7XVp2nmYyifLp9UGLQkfPZeHtuaUOL-E=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qKqPZsPaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=3493300162644480\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=1667\u0026rlp=%5B0%2C12%2C145%2C93%2C15018%2C8721%2C1014%2C8482%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:26:17 GMT","end":"Wed, 21 Jan 2026 14:26:16 GMT"},"fingerprint":{"sha1":"3D:FD:CA:AB:FD:DB:F1:C9:4B:38:D0:A1:B2:A0:48:48:85:96:EE:1D","sha256":"00:53:27:9F:94:30:76:15:B3:5B:11:E8:97:29:FF:8B:C2:D8:0B:D9:91:83:4F:1F:19:36:38:C0:73:FE:76:D9"}}},"request":{"raw":"GET /chicken.gif?z=2090176\u0026pb=a19ba0f120d23a63c266e42913dccb751763929961\u0026pbc=Ul--mWdKG3RpbyNp\u0026pbi=Dg5VXYQUaEhpbyNp\u0026pbu=IXtAaXg0AS5pbyNp\u0026psp=ByU3pynmIgqr2z1MziiCqfJjBlKwxHYQ-BnqMPD18BOeYfxthyQ2N5H2zS8vTgAZ00mxoTA3cTNCgeRzgmGTPjI4vZtpNocsNKccSvKSaDmHLz85-547ypcuj4YXWEdD3LAzaEDPjPi1asJ2T6G115JqGXIDzyePzvlEXOi0A7rFXhYAwy4HiNp0QWpMTJUvbL9QUFCM8eiLzhMiwi3_JgyLSrKFuw7-uSnJYTDYDYePWGI7j-aufqoMzl02Td37gt61Q1-KuU7nPth-9mszwKAuKV_r4uaycXPkGCM6KWnTURGvZ1_J3SnWykw_B1DkqcWSrDzbw8T9OkviYGkeSeIz63w1wIyds2kQ9-IzuCdaHWSLKmkJYLI915bMQGQMJlBb1hrge9-7-VS2KoegSx7hN0GY5pPOBCz0q55uqrQZWboUUeS_6eza4Dray7T7g-KKgJtImdMlzLwFs6jtkDmzlgOvNLcPrXJHK3gZIAaOXq7X4mXNbbqD-RxSK1OOx0UGOTyEBAgSwfQKAPyWD8_wPNBJCd7ZN6-MEX1LqdCDy52WRDrVBMKysRt6BqYXNbhWN3DMMuB38C_auutQ5Nu_3hOGiqJFvzsnzQ-bKiNv9FVrCT0FbhMO0j77pBmZI4I9aVg-kNFuvLeQxvvfBmBYT-fkE7U-UonPEIj_UiVGd3iWksfAOSjCrmwAArHR1vk-KGhjqmHzgbxEy7h6O8j4r0X1YdZ9iT2CEiJNjD6me-1enhfNtV7QPDnfwq_lsjP1aR4XvMRGQzfFP68dmT6uiwKgAk-UJNw1MR82bS7aNYa0VDjodXEb2WBgLt3iP8NbbgPw3Tu7XVp2nmYyifLp9UGLQkfPZeHtuaUOL-E=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qKqPZsPaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=3493300162644480\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=1667\u0026rlp=%5B0%2C12%2C145%2C93%2C15018%2C8721%2C1014%2C8482%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; PTS=; UID=251123133228a411dc85d54d02a61bbee993; CHCK=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ACZLEAAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:41 GMT; Secure; SameSite=None\nBMI=ADOwKAAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:41 GMT; Secure; SameSite=None\nBCRI=Po2JKwAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:41 GMT; Secure; SameSite=None\nOACICAP=ACZLEAAAAAAAAAAB; Path=/; Expires=Tue, 23 Dec 2025 18:32:41 GMT; Secure; SameSite=None\nOACIBLOCK=ACZLEAAAAABpIz2Q; Path=/; Expires=Tue, 23 Dec 2025 18:32:41 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Mon, 24 Nov 2025 18:32:41 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/DbD630d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.xmlking.com%2Fredirect%3Ffeed%3D806701%26auth%3D1A5I%26pubid%3D221769"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlking.com/redirect?feed=806701\u0026auth=1A5I\u0026pubid=221769\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCkxdXKkR5dotQ%2F3JaSKUZtC2v89Nn53iFwPcX8aYt0%2FJr%2BItysYcVRUA16pGtqaw1CuymPZwyc8r4y2cg0tojRJyXCi23uoWANY6xlj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0695b8f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/xjMNnBp","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/xjMNnBp HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7p30atb3yimep8pPdD5pUUz5gvSvg0m8FUO6cy1T9iLjK4apgUzfxMLZZx22PgdznExpSamjL%2Fg9L4g1mSzSfuLTne3Y%2FdigpiDRNzLt\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c028881db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"16a8177aec58553028fba5502e81e2a0","sha1":"e61c8876504ac880bb0ec258d4678e4f638e1e7c","sha256":"4eeb0f4f67cef3847f0adecf094c06121eeee7914a1eba8383e21f65ab73da5c","sha512":"a5175d2d6dc1a285a6769413f81432ef8fca1b42d23a25cbc90b868a7aeb580e9b0f3d3a793369619b767ab2067b36d0c886a66a5eea333fe7565f9107332cdc","ssdeep":"","tlshash":"d6d0231a7c31ccf48d8a55f5f7edc25c0c3c650165579a50d54647919481bd30d51bef","first_seen":"2025-07-29T08:08:49.867416Z","last_seen":"2026-01-11T02:17:37.337668Z","times_seen":68,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/solid.gif?z=2090696\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=UVxpYAjaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906448384\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=809\u0026rlp=%5B0%2C12%2C145%2C93%2C709%2C1174%2C444%2C935%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epidermispushupvariable.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:04 GMT","end":"Wed, 21 Jan 2026 14:27:03 GMT"},"fingerprint":{"sha1":"F0:C7:9B:B6:97:19:D4:9A:58:09:16:80:C0:E4:58:65:67:8B:57:E0","sha256":"64:93:A9:5D:D4:4A:1E:77:E4:F2:12:F0:90:89:A1:6A:4A:81:D4:2D:35:E2:92:1D:EE:0E:EF:2D:EA:8E:EB:4D"}}},"request":{"raw":"POST /solid.gif?z=2090696\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=UVxpYAjaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906448384\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=809\u0026rlp=%5B0%2C12%2C145%2C93%2C709%2C1174%2C444%2C935%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: epidermispushupvariable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://advertape.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nUID=251123133295459e402a56493299aa85387e; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/8Y7NXKX","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/8Y7NXKX HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoV2X6Kl8MN%2BTZJ%2BCHSW0LD5fNPh4kHqJ8OTG8T867XQ26aLnFwHVMn0Oo%2FGeJoQaAl3W%2Bo1o2K8OL0ngB1mnSAgSS9iSQufeqkCnM1o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669a04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c18fdc3a176dd227bf62723320717d5e","sha1":"79284df1f0930740d8ce0face01b6db846f25d09","sha256":"3d364d84112effd869cbf0946d78e0336ec59978c4cd8fac02e4dd7db2d8f948","sha512":"b2c6c33f54f57bec6a39c731be8d869dd25c4a090ef52ead30a113f758484c5f0f56692ad83307905d66b3bc2b09a6ce81c0c97b4d4e6bab8b540583dabb1ab4","ssdeep":"","tlshash":"ffd023153c30c8f08cc649b497edc30c0814110116c39f10c3c78352a0907c30801bfe","first_seen":"2025-07-21T15:03:56.103529Z","last_seen":"2026-01-11T02:17:37.364566Z","times_seen":108,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.tapecontent.net/thumb/LkrZb4ejL1CRG84/y2BjkJ67mrh186X.jpg","fqdn":"thumb.tapecontent.net","domain":"tapecontent.net","tld":"net"},"ip":{"addr":"172.67.200.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tapecontent.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 22:17:40 GMT","end":"Sat, 27 Dec 2025 23:15:28 GMT"},"fingerprint":{"sha1":"52:24:9F:94:23:66:A3:FA:99:14:F1:43:59:68:D6:4B:6F:B5:AC:D2","sha256":"54:8A:AE:2D:70:AB:69:A0:F8:AE:1A:E1:63:BC:03:88:BE:AA:F4:9F:D6:66:02:09:E8:89:24:FB:CC:45:69:AD"}}},"request":{"raw":"GET /thumb/LkrZb4ejL1CRG84/y2BjkJ67mrh186X.jpg HTTP/1.1\r\nHost: thumb.tapecontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115560\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 12 Nov 2025 17:59:32 GMT\r\netag: b9db3fb54a28\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, GET, HEAD, POST\r\naccess-control-allow-headers: Upgrade-Insecure-Requests,Range,Content-Type,If-Modified-Since\r\naccess-control-expose-headers: ETag,Expires,Location,Content-Length,Accept-Ranges,Content-Encoding,Content-Range\r\nx-robots-tag: nofollow, noindex, noimageindex\r\ncontent-disposition: inline; filename=\"y2BjkJ67mrh186X.jpg\"\r\ncache-control: public, max-age=259200\r\nexpires: Wed, 26 Nov 2025 18:29:48 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqK40AGnNQtUWYCP0kc1ptJSzDSgq%2BHbdsVHksL7d4sn5i4QVn%2F0xLbA7OW57Jy80OrbByMK4MZ%2BakrwEBwhj5Hf7hsDD5eqFtTRL2kukyRaoNqgOQ%3D%3D\"}]}\r\ncf-ray: 9a32c0267aeadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 1280x720, components 3","md5":"13a58bac50a10f32861366e631560801","sha1":"be7d399edfa4b8d01a5cdc38b6b9a865322df1b0","sha256":"2d1a559039cfeebd9e330aa976e6f5d53130dad5f3f3b7586f9d97e58e8f96ae","sha512":"0df63e628a9930cf1a2f6d57b6d11b80d238b135349a08592aebc604a28dba7c356294440dc043a7929ab1101f7b855a2f56379631090d08e77417d4716069d1","ssdeep":"3072:3W6Cre4X2zpZFAuTYm7ZmyM/Yo4UeIWuU4:31UmFAu8GwyxDUel4","tlshash":"4bb30229cf3882f4876c33bcf7969fd528d52d1813811f1a238a5eb522d07ea6279572","first_seen":"2025-11-23T18:33:17.315973Z","last_seen":"2025-11-23T18:33:17.315973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":35,"dns":25,"connect":1,"send":0,"wait":93,"receive":129,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlwiz.com/redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781","fqdn":"xml.xmlwiz.com","domain":"xmlwiz.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlwiz.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Tue, 11 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:6F:14:41:38:D9:63:E5:04:B8:11:02:23:E2:34:B9:F2:B3:A1:2E","sha256":"26:49:06:F4:E9:D5:16:EE:37:20:6E:2D:05:5D:54:DA:22:06:71:95:DD:4C:26:28:7D:27:54:D5:29:1C:85:92"}}},"request":{"raw":"GET /redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781 HTTP/1.1\r\nHost: xml.xmlwiz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/assets/bootstrap-4.4.1/dist/css/bootstrap.min.css","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /assets/bootstrap-4.4.1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5e849bf8-26f1b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MsMYPOWAZgKqdTXkQDbeKH8qcvH4tsPfiOoi6Hm0vAPoRJ7maWsKQr%2B51u84CDUXIZyes4A7gtbar%2B8hBoa1PZ%2FQkt9zc09h4%2FybhM%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9a32c02619b11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"7cc40c199d128af6b01e74a28c5900b0","sha1":"d305110fb79113a961394b433d851a3410342b8c","sha256":"2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6","sha512":"ce79937f81cda05f54ea67c1e8a96101285b46f6ede02bc2687a0d574832b2c7d3a0d43ff40d1e35d51bbec4b038852825d323146da7752bebd0ba37669b13a9","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F","tlshash":"9ef352a6f5a0312de467c61964d0bafe152f8245d7224bfaf827376487892c70a73e4c","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-06-12T01:18:34.212953Z","times_seen":19231,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epidermispushupvariable.com/check.html","fqdn":"epidermispushupvariable.com","domain":"epidermispushupvariable.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epidermispushupvariable.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:04 GMT","end":"Wed, 21 Jan 2026 14:27:03 GMT"},"fingerprint":{"sha1":"F0:C7:9B:B6:97:19:D4:9A:58:09:16:80:C0:E4:58:65:67:8B:57:E0","sha256":"64:93:A9:5D:D4:4A:1E:77:E4:F2:12:F0:90:89:A1:6A:4A:81:D4:2D:35:E2:92:1D:EE:0E:EF:2D:EA:8E:EB:4D"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: epidermispushupvariable.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"epidermispushupvariable.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 92\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/8Y7NXKX\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"url=https%3A%2F%2Fxml.adxnexus.com%2Fredirect%3Ffeed%3D806693%26auth%3DHZmV%26pubid%3D221763"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.adxnexus.com/redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BFuWu732sir3Pu7Sk1bRqBrDIkrZliI0nLoMSwOIguSuixzIyZXT%2FGPy%2B7C8NVOLXZioXvAq7zs8P7QQ40hg76te71RTD83%2B0zx3w7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c596b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zeusadx.com/redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806","fqdn":"xml.zeusadx.com","domain":"zeusadx.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zeusadx.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F7:22:F9:DC:BF:E9:B9:AE:9B:54:68:E4:FB:88:D8:55:39:F9:2D:48","sha256":"5A:EE:B0:CB:5B:69:3F:2A:46:05:94:32:7E:63:3B:BE:9D:93:66:87:33:36:1B:62:67:56:FC:53:38:2D:53:90"}}},"request":{"raw":"GET /redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806 HTTP/1.1\r\nHost: xml.zeusadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":33,"connect":107,"send":0,"wait":101,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 96\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/e6Mdx95\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"url=https%3A%2F%2Fxml.popmonetizer.net%2Fredirect%3Ffeed%3D806652%26auth%3DUpOR%26pubid%3D221748"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.popmonetizer.net/redirect?feed=806652\u0026auth=UpOR\u0026pubid=221748\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ov4Oa703n%2FtjT3HTv5Md0hB9at1QoZSOTIzUv%2B%2FYoQmTFcOxcHMEdnvrfhoPLZp3vNVXneBof1CvXRn7u67UXaNx7ROwvvWg0qPjBy2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0684f9f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:26:17 GMT","end":"Wed, 21 Jan 2026 14:26:16 GMT"},"fingerprint":{"sha1":"3D:FD:CA:AB:FD:DB:F1:C9:4B:38:D0:A1:B2:A0:48:48:85:96:EE:1D","sha256":"00:53:27:9F:94:30:76:15:B3:5B:11:E8:97:29:FF:8B:C2:D8:0B:D9:91:83:4F:1F:19:36:38:C0:73:FE:76:D9"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 96\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/e6Mdx95\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"url=https%3A%2F%2Fxml.popmonetizer.net%2Fredirect%3Ffeed%3D806652%26auth%3DUpOR%26pubid%3D221748"}},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnR4jD9lDvDG%2BPvhUlJKK919Mxf4vH4iQi9bO6I6h%2BMzRtbZbf6RTX8uQnsj4t2F8mtNEX0x7J6kiLRZWoddwY88oomYTfe3f68wHRJt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c79e64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1375b4b655e761928244f3dc3d542324","sha1":"41bcb464a2fd0a440ff36d10c899a2d96a6bca30","sha256":"d3af065b1a979140769859a3464a3dc0f167dee16085068f13a63e12b1e6ab0d","sha512":"54320c565d4569079d9321b6ef3f730c95eafbc78cb96a47b9c431cd72701833c9e4a7cb3e0fe963f550b81d8dcb271e4bbe6f232985e262a54f9e3a235f5acd","ssdeep":"","tlshash":"a0c0807b27173d59c4f7257910c361d4dbd5519354f695008140866372c71c7dfc3395","first_seen":"2023-04-14T13:21:36Z","last_seen":"2026-06-08T17:33:50.161974Z","times_seen":559,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","date":"2025-11-23T18:32:43.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371669\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/jquery.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Aug 2020 11:07:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 3801\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5f48e575-15851\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnadtddJh2RITtwWPPopBmLQ%2FadVSiL0N86EwVtvuUFicZcQk7ONx%2FhiJ0c2qG8vW1pK44CrBkEGHch1Qi4meP8yvtG45FKoIb%2FOEDI%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9a32c02629b31ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-12T01:49:15.954093Z","times_seen":133446,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/8Y7NXKX","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/8Y7NXKX HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etP0O4R4PH%2FYXAuD5FBOEXIN8W4wBWVguV4oeYKjHgQw%2FRJ7BKujsBR0qCc7X6dW58AKSltPxcA683yJv3sEApPCT7Hze6mqgl1Y38iD\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0288817b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c18fdc3a176dd227bf62723320717d5e","sha1":"79284df1f0930740d8ce0face01b6db846f25d09","sha256":"3d364d84112effd869cbf0946d78e0336ec59978c4cd8fac02e4dd7db2d8f948","sha512":"b2c6c33f54f57bec6a39c731be8d869dd25c4a090ef52ead30a113f758484c5f0f56692ad83307905d66b3bc2b09a6ce81c0c97b4d4e6bab8b540583dabb1ab4","ssdeep":"","tlshash":"ffd023153c30c8f08cc649b497edc30c0814110116c39f10c3c78352a0907c30801bfe","first_seen":"2025-07-21T15:03:56.103529Z","last_seen":"2026-01-11T02:17:37.364566Z","times_seen":108,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":68,"dns":26,"connect":3,"send":0,"wait":120,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/e6Mdx95","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/e6Mdx95 HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08WrO8%2B%2F4Zzb70XsowqWTXi5OE7QNDBYPjAyWfVst5LfiGEAgdSCE0%2BsODwxAZvbt7Qv%2Bi32RXqENFM1VDPKj9%2BsRZQZx2jYR6YTbbN6\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0289870b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8a9250d90b5473eb71bc11fcbeed9d60","sha1":"b18c224a25ce8ca258b93bf6a1a57a05ce5b6e4c","sha256":"049366e4d745fc2609c7cda874c8a101565adb9649fb04ea4437004f471910e7","sha512":"a11a0894b772ffb35ab53b34c2f6e606e70c0531230b1f8dd70256d99f601b09d45c06cad3bda4a0608db1c1bae2a8a6fd7bf7b92b3b0e72e939e3cf5abf6833","ssdeep":"","tlshash":"c0d0a76d7c20dcb0894685a567fad28c085c56016a879a51e2568790a45079119d1bea","first_seen":"2025-07-21T15:03:56.155256Z","last_seen":"2026-01-11T02:17:37.342287Z","times_seen":108,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":85,"dns":34,"connect":2,"send":0,"wait":121,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/fonts/Lato/Lato-Regular.ttf","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /fonts/Lato/Lato-Regular.ttf HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/scss/style.css\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 75136\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\netag: \"5e849bf8-12580\"\r\naccept-ranges: bytes\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wTW9r8ZtjkYBzrOr0KkzTmA%2FTd%2FKfFKeDIBNspFUoZHv7LLY8C6u68rJTATCYPZ%2B6jKE3s7IcSemZ2L7ajXY%2FJGSGeYvImIy21dEfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c02809ce1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75136,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name \"Lato\". Licensed und","md5":"2d36b1a925432bae7f3c53a340868c6e","sha1":"83dc5921761a7c3d1ee7badba3fc7e1e1f5ed803","sha256":"ea8979c22cf1d830e3ff939aadd49cc4d78c851e3cb59d2aa95ea10ee752d5d1","sha512":"f1afb5ac9f15b842742b56c19e9c48777e518fd041b96a668ea5e758a2c4846573c9f9130c55e9e0177fd9ce64daa67cad9ae3c9ece044e5a1b8e20525c64cc7","ssdeep":"1536:KQAScR26iS0TFTn1HgUSE3K1fRVxXnwaiQe1x:rcR6bFxcFRVxXw3L","tlshash":"9873e71afa877241ee3b1f38247e0323ea35f8782a1687af780e33359d561c155567ca","first_seen":"2023-04-08T09:43:18Z","last_seen":"2026-06-11T20:32:47.955511Z","times_seen":2393,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/favicon.ico","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sun, 13 Dec 2020 16:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 6518\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5fd64104-a2be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9Pwa5L9AcKcQfX%2FeRSK3V2WW5A9YmoRf1jpomAATuZbQ9IBrX9h2HJASZZK5xP5bQIj9rG7lJQKyrg9Syt%2FGsm0z33qMwhbdrasSSU%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9a32c02c19fc1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel","md5":"1f1617bb9d33485e49af9fae638831f9","sha1":"e245af39fd84866e07b7e177fa0ff6d25221252f","sha256":"3fe1701b124953220bd71e61910006cb7c3ae36f6c8975075c842101d97cf513","sha512":"f6a0187ae654a504afb66a7c9c3cdd9456d1047ce8d7498854738da7db8bb96760b0fcd9a01f802af33976b18bfb4b27c613e9df174784aa2297bfbf23b05996","ssdeep":"96:GKWKw9sbx4HVSazmdsiHecXEgpPmeAsa62EXtVc7cSVjD8dHMMMMMMMMMMMMMN:uK/b2YKQHXhFLdVcYWjD/","tlshash":"b613afbff1d58588f687e43c08c4b7a0df9b2e0a5c354f0278a2722b14744a66ae1c4f","first_seen":"2023-05-04T10:50:48Z","last_seen":"2026-05-17T12:54:14.718244Z","times_seen":961,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.revrtb.net/redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742","fqdn":"xml.revrtb.net","domain":"revrtb.net","tld":"net"},"ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.revrtb.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 Jan 2025 00:00:00 GMT","end":"Sun, 04 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:52:32:39:0E:57:2B:C3:D9:FE:55:BA:88:DF:C0:F3:CD:EA:FE:A6","sha256":"12:C5:06:7A:BF:C3:42:DF:EF:DB:6F:B0:79:9F:E0:85:6F:7C:C4:95:5B:F1:D7:BE:AE:FA:09:7F:48:AD:4D:7F"}}},"request":{"raw":"GET /redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742 HTTP/1.1\r\nHost: xml.revrtb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":380,"dns":35,"connect":110,"send":0,"wait":97,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/player.ec3b7f.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /js/player.ec3b7f.js HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Sun, 28 Sep 2025 13:19:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1166\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"68d935e7-242b5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxGFHk0pOpc8vPVNRtYmUXr4bOGJpTPADsqP8d%2BGb7%2BgT80WM4bPlOMaBGfp3F8slvw5ZVTD8jXNCOHpMv%2FQUW2oH9kBUJ06jVugkYs%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9a32c02859d11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57504)","md5":"105deb72360ffe22cd3c5d8eff38ae81","sha1":"39376249c2819f8d1e763353fac55817ffec3443","sha256":"2157a28c1746e2cdea19e9c2f67022acbe6f990b4d5d2baaae96e869a3212442","sha512":"bc81162f61262bf1e33d5df73a8931ce8f072c35a66ff017056f6be2399a686e7c71f7a3789978523897c52c80ae48cdfa359bf4917de66a3b768bcbaca715a1","ssdeep":"1536:vgSnzdHTOfC7IPScxi0n2KSBFkljzZtfWl2tLNGuvjMK2TuxCF0k7ccZHrNFY8Rq:HO6VxrQICBkdjJU5oNOpJhLf","tlshash":"76e309ca738ab131c29730ad503f520a72375b996405c258f939e9d86d7ce4ab277f38","first_seen":"2025-10-08T20:44:30.937705Z","last_seen":"2026-05-17T20:55:45.448589Z","times_seen":66,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":10,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/ca3/7ba/d0d/ca37bad0dff109d61f906abe7169a42b16eda8e0.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/ca3/7ba/d0d/ca37bad0dff109d61f906abe7169a42b16eda8e0.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 18943\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=20181\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 43c205e97c63f45793172608e3b1736e\r\nexpires: Tue, 25 Nov 2025 15:43:20 GMT\r\nlast-modified: Thu, 19 Jun 2025 11:51:43 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx8eebceb4e3164425b9d2b-006853fa03\r\nx-proxy-cache: HIT\r\nx-timestamp: 1750333902.08675\r\nx-trans-id: tx8eebceb4e3164425b9d2b-006853fa03\r\ncf-cache-status: HIT\r\nage: 10162\r\ncf-ray: 9a32c02f3ab1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"22bd48df6db2dc20a85c3f0c160d0e7f","sha1":"dc223cb47f5f3bc24a5a0cf4cca04fc38c737bed","sha256":"1237d92b217f31fa754d2cb1d9b86075359a2c9759b6228df5979bff38bd525b","sha512":"740d454d22ef05460d8dcd80ff6ebbd2013b219f9c510b416bfbd8f3acd44a43e9d5b6fdc984916584dfc7647e3a06ba31f5181a90c472f4823776d1f4099cb4","ssdeep":"384:JtdJilPcLw5nlqVvBadt0WLeOhYhl7jLKS629wpLj6gcqD:Jz4lEELuvBadNRYhdjLKa2LmgcqD","tlshash":"0482c05b7490ffa13c3b4779e36f84611668a9031c28ce968de3f6f335b4184885a5bc","first_seen":"2025-07-04T14:07:16.975866Z","last_seen":"2025-11-26T10:33:35.29727Z","times_seen":17,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":60,"connect":2,"send":0,"wait":11,"receive":17,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/0e2/e26/6f4/0e2e266f42dc9db06702654b475deccf94a64a2d.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/0e2/e26/6f4/0e2e266f42dc9db06702654b475deccf94a64a2d.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 497588\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 788712d8989fd197997cb2cccc55c1ea\r\nexpires: Mon, 24 Nov 2025 04:36:18 GMT\r\nlast-modified: Wed, 10 Jul 2024 15:38:43 GMT\r\nx-cdn-host-id: ds7288,ds7445,ds5951,ds7445,ds5833\r\nx-openstack-request-id: tx1c70999b3e2c4dc691ee7-0066cf3403\r\nx-proxy-cache: HIT\r\nx-timestamp: 1720625922.00109\r\nx-trans-id: tx1c70999b3e2c4dc691ee7-0066cf3403\r\ncf-cache-status: HIT\r\nage: 136584\r\ncf-ray: 9a32c02f2aa5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497588,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"788712d8989fd197997cb2cccc55c1ea","sha1":"0e2e266f42dc9db06702654b475deccf94a64a2d","sha256":"6d927f021791a078c49c7d5c92677c3f9d47aa7801e4532fd95a186c58825b19","sha512":"5dc0232771740d53781a62e985ab3cc85dfc06734df071d544de5ab21911c955e2cf2c411cf4b56c241fcbecfa3648bd8aec5ff337ed6e6cb587a8dfbae6ff76","ssdeep":"12288:V8SKUjz4XYAe/u/atap7IH5vMn7oR29v4Q39aHAo:/B4XYVsRi27oRZQ3YAo","tlshash":"86b423a8243a0137dc39d3a6dd94a41e0bb0ab901719d2a5dbd80ac37f7f18ebddc165","first_seen":"2023-05-06T05:34:09Z","last_seen":"2026-06-02T18:23:30.15713Z","times_seen":463,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":49,"connect":1,"send":0,"wait":6,"receive":23,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/Jrl3aGA","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/Jrl3aGA HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIkcR4LggNljzmPLPWEa1%2Fso%2B6x5v0QmxvjrjdubnoF57XjFJewkkzMr6NOq2C2K0hsdLxCpgITEWeC8ISqitkbLUjbzOqaRMhQgcN7m\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0288821b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"041e994163a0ad22a3c495b313cabe5d","sha1":"766e0e2e7efc735335807265f785267ae18bdfcd","sha256":"7ee27464e93477b54aadf02253bd7af6275912fefaadad5f209b29d145d1c0c0","sha512":"b4744c09b10fb164b506c74e71d8946716cc6b2e0f3ecfdf384d6418ae0681651dbd84b47a6990c32668f9c35a24e030aa8ed94427baf3dec32f4486611496f3","ssdeep":"","tlshash":"e3d023553c20c4f4cd4a45f967d4c38c182515411787ea50e19657d050517c30a52bea","first_seen":"2025-07-29T08:08:49.870944Z","last_seen":"2026-01-11T02:17:37.338588Z","times_seen":68,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/lxMEGZn","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/lxMEGZn HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3p58sODmjVS6arE5mkvUeCH1EeuMchFMnZ8yBRpIbEoxzOUe6OVlDwHcv736Hq%2Fu1Sxssa2Q7IkdV7V%2BgHKyscXkcpmRjLrLsd6LeZRt\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c028885bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ddac20dd2a81ad5aceeea1aa77a11c94","sha1":"799beb1e16aa0efa86a897276b24b971ff3d99bd","sha256":"806c9de974aafba84385965cbfb11d803a2599e9a4856cec8e1bdf993557eaec","sha512":"d3e44db27570180b38c3a4a833f1587bf267a9185c4ae54bdf62931b8a43ea227d2f86a757a3c40257df78e7910d604dc0ee19397e399960faff5cccfc6f4439","ssdeep":"","tlshash":"34d023693c30c4f58c4f46a567edc24c4c2816406d479e01d1c687595490bc24e51fdb","first_seen":"2025-07-29T08:08:49.852389Z","last_seen":"2026-01-11T02:17:37.332266Z","times_seen":68,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 18 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 496030\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-06-02T07:30:24.867535Z","times_seen":40047,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/qprK12e","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/qprK12e HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/lxMEGZn\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.xmlwolf.com%2Fredirect%3Ffeed%3D806902%26auth%3DCir5%26pubid%3D221823"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlwolf.com/redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ie5wIgzRu2f1%2FqwDjZOsk%2FTU9Q6Z%2B6Bzogd7Ul4Dt8F9mc1iU8XDyI2FhjCYbMhJdEwfCzSl9GBXs%2FKHD4l1AYlgyI5To5fuEFNMhsrd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c38eb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2090176?id=2090176\u0026jp=_clfgazskdererjwafgtepn\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=3wbdJA1aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=4056250116032000\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1094\u0026rlp=%5B0%2C12%2C145%2C93%2C2214%2C2670%2C831%2C2431%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:26:17 GMT","end":"Wed, 21 Jan 2026 14:26:16 GMT"},"fingerprint":{"sha1":"3D:FD:CA:AB:FD:DB:F1:C9:4B:38:D0:A1:B2:A0:48:48:85:96:EE:1D","sha256":"00:53:27:9F:94:30:76:15:B3:5B:11:E8:97:29:FF:8B:C2:D8:0B:D9:91:83:4F:1F:19:36:38:C0:73:FE:76:D9"}}},"request":{"raw":"GET /get/2090176?id=2090176\u0026jp=_clfgazskdererjwafgtepn\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=3wbdJA1aHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=4056250116032000\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1094\u0026rlp=%5B0%2C12%2C145%2C93%2C2214%2C2670%2C831%2C2431%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nUID=251123133228a411dc85d54d02a61bbee993; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13036,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (13019), with no line terminators","md5":"626e80575892c850a95a5e6ec28dcce0","sha1":"fa49d35c478fa5785d72608d6eea5a726802d6e9","sha256":"8d8510dc7f33c2151cccb572b50c990153cea8aee9ad257641672f4bde953aed","sha512":"aa6f5dfe1770411109c1f8fa08a820f4495aa2b875adc3ec3131c0df87c62537c922d7b4c2c6da730067e1b1fb99525a6cec7feca003f81580109f9d94a58f3d","ssdeep":"384:K2pi0YNG7VN1c/QwGP4YZIcMroG98ZoqKlOL+K:liapnPQExZorYL9","tlshash":"9f424c2c0f64cdc0dace2e4e6e783e3b895479b2a97e8644daf5d6851b17bb0135de00","first_seen":"2025-11-23T18:33:17.324145Z","last_seen":"2025-11-23T18:33:17.324145Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/870/711/6f1/8707116f1a7049d6fb008902f4e5de4db356122b.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/870/711/6f1/8707116f1a7049d6fb008902f4e5de4db356122b.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 510064\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 4719bec596abde70c5b20ff7dfe4359f\r\nexpires: Mon, 24 Nov 2025 16:12:40 GMT\r\nlast-modified: Thu, 16 Jan 2025 12:09:12 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx909548a225c1473f92960-006788f6ef\r\nx-proxy-cache: HIT\r\nx-timestamp: 1737029351.71377\r\nx-trans-id: tx909548a225c1473f92960-006788f6ef\r\ncf-cache-status: HIT\r\nage: 94802\r\ncf-ray: 9a32c02f4ae0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510064,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"4719bec596abde70c5b20ff7dfe4359f","sha1":"8707116f1a7049d6fb008902f4e5de4db356122b","sha256":"e886c63df4a74c548a1693433d05aebf9ce570a26ada43a62356d743145bac40","sha512":"029eb9dc52709f922b888d409dcf58f6b6dc39e590689e6f315d97f86d70630efca2b69a4d1ad91b0f0bf7a52fe3ac49d3ceb4e36901ebebb70f0fbc3ac13b47","ssdeep":"12288:xfd8kAq8j/nWFpF3JbafFm/vdAiAIWVxcCnnlYrJLietqiH9KpVI:xf6kQypF3Q8XdAiArV6CnOrJLietqiIw","tlshash":"a1b42321c9e11776c1a600e88e768b6b5425b38b9dcf1b37d6b940d79edf03e70e0899","first_seen":"2025-08-06T01:02:11.970442Z","last_seen":"2026-02-11T02:44:26.921541Z","times_seen":8,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":62,"connect":2,"send":0,"wait":18,"receive":14,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/qprK12e","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/qprK12e HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lw6uaaIXY7DZGfXIOKu7HJzSQ4nemoIvlQPCocUt704Kr4J4tYK%2Fh%2Bf8prph40OU0cottnNmffBiU%2Fj5iAzrwC9E6bWa%2FLme9L73H6ty\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669914c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b5fe77564246335749448547540fca5b","sha1":"e5cc10fc3763a5d93aebae4bebb30357d018a680","sha256":"2bb15724f00368272041d4717a578a80933a349102b8a18d4c61b05eac199b98","sha512":"9b87c60a2cc5e0be9ecd537001de52eabdea3ad2b5421cfba16d79cb2c3a83ddc8cb901e834b1d34a9dc4b79e35a5642202181e786ba7fd6e4097a7a9adb3eb4","ssdeep":"","tlshash":"42d0231a7c30c5f48d8f456573e9d14c0c5c5501ab47df11d6cb8791a1457d11991bee","first_seen":"2025-07-21T15:03:56.146769Z","last_seen":"2026-01-11T02:17:37.335402Z","times_seen":108,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/xjMNnBp","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/xjMNnBp HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xhk55xgtKwGpD4trdwCPp4ZBwyUYXaYKDBBOecJubOA%2BzSY8RC04japKcErMvFn7xyTGnAHmNijEoQ5Tq2CMuxuQL2FT%2FZKUX3hhavpr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669b44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"16a8177aec58553028fba5502e81e2a0","sha1":"e61c8876504ac880bb0ec258d4678e4f638e1e7c","sha256":"4eeb0f4f67cef3847f0adecf094c06121eeee7914a1eba8383e21f65ab73da5c","sha512":"a5175d2d6dc1a285a6769413f81432ef8fca1b42d23a25cbc90b868a7aeb580e9b0f3d3a793369619b767ab2067b36d0c886a66a5eea333fe7565f9107332cdc","ssdeep":"","tlshash":"d6d0231a7c31ccf48d8a55f5f7edc25c0c3c650165579a50d54647919481bd30d51bef","first_seen":"2025-07-29T08:08:49.867416Z","last_seen":"2026-01-11T02:17:37.337668Z","times_seen":68,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/lxMEGZn","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/lxMEGZn HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OENPllwfxoQOETMFBLf7q1Ac9ZtQt8yoO%2FwpIGt7IHrZZePbzHcfpkU1R6I2arhu19JQBONcDADVluRkIuSd2RVZc1FjJsWW14jHqYYr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06679c54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ddac20dd2a81ad5aceeea1aa77a11c94","sha1":"799beb1e16aa0efa86a897276b24b971ff3d99bd","sha256":"806c9de974aafba84385965cbfb11d803a2599e9a4856cec8e1bdf993557eaec","sha512":"d3e44db27570180b38c3a4a833f1587bf267a9185c4ae54bdf62931b8a43ea227d2f86a757a3c40257df78e7910d604dc0ee19397e399960faff5cccfc6f4439","ssdeep":"","tlshash":"34d023693c30c4f58c4f46a567edc24c4c2816406d479e01d1c687595490bc24e51fdb","first_seen":"2025-07-29T08:08:49.852389Z","last_seen":"2026-01-11T02:17:37.332266Z","times_seen":68,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/DbD630d","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/DbD630d HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQMOc%2BkhMtw%2FfzBZZQ%2FHaa264xViCaUKiSn2kGxMlgjCto%2BT30xbjmu5pA%2FzV0otydfwTb4f%2BLN6HIa26Apa5JNaMp%2FSLVmBvIv8zgfb\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c028881fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5e1e531c08c534919ce2ce069d1968a8","sha1":"ca108a95aeccf7ecce3bd13cbfeaadbae1834a80","sha256":"4f3f680f74e6f2f37940bc46d3bf9356fa224ff7c76cbd7356b62eca5bda4776","sha512":"8fb0f66b24404d0ea6f5623d9356f566b3f4ed597f6bab1bbbdd83034710726e2bcbf7b0e052c0025c5d17efd68ec6ea970d55763964dbbbd648708c0105995b","ssdeep":"","tlshash":"6bd023193c31c5f48c4a59f5e7e8c18c082855016a47ee21e14647545040bc30952bfa","first_seen":"2025-07-29T08:08:49.844485Z","last_seen":"2026-01-11T02:17:37.334484Z","times_seen":69,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 93\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/31VDa4y\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"url=https%3A%2F%2Fxml.popviking.com%2Fredirect%3Ffeed%3D806733%26auth%3DJLhS%26pubid%3D221793"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.popviking.com/redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6N%2FGTcgoxbZVC86X4vJ19LSgZ%2F%2Bh8t0QFxbVmF9ObiF0RiFk7oqKH4roNuQuD7dfRGICkuqnnL9JUnGKTP0%2FLVUH7r8shv4khIPPVVH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02d5d164c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.popviking.com/redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793","fqdn":"xml.popviking.com","domain":"popviking.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.popviking.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 08 Jan 2025 00:00:00 GMT","end":"Thu, 08 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:6F:D5:4B:15:47:E6:F0:AF:7E:F2:B2:DE:16:DB:32:4E:BF:65:CC","sha256":"8C:A1:D1:A4:07:D5:D4:9B:F6:AE:97:25:4F:48:D1:B7:7B:2B:DC:A5:65:C7:1A:7B:49:CE:39:9E:D7:E1:E5:39"}}},"request":{"raw":"GET /redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793 HTTP/1.1\r\nHost: xml.popviking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":37,"connect":109,"send":0,"wait":160,"receive":1,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.popmonetizer.net/redirect?feed=806652\u0026auth=UpOR\u0026pubid=221748","fqdn":"xml.popmonetizer.net","domain":"popmonetizer.net","tld":"net"},"ip":{"addr":"174.137.133.18","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.popmonetizer.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 Jan 2025 00:00:00 GMT","end":"Tue, 03 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B3:2F:19:5C:F8:68:56:9D:7A:AD:03:2E:AA:3B:FB:24:6A:3F:6D:40","sha256":"3F:E6:1A:A6:18:28:A4:08:3B:5D:2F:19:D8:EF:06:CB:C4:A6:9B:4E:8A:15:59:83:4E:40:F8:23:7B:06:7C:AB"}}},"request":{"raw":"GET /redirect?feed=806652\u0026auth=UpOR\u0026pubid=221748 HTTP/1.1\r\nHost: xml.popmonetizer.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":421,"dns":32,"connect":98,"send":0,"wait":101,"receive":1,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:26:17 GMT","end":"Wed, 21 Jan 2026 14:26:16 GMT"},"fingerprint":{"sha1":"3D:FD:CA:AB:FD:DB:F1:C9:4B:38:D0:A1:B2:A0:48:48:85:96:EE:1D","sha256":"00:53:27:9F:94:30:76:15:B3:5B:11:E8:97:29:FF:8B:C2:D8:0B:D9:91:83:4F:1F:19:36:38:C0:73:FE:76:D9"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-2dc1a\"\r\nexpires: Sun, 30 Nov 2025 18:32:40 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187418,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a8109e47dc642325928c847ba7834e7b","sha1":"08d99f57cc17cc942dd57a81d293901fd76fe5be","sha256":"5f9bce7c22a87af3921e5c418eec498de16ddbe573eb30202b9ba5444a5ef8e6","sha512":"d6942804977cb54584c1f36b822e8785ceb97ec349f42d2046142c138ebec8d401a024debac5c02d32aba30888d407d2740dcc252f8477b4d0b8db67c2ee27ac","ssdeep":"3072:vjm2cTaLN4nJCi/ZbFHyYFuit3+yMfwp6ya00Yg3UokxAELd2cj5pAAbXGYLcY3H:rBtB4nJ/ZbFSYFuitOyMfwp6ycYQUokl","tlshash":"d90493dc3b5c2075411373af9c2b2525a8fdbcd3986d40079cebc284a9fa649e633b56","first_seen":"2025-11-18T15:27:47.394769Z","last_seen":"2025-11-24T11:59:21.817725Z","times_seen":58,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":40,"dns":1,"connect":21,"send":0,"wait":17,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/xjMAQr3","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/xjMAQr3 HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS9QGvg8qu3jxSlJwpMXUkKY4nwrg9zR9IuejmpE7hYXn6HDpVEzGUah1IgSci2XdJknJR%2B6UQMrxfZb%2BdAKaKU7PpcKACftQRs62Ovo\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0289873b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a0c5cf5e95b299cd618650d89453c16d","sha1":"3bcbc294d2eb3a752b0e24fe085dc995948d4906","sha256":"eb024c7e3480bcc5c666869cb3a484294f971174248235d0193680e9eae9974b","sha512":"21179e93c3b2283b0084d4dc2e8b335c4a5dc28fce6ba8d26f6f42d43fa69a33ddec3b590401fba331df7c10750855a699f8345e220d4a53e409cf90b68ec9b5","ssdeep":"","tlshash":"94d023567c61d9f48c4b59f997ddd15c183d510015479a50d29787a09040bd30952fef","first_seen":"2025-07-21T15:03:56.129084Z","last_seen":"2026-01-11T02:17:37.349423Z","times_seen":108,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":83,"dns":29,"connect":3,"send":0,"wait":121,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/DbD63EO","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/DbD63EO HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NI4BR%2FrN%2F0rM7x55NYUBk%2FCFpoXvfbFVMyrd%2BRwtuWAe1l%2BlzE%2BvtBljo%2B%2FtGBWARew89ihPTJdwWoHJRzt1viX%2BpOLaNVheIGXlaAKq\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c0288837b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"49452373368b94bceeab829ff240eb4d","sha1":"41cff4504cce3446c86d9c1700a625f9f7544bd7","sha256":"38c2d5bb8daf66fdd3e6f75392c73b04025d098db19d77c52fcb5c63037a9a60","sha512":"1af54c3135b681db80aa9e273360695d59a0df5f3ecf6bf971f213be51ac1ad661aeedcd3bec0261f1d311df8a9a9281893c5c9ec24ae6cb6f09a796b4147f20","ssdeep":"","tlshash":"cfd0a7263c26c5e488565aa967d5c64c1824660056839a50d697865050807960962bea","first_seen":"2025-07-29T08:08:49.857906Z","last_seen":"2026-01-11T02:17:37.323612Z","times_seen":69,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zeusadx.com/redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806","fqdn":"xml.zeusadx.com","domain":"zeusadx.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zeusadx.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F7:22:F9:DC:BF:E9:B9:AE:9B:54:68:E4:FB:88:D8:55:39:F9:2D:48","sha256":"5A:EE:B0:CB:5B:69:3F:2A:46:05:94:32:7E:63:3B:BE:9D:93:66:87:33:36:1B:62:67:56:FC:53:38:2D:53:90"}}},"request":{"raw":"GET /redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806 HTTP/1.1\r\nHost: xml.zeusadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/xjMAQr3","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/xjMAQr3 HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKoax%2BJz%2Bu90Cg%2B4WkyQI0pZwek4vaKbEoALiA9Qr9db9irhuO%2BnB2OBFQTN%2BQs3RStsFF%2BJySBOI46baAXPXjrv4WvCN7OiT%2FOfkiXS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669a44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a0c5cf5e95b299cd618650d89453c16d","sha1":"3bcbc294d2eb3a752b0e24fe085dc995948d4906","sha256":"eb024c7e3480bcc5c666869cb3a484294f971174248235d0193680e9eae9974b","sha512":"21179e93c3b2283b0084d4dc2e8b335c4a5dc28fce6ba8d26f6f42d43fa69a33ddec3b590401fba331df7c10750855a699f8345e220d4a53e409cf90b68ec9b5","ssdeep":"","tlshash":"94d023567c61d9f48c4b59f997ddd15c183d510015479a50d29787a09040bd30952fef","first_seen":"2025-07-21T15:03:56.129084Z","last_seen":"2026-01-11T02:17:37.349423Z","times_seen":108,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/31VDa4y","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/31VDa4y HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rdt5AKLr%2FmvnX3ptV4oHfC%2Bo7t5vEO0ryWZSEvdqkwidfrqRYwICroQeSaK6Xnd7V4bbJDKb2PkEO2%2BJUvLr%2B0qjrB8dit%2FbNLYxUop\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c028987bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e07fe3e6226669be37b0c88193167cf4","sha1":"b0ec0b92df2b469704315d9adf9007046d681312","sha256":"093f1f6c9be6222ca7057b7aec9103dd0ff01f706d3f1ebce09d69fdafa67535","sha512":"30c0e68a8ac168b70f915af768541f14909c53d5a1e5632c4fb90c3134acefa3a79e793f9fe3c94c7fd0d095fef6af50a9a5b21a9d0b651c51d166c565d7bb79","ssdeep":"","tlshash":"87d023093c20d4f0ccca89f553edc14c082c20403ac3de01c28a43a051807c30942bea","first_seen":"2025-07-21T15:03:56.138612Z","last_seen":"2026-01-11T02:17:37.330929Z","times_seen":109,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":81,"dns":33,"connect":4,"send":0,"wait":122,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmlwolf.com/redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823","fqdn":"xml.xmlwolf.com","domain":"xmlwolf.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xmlwolf.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 27 Jul 2025 00:00:00 GMT","end":"Wed, 26 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:13:32:B7:B9:88:49:B4:34:18:D5:8C:16:C6:40:C2:2A:1A:C0:54","sha256":"90:F9:B5:EE:98:A3:2B:BD:99:33:2A:58:6F:8A:27:90:EC:05:73:36:48:80:72:24:5B:28:96:B5:BD:9A:F8:3A"}}},"request":{"raw":"GET /redirect?feed=806902\u0026auth=Cir5\u0026pubid=221823 HTTP/1.1\r\nHost: xml.xmlwolf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/fonts/Comfortaa/static/Comfortaa-bold.ttf","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /fonts/Comfortaa/static/Comfortaa-bold.ttf HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/scss/style.css\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 139892\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\netag: \"5e849bf8-22274\"\r\naccept-ranges: bytes\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZyVG%2FVwu30mUOz3iQs6HXonXRrb4QSwbMcr9fd%2FwzTal%2FS6iIlzC6BAJ4842CuhJLMharmd83xSxKSmGetWBDuPcFckHVmrzjY%2FKdYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c02809cf1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139892,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409, Copyright 2011 The Comfortaa Project Authors (https://github.com/alexeiva/comfortaa), with Reser","md5":"266e51ad11e63d67171aeadebc6ab541","sha1":"e7268b6d7cc37d762d6082689ae61d7ad89f0cdf","sha256":"d262b2243797b03d2978feb8d5d072e53453794c550950546f15d3b933e07dd6","sha512":"bed944e651f984acb66871ed755954070ad7c211ee86fbc50c1b85d2a4de8a9f4dc54ad1f874bea171b028681c3edef9f0157ca656cd6c5733f5b3afc71a500d","ssdeep":"3072:vXPfwXE5It8ZXNYINHDDSjMtBFj+a9UVadEDWR:XYXLt8ZXusfSjMnFCa9UqED6","tlshash":"53d34b07fb52d3c9cd0a5cb842b5e6912bf8fd34197ec29fa4b0a67eddab5410c22149","first_seen":"2023-04-10T18:14:19Z","last_seen":"2026-05-17T12:54:14.743961Z","times_seen":299,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 96\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/DbD63EO\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"url=https%3A%2F%2Fxml.cachegorilla.com%2Fredirect%3Ffeed%3D806709%26auth%3Dw4fo%26pubid%3D221775"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.cachegorilla.com/redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1yt1h1ytiJyzvaizQdNFs1Sz51wOsvxIo99KdAtHKVEwMj5mfrqO%2FqI1KViUWUZXx8WbcAqD1xa1JKvpIQ9KsZXGwF0rwZepoBbNhIp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02c28a04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2090176\u0026pb=a19ba0f120d23a63c266e42913dccb751763929961\u0026pbc=Ul--mWdKG3RpbyNp\u0026pbi=Dg5VXYQUaEhpbyNp\u0026pbu=IXtAaXg0AS5pbyNp\u0026psp=cTtJXqYkrrZk-MvKDBlWf3-bmE-igZEZTNkYhYj-74IDc6WQztMrByBzugxRQS9dgjH3e1w3PpgD5ctv4MCqLQJCOb8fjDN12y6HNrlbzAoNQJgaVbEuusTXZE0w4zLL1Xf3dvUh3sB8uN8hXqU3H1Z88WJgLduYCekMfettBljtOROt_Yct6zWrXK8H-sZDheJLl6tRoQzDD015xd-pgZ-Du4UJHjtCnqLVQ4nt6DROD5hvk1saZ8kA03dFWiTKQgU1NPOEs_wSjv9NMooZoqdBF9OS5duSwgxuYRWEeNTQs5XapbJ8mG6_Ngp2q5GmRZPeT5ze1FMqQSe8D5XJfnknHiKwddV2sR0hPDsFl-uTIdZiW-Z0EKK277P5gMQIzeBY_IDtwY8s6CT3kT2SRwjXxGLJlvEfAm6sMsIC7L-rTWKZFR2OyqPTjCSpf2PVERuZAjG02no_ADoaJvMoumSoEuhMzb_-CedWWeMuGwRNlXBA2p2MNtIbe37TYekN7nFVyqROAGYb43eUeW813LQEF0FVmPqKt0AYXeDHxSry4Md_Si0Jp2kCpkgR1Rl8VXAL8fGbdsq5ULWYgHf-lfTc4eSEmTx750DlpgRz89xzA4XJ6PeIsneap2e3Xe8Bipa_X7T3AWpS1xrcYXhmmSDkhMLiEB-pF68fLiTqwmnBW8jdsyb2nDrVuz88tgOHgdsHY4QQdZ8gUDvB9BeXovZei5Ek1O8Eap48nPlYNtn8o8biXXUSMoGdEJC7YFD97G79dZx6XtzdT3W1PUKrLACECcoY4N6zbJyMQ6qPPctuKNkyj_N57x72qnZ-CvzU-x-jtTOcfN8uiPvfvKDTFbu1OA82gg==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=QHn4FUNaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=115600442217984\u0026caifrq=ADQJaAAAAAAAAAABACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2784\u0026rlp=%5B0%2C42%2C439%2C341%2C24902%2C11146%2C1247%2C10907%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:43.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:26:17 GMT","end":"Wed, 21 Jan 2026 14:26:16 GMT"},"fingerprint":{"sha1":"3D:FD:CA:AB:FD:DB:F1:C9:4B:38:D0:A1:B2:A0:48:48:85:96:EE:1D","sha256":"00:53:27:9F:94:30:76:15:B3:5B:11:E8:97:29:FF:8B:C2:D8:0B:D9:91:83:4F:1F:19:36:38:C0:73:FE:76:D9"}}},"request":{"raw":"GET /chicken.gif?z=2090176\u0026pb=a19ba0f120d23a63c266e42913dccb751763929961\u0026pbc=Ul--mWdKG3RpbyNp\u0026pbi=Dg5VXYQUaEhpbyNp\u0026pbu=IXtAaXg0AS5pbyNp\u0026psp=cTtJXqYkrrZk-MvKDBlWf3-bmE-igZEZTNkYhYj-74IDc6WQztMrByBzugxRQS9dgjH3e1w3PpgD5ctv4MCqLQJCOb8fjDN12y6HNrlbzAoNQJgaVbEuusTXZE0w4zLL1Xf3dvUh3sB8uN8hXqU3H1Z88WJgLduYCekMfettBljtOROt_Yct6zWrXK8H-sZDheJLl6tRoQzDD015xd-pgZ-Du4UJHjtCnqLVQ4nt6DROD5hvk1saZ8kA03dFWiTKQgU1NPOEs_wSjv9NMooZoqdBF9OS5duSwgxuYRWEeNTQs5XapbJ8mG6_Ngp2q5GmRZPeT5ze1FMqQSe8D5XJfnknHiKwddV2sR0hPDsFl-uTIdZiW-Z0EKK277P5gMQIzeBY_IDtwY8s6CT3kT2SRwjXxGLJlvEfAm6sMsIC7L-rTWKZFR2OyqPTjCSpf2PVERuZAjG02no_ADoaJvMoumSoEuhMzb_-CedWWeMuGwRNlXBA2p2MNtIbe37TYekN7nFVyqROAGYb43eUeW813LQEF0FVmPqKt0AYXeDHxSry4Md_Si0Jp2kCpkgR1Rl8VXAL8fGbdsq5ULWYgHf-lfTc4eSEmTx750DlpgRz89xzA4XJ6PeIsneap2e3Xe8Bipa_X7T3AWpS1xrcYXhmmSDkhMLiEB-pF68fLiTqwmnBW8jdsyb2nDrVuz88tgOHgdsHY4QQdZ8gUDvB9BeXovZei5Ek1O8Eap48nPlYNtn8o8biXXUSMoGdEJC7YFD97G79dZx6XtzdT3W1PUKrLACECcoY4N6zbJyMQ6qPPctuKNkyj_N57x72qnZ-CvzU-x-jtTOcfN8uiPvfvKDTFbu1OA82gg==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=QHn4FUNaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=115600442217984\u0026caifrq=ADQJaAAAAAAAAAABACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2784\u0026rlp=%5B0%2C42%2C439%2C341%2C24902%2C11146%2C1247%2C10907%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; PTS=; UID=251123133228a411dc85d54d02a61bbee993; CHCK=1; BCAI=ACZLEAAAAAAAAAAB; BMI=ADOwKAAAAAAAAAAB; BCRI=Po2JKwAAAAAAAAAB; OACICAP=ACZLEAAAAAAAAAAB; OACIBLOCK=ACZLEAAAAABpIz2Q; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: OACICAP=ACZLEAAAAAAAAAABADQJaAAAAAAAAAAB; Path=/; Expires=Tue, 23 Dec 2025 18:32:43 GMT; Secure; SameSite=None\nOACIBLOCK=ACZLEAAAAABpIz2QADQJaAAAAABpIz2Q; Path=/; Expires=Tue, 23 Dec 2025 18:32:43 GMT; Secure; SameSite=None\nBCAI=ACZLEAAAAAAAAAABADQJaAAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:43 GMT; Secure; SameSite=None\nBMI=ADOwKAAAAAAAAAABAEaGKwAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:43 GMT; Secure; SameSite=None\nBCRI=Po2JKwAAAAAAAAABcM9GzAAAAAAAAAAB; Path=/; Expires=Mon, 24 Nov 2025 18:32:43 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Mon, 24 Nov 2025 18:32:43 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/prebid.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /prebid.min.js HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Wed, 13 Nov 2024 21:29:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5647\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"67351a53-14\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Erh%2BoAF4aaLzdurNiY9ZoDgXOeAgPDEwaGeFNzSi0aVZkZsXKe6hGTwj3ttkO7ur2FqDqn2EgIy%2BBYBCBhWDpvsteAc6a3ghG4BtvY%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9a32c02629b51ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"69a305bcdc8e061bbd43294a477a3678","sha1":"506582a1d912d546f5942d95ffae95ec7f4c37ce","sha256":"8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa","sha512":"feb32ed92acbef86c4ce3cb32637ccdf02519d1725db5af667cfe29b842efe4a195ad0deef44fb6c592a50d7e4759bd4c819c2dc439a4d373ef186cb7d2dc553","ssdeep":"","tlshash":"9d70000222808032c03c8000808800088020000ac08320222a000000000030200002c3","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-06-06T18:25:56.281214Z","times_seen":2351,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/fonts/Lato/Lato-Italic.ttf","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /fonts/Lato/Lato-Italic.ttf HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/scss/style.css\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 75744\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\netag: \"5e849bf8-127e0\"\r\naccept-ranges: bytes\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sbiZ9nOi6zlS1j7%2B0uYHSexBgmBCTna3IFW%2Bf7S9FBht2Ss%2Fxx8Sq5hFqtOrvmWdapjA4Z5hB5b7imYQaLNQ1vykvJtXwdGKZEyz38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c02ae9f11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75744,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409, Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic with Reserved Font Name \"Lato\". Licensed und","md5":"7582e823ef0d702969ea0cce9afb326d","sha1":"ebf006602bcfc0467d29735fdf3481bb6121860e","sha256":"118c8f4fa60ac74abb899962311cf15781aababb3634225d1b8f889fa16fd026","sha512":"bf0630c6b73f11dd6b621941f0fcdfa772d3acce37d058367e82da93155f3ac19d11c1c14e21253153507d695942f4c6ee8d1f0eb7ea9dac098cfb347f56de13","ssdeep":"1536:jQAdIR0mK1mYmRu0AID23GRETZ0dRV49IcUwayHjg/:eRzYmRM53GR0eRVFwLHk/","tlshash":"be73061aff4bb641ee3b1b3c28ba03739624f8342b5587af381e33658c561d159527ca","first_seen":"2023-04-10T18:14:19Z","last_seen":"2026-06-05T18:55:35.009802Z","times_seen":222,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/DbD630d","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/DbD630d HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Vp1juPeBXOrbO1uoGIE6mAKLbcnt6NGCALJFJTdNMG1cC5e2dlx6sVYCUsgjTJwaDD0gvqcOPt%2B6BSymTSKtzJ7vk9FSZXNsqLpU9Rq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669b94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5e1e531c08c534919ce2ce069d1968a8","sha1":"ca108a95aeccf7ecce3bd13cbfeaadbae1834a80","sha256":"4f3f680f74e6f2f37940bc46d3bf9356fa224ff7c76cbd7356b62eca5bda4776","sha512":"8fb0f66b24404d0ea6f5623d9356f566b3f4ed597f6bab1bbbdd83034710726e2bcbf7b0e052c0025c5d17efd68ec6ea970d55763964dbbbd648708c0105995b","ssdeep":"","tlshash":"6bd023193c31c5f48c4a59f5e7e8c18c082855016a47ee21e14647545040bc30952bfa","first_seen":"2025-07-29T08:08:49.844485Z","last_seen":"2026-01-11T02:17:37.334484Z","times_seen":69,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/Jrl3aGA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.xmlwiz.com%2Fredirect%3Ffeed%3D806717%26auth%3Dxoz3%26pubid%3D221781"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlwiz.com/redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJZDBj7MBOa22SO1Kt30bdDPBjTiK1y73Q0ApP3YqYLKbW3Kl1XF9ZzCxt5HY9TSqRNImFylMmPrTZ4iD9o3YncPE%2B1WUo%2FsDcQJpxXK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0694b614c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://advertape.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 19 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371667\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":139,"dns":30,"connect":21,"send":0,"wait":23,"receive":94,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fikquctziqku.com/fabomjv/hic?zxGSdu=fRm0\u0026pko=5\u0026wn=_amerbgvbceqypelcrjcpzg\u0026hg=2587053\u0026amjb=cz\u0026trf=252895\u0026cd=unhxmb\u0026dk=3\u0026yaa=zt\u0026bipgpf=841056\u0026suz=aq\u0026yn=369406","fqdn":"fikquctziqku.com","domain":"fikquctziqku.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fikquctziqku.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:18:39 GMT","end":"Thu, 01 Jan 2026 15:18:38 GMT"},"fingerprint":{"sha1":"92:2E:CA:08:75:75:69:C0:5F:91:39:02:B2:60:43:EB:5A:39:66:EE","sha256":"CB:8F:95:A5:23:E5:82:C3:9E:54:F4:19:1C:5D:0F:04:9F:7F:EC:F0:26:2E:69:60:13:36:78:BA:B0:F7:09:3F"}}},"request":{"raw":"GET /fabomjv/hic?zxGSdu=fRm0\u0026pko=5\u0026wn=_amerbgvbceqypelcrjcpzg\u0026hg=2587053\u0026amjb=cz\u0026trf=252895\u0026cd=unhxmb\u0026dk=3\u0026yaa=zt\u0026bipgpf=841056\u0026suz=aq\u0026yn=369406 HTTP/1.1\r\nHost: fikquctziqku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\nUID=2511231332efd8fa20af1b40228b119ddfed; Path=/; Expires=Sun, 27 Dec 2026 18:32:41 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2152,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2152), with no line terminators","md5":"7f06e8e2a5fdd70c9b14b5f2adc5e8db","sha1":"a0fbf814d11a4a4cae979fdc6984e65da96d965a","sha256":"45b093c8b182312d28b694d56b37068bbe4926af37a8624ed60e0b2370e2644e","sha512":"bff660fd47f02ae19ecfd4bb828999d752bfd98cc2582d0a7bd558be20fbca3eaa300076b7ca6397155053011975882bfdcf5de4159be90672c51c2ab34cdacd","ssdeep":"","tlshash":"9d4178b994a3d5985ab4c80fc6f92d81210facebda5bdb632304f780a6af9745503906","first_seen":"2025-11-23T18:33:17.329506Z","last_seen":"2025-11-23T18:33:17.329506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":45,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.poprtb.com/redirect?feed=806741\u0026auth=nooa\u0026pubid=221800","fqdn":"xml.poprtb.com","domain":"poprtb.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:42.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.poprtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Thu, 23 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:B6:11:F4:1D:6F:59:92:74:6D:33:12:90:53:8E:3A:22:AB:49:F6","sha256":"82:3C:DC:85:97:03:50:74:DB:DC:D1:A7:30:8C:66:27:CA:C6:C5:DC:A2:3A:28:62:6B:3A:99:B1:0F:9C:FA:78"}}},"request":{"raw":"GET /redirect?feed=806741\u0026auth=nooa\u0026pubid=221800 HTTP/1.1\r\nHost: xml.poprtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":9,"dns":34,"connect":95,"send":0,"wait":116,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxnexus.com/redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763","fqdn":"xml.adxnexus.com","domain":"adxnexus.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adxnexus.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2B:D7:FA:00:41:9F:B6:1F:8D:05:44:E7:C5:60:D8:13:17:D9:4D:77","sha256":"80:70:9A:54:60:F0:B6:E5:64:09:54:A2:9D:C7:9B:44:72:F0:EB:5E:64:6A:B2:AE:1B:8E:0B:4A:57:04:52:FA"}}},"request":{"raw":"GET /redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763 HTTP/1.1\r\nHost: xml.adxnexus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.popviking.com/redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793","fqdn":"xml.popviking.com","domain":"popviking.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.popviking.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 08 Jan 2025 00:00:00 GMT","end":"Thu, 08 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:6F:D5:4B:15:47:E6:F0:AF:7E:F2:B2:DE:16:DB:32:4E:BF:65:CC","sha256":"8C:A1:D1:A4:07:D5:D4:9B:F6:AE:97:25:4F:48:D1:B7:7B:2B:DC:A5:65:C7:1A:7B:49:CE:39:9E:D7:E1:E5:39"}}},"request":{"raw":"GET /redirect?feed=806733\u0026auth=JLhS\u0026pubid=221793 HTTP/1.1\r\nHost: xml.popviking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/popper.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /js/popper.min.js HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Apr 2020 13:49:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5e849bf8-4dbf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHI00MLTJ09ubbKKsghsdwNDlvNW9ugQ3SYIbyY5gZewbe83SZeKttnrhIocFIOxssNvAfPrME30x%2FwK6IldzfWPv5hK1XZV3u3N8aM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9a32c02629b81ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19903,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19730)","md5":"710021214a23cf8a5a5841a648d65832","sha1":"bcbf44d5fea869488f3875c1deb6a139134f99bb","sha256":"3b5ec1c452ad4edd6dcf3964718c2038dc382b9f47fabd6223c992417bd27f99","sha512":"787a35a72b05a8d9a61a143c0e76197c15439601526efdebc52d1bff9f84caf81e9bfc64d34ebc71c783f064e524e66c52bb6300d22b161865c26b0bd4adcf2a","ssdeep":"384:GBCe3+/d5jcfCmuO9yG1FwqSuotRP+SjRxHHtjgOgNF+XNzCSzfV53N7ZmNXvitM:GBCe3+/nACmusyG1FwHhtR3TntjGQUS6","tlshash":"6a9285dc3294b02543aa85abb0ba860eb23244b5710f6414f19cb5de7c32df650bfd7a","first_seen":"2023-03-07T13:50:45Z","last_seen":"2026-05-17T12:54:14.707114Z","times_seen":309,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/qprK12e","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/qprK12e HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yqrj8kLXd3AMC3qb%2Ft8yDV0PgJZhvq%2FCMcX%2FG6rXCT8XAK3cZWCG9mhAK1JPlvJkRb41hv2enB0QYAE4AR5vVRgqt17Ei%2FeynZuvdRgE\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9a32c028885fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b5fe77564246335749448547540fca5b","sha1":"e5cc10fc3763a5d93aebae4bebb30357d018a680","sha256":"2bb15724f00368272041d4717a578a80933a349102b8a18d4c61b05eac199b98","sha512":"9b87c60a2cc5e0be9ecd537001de52eabdea3ad2b5421cfba16d79cb2c3a83ddc8cb901e834b1d34a9dc4b79e35a5642202181e786ba7fd6e4097a7a9adb3eb4","ssdeep":"","tlshash":"42d0231a7c30c5f48d8f456573e9d14c0c5c5501ab47df11d6cb8791a1457d11991bee","first_seen":"2025-07-21T15:03:56.146769Z","last_seen":"2026-01-11T02:17:37.335402Z","times_seen":108,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":80,"dns":24,"connect":3,"send":0,"wait":122,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Nov 2025 17:59:03 GMT\r\nexpires: Fri, 20 Nov 2026 17:59:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 261220\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-06-12T01:22:58.22315Z","times_seen":341026,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":108,"dns":1,"connect":14,"send":0,"wait":16,"receive":5,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/qprK12e","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/qprK12e HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/scss/style.css","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /scss/style.css HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 19 May 2020 21:38:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5962\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5ec451ee-3708\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAS2xKmutXcExxDVr%2B8nueD%2Fg9rCjS0tdNq7mw0ec6QLI9CSwD9VL3Xt2HNHmXypzQS7Rl32E3hPWAIxGKdg1mNt0NPS%2Bc%2Fui2ih28A%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9a32c02619b21ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12855), with CRLF line terminators","md5":"33d3ff43345064cdb3d5b810054549d4","sha1":"3973f8f297b7387f618add4df44cec7fe610152f","sha256":"a833e56956a49699d75f762db47b80fabd66e6a9a463f343aa92537243a49368","sha512":"fde98de0d8f5b85d878e36cf2c6f492ca039b1dc2cd692b5d9db2f3feb11f6cdf52ef72850160a660666453be986e9cbc5bd4d90ba683edec21bf48f18ff0dac","ssdeep":"384:X9286PLcn4/cILv+or4k76swfbCVz4Z4BofA:X886PLdLv+or4k76swfbSDmA","tlshash":"7152d8528f04125eb327576bb5da7648ad3a4012ca651a7bf75d3838cfc90b01327bf8","first_seen":"2023-04-10T18:14:19Z","last_seen":"2026-05-17T12:54:14.730029Z","times_seen":212,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxnexus.com/redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763","fqdn":"xml.adxnexus.com","domain":"adxnexus.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adxnexus.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2B:D7:FA:00:41:9F:B6:1F:8D:05:44:E7:C5:60:D8:13:17:D9:4D:77","sha256":"80:70:9A:54:60:F0:B6:E5:64:09:54:A2:9D:C7:9B:44:72:F0:EB:5E:64:6A:B2:AE:1B:8E:0B:4A:57:04:52:FA"}}},"request":{"raw":"GET /redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763 HTTP/1.1\r\nHost: xml.adxnexus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":378,"dns":19,"connect":122,"send":0,"wait":111,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs\u0026co=aHR0cHM6Ly9hZHZlcnRhcGUubmV0OjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=34t1ehows5v","date":"2025-11-23T18:32:43.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 17 Nov 2025 12:58:05 GMT\r\nexpires: Tue, 17 Nov 2026 12:58:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 538478\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:49:31.77778Z","times_seen":543164,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":93,"dns":1,"connect":15,"send":0,"wait":22,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/e6Mdx95","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/e6Mdx95 HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7yhb0QiMsX6293Z%2BQGsG0an46ulspF5ddfN3P70OXyyMHrgGQc4pd%2F6SkxUSXYQkPtffWDWukNFzNkJtom5GucPLeu%2BqUmA8PjAPQQ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669984c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8a9250d90b5473eb71bc11fcbeed9d60","sha1":"b18c224a25ce8ca258b93bf6a1a57a05ce5b6e4c","sha256":"049366e4d745fc2609c7cda874c8a101565adb9649fb04ea4437004f471910e7","sha512":"a11a0894b772ffb35ab53b34c2f6e606e70c0531230b1f8dd70256d99f601b09d45c06cad3bda4a0608db1c1bae2a8a6fd7bf7b92b3b0e72e939e3cf5abf6833","ssdeep":"","tlshash":"c0d0a76d7c20dcb0894685a567fad28c085c56016a879a51e2568790a45079119d1bea","first_seen":"2025-07-21T15:03:56.155256Z","last_seen":"2026-01-11T02:17:37.342287Z","times_seen":108,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/xjMNnBp\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.poprtb.com%2Fredirect%3Ffeed%3D806741%26auth%3Dnooa%26pubid%3D221800"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.poprtb.com/redirect?feed=806741\u0026auth=nooa\u0026pubid=221800\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APTM2ejR8aL02SnOFVcOQimI5DncFZ9KIKzrYsPjjPIyt20aJjgjlfCrhaQtGT6x9NTIedmzp887HyxOI81PFqyEaQPx8R5fPJ%2BKWuj5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0690a8f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/Jrl3aGA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.xmlwiz.com%2Fredirect%3Ffeed%3D806717%26auth%3Dxoz3%26pubid%3D221781"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.xmlwiz.com/redirect?feed=806717\u0026auth=xoz3\u0026pubid=221781\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMLw3Sl70Drn9D7YMa14ErxLnFLuagG%2BZxAqXUFT3qQQgXPtTRpL3DVEmNhO8m9Kh%2B%2B14keWmKwzZjyMVDOmmRitKSHZE0jU6ujEL10G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02dbe9b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/d6c/303/169/d6c303169f16834659ea448f5470aa514aadce6b.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/d6c/303/169/d6c303169f16834659ea448f5470aa514aadce6b.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 7992\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=9483\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 740d9fea030595dd1e18d974a02f7d43\r\nexpires: Mon, 24 Nov 2025 05:59:16 GMT\r\nlast-modified: Tue, 27 Aug 2024 16:02:53 GMT\r\nx-cdn-host-id: ds7288,ds7445,ds5951,ds7445,ds5833\r\nx-openstack-request-id: txe186362e56ba4ba0be312-0066cf3218\r\nx-proxy-cache: HIT\r\nx-timestamp: 1724774572.00691\r\nx-trans-id: txe186362e56ba4ba0be312-0066cf3218\r\ncf-cache-status: HIT\r\nage: 131606\r\ncf-ray: 9a32c02f2aa3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"ee484990c92643912a0ebc08c408b640","sha1":"1c599cf15aab088e2da80a0e47e28c7d4020c0ee","sha256":"5fcf8f4d9e7d742243fbb984cf008c2871ba78e9238e58d1b6cf7fc927660e3d","sha512":"678a9d1a3978b619b3778a52c524933ad55cb22ad6a985ba6a7b8389741e2e6cc21bf0c359cbb19b9bbdef2adc8a76dbf229ff179a4525cb6219bf8418d8674e","ssdeep":"192:++sl6JzXd9gCO86TjKoVKTSoJLFmK/p7QIZZogOYOduCVS4SO:3s0JzXd9/6+T/xvpnTO","tlshash":"75f19f9be359b488373f3cb96103a6cae1468b25a35b97d38a1888bc296c376039454c","first_seen":"2025-07-05T23:01:49.462184Z","last_seen":"2025-12-03T17:47:58.621622Z","times_seen":195,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":57,"connect":1,"send":0,"wait":11,"receive":20,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/solid.gif?z=2063262\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=o3dhooQaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906501632\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2045\u0026rlp=%5B0%2C42%2C439%2C341%2C17049%2C10034%2C1208%2C9795%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:42.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"POST /solid.gif?z=2063262\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=AtebPldLe\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=o3dhooQaHR0cHM6Ly9hZHZlcnRhcGUubmV0L3YvTGtyWmI0ZWpMMUNSRzg0L0VVVUQtMDc3Lm1wNA\u0026afid=6589524906501632\u0026caifrq=ACZLEAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=2045\u0026rlp=%5B0%2C42%2C439%2C341%2C17049%2C10034%2C1208%2C9795%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://advertape.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\nUID=2511231332016a114769184101ac1880f369; Path=/; Expires=Sun, 27 Dec 2026 18:32:42 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-12T01:13:03.312736Z","times_seen":22340,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 92\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/8Y7NXKX\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"url=https%3A%2F%2Fxml.adxnexus.com%2Fredirect%3Ffeed%3D806693%26auth%3DHZmV%26pubid%3D221763"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.adxnexus.com/redirect?feed=806693\u0026auth=HZmV\u0026pubid=221763\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4cOyrjZln6kCIrIuZ0uBRVQQNNE9wjMM3PucQETG%2BcEnRQDZFIL%2FuUMztI1rMIEsydfaWvPdVnGoH%2FhuEnWLK%2BYwpglhgDqKzmR%2B57X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c06898b34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 96\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/DbD63EO\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"url=https%3A%2F%2Fxml.cachegorilla.com%2Fredirect%3Ffeed%3D806709%26auth%3Dw4fo%26pubid%3D221775"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.cachegorilla.com/redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQrgeP8ZRyesnLdUvBeGhfcR%2F%2FHMCVYLuOYC%2FhH6tASTL3YHwrhuXuUY4e%2BAqfY69%2BSXtTFgEuN6%2BNcqgddgTH9rKtrBszZ7MewgpkzW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c068fa144c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 91\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/xjMAQr3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":91,"data":"url=https%3A%2F%2Fxml.zeusadx.com%2Fredirect%3Ffeed%3D806749%26auth%3DCrhm%26pubid%3D221806"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.zeusadx.com/redirect?feed=806749\u0026auth=Crhm\u0026pubid=221806\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUEI7aQjc0QQT8Ry3J6AnfCS5nm7itKkNTVUWezdqAnIkK33LegBkQAHKPyx84nI6rJR4GyLaIn8qJRgI%2By0Z%2BAFAO9XKZzc5snHpTMI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0692ad94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advertape.net/js/bootstrap.min.js","fqdn":"advertape.net","domain":"advertape.net","tld":"net"},"ip":{"addr":"172.67.131.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:40.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"advertape.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 17:56:00 GMT","end":"Thu, 19 Feb 2026 18:49:50 GMT"},"fingerprint":{"sha1":"E1:76:35:05:4C:E6:69:09:17:E9:51:DF:EE:00:F4:1C:6E:5E:B6:F4","sha256":"F0:6C:63:98:98:6A:63:5F:6F:A9:4D:65:EB:B2:01:C9:3C:0A:57:C6:D1:AE:C3:46:5E:AE:07:BF:DB:C5:7C:45"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: advertape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4\r\nCookie: _csrf=07059953536a1d059267943d01f8e057d3c4e44aa1e2bfa9feecbc926e77e560a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%228PBHdj0DU54V6XM2U2LQWMdfzXVoq15D%22%3B%7D; _b=kube16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 18:32:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Sun, 13 Dec 2020 16:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1092\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\netag: W/\"5fd64104-e2d8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEw05oAmZrbKD62pZNxwhgTbgJf9t3ta5EhMIL3kZSrWQXepTJihbgGpnffNljuGIQRvS5jsuQQjx9dFdZJ0Dlm4LQSbAdwPXGBr8c8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9a32c02629b91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-12T01:54:32.230177Z","times_seen":27069,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/4YpnNkW","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/4YpnNkW HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMBgm5YIiS1eMmh9Bi2mIi7SJcoS8uhvGu7NEyphR8Wi2ujuPxVv%2BAa%2BU7hzXWmZjxV6Ab3ijZR2ZdEk3mVu46beedVsn4ScONNN3wS5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669a94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5e78bf2597707ee6d849c8f4a7321937","sha1":"1c7d2c9ed7e3b8c000b819847dca45138ee50e5a","sha256":"3913abac5de92ef49d7c8007682dd2db35aaf5771ba6cdfb71a24cc5e52523aa","sha512":"4d64a9b5e120cefb58fdf8f0aaaca2afd876330f5f83fea3e09eaf3d0b1eec162761b08102cdf559da79fa82f81624d5ca848b9845522a1790b149d40d52d772","ssdeep":"","tlshash":"99d0231a3c30caf0cc4b87ba67ddc24d5c2915011647ea10d156475451817c20953bee","first_seen":"2025-07-21T15:03:56.131574Z","last_seen":"2026-01-11T02:17:37.337135Z","times_seen":109,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.revrtb.net/redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742","fqdn":"xml.revrtb.net","domain":"revrtb.net","tld":"net"},"ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.revrtb.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 Jan 2025 00:00:00 GMT","end":"Sun, 04 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:52:32:39:0E:57:2B:C3:D9:FE:55:BA:88:DF:C0:F3:CD:EA:FE:A6","sha256":"12:C5:06:7A:BF:C3:42:DF:EF:DB:6F:B0:79:9F:E0:85:6F:7C:C4:95:5B:F1:D7:BE:AE:FA:09:7F:48:AD:4D:7F"}}},"request":{"raw":"GET /redirect?feed=806644\u0026auth=Gjfr\u0026pubid=221742 HTTP/1.1\r\nHost: xml.revrtb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/xjMNnBp\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.poprtb.com%2Fredirect%3Ffeed%3D806741%26auth%3Dnooa%26pubid%3D221800"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.poprtb.com/redirect?feed=806741\u0026auth=nooa\u0026pubid=221800\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQkDO2rDnqq4rq8DNZJOd4VG5NOBcJjUg3khx7Q5PZXVRqiZVhA9WI82uOqiTXq0UpmVHSakxb0FV4BSIcuqzHIygQ%2BX8JXt7z%2FMGo5p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c02d7dc34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/sub/Jrl3aGA","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:50.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"GET /sub/Jrl3aGA HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvhCOkUHjKdatAXNXeUHTdaWEPzbzvtZO69GZHQMR5vmzClXgapjsX0YwVWtsqSdH80fEwQHScNAow9bbX5WStn3Qs0v8hKHkF1ilblo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a32c06669bc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"041e994163a0ad22a3c495b313cabe5d","sha1":"766e0e2e7efc735335807265f785267ae18bdfcd","sha256":"7ee27464e93477b54aadf02253bd7af6275912fefaadad5f209b29d145d1c0c0","sha512":"b4744c09b10fb164b506c74e71d8946716cc6b2e0f3ecfdf384d6418ae0681651dbd84b47a6990c32668f9c35a24e030aa8ed94427baf3dec32f4486611496f3","ssdeep":"","tlshash":"e3d023553c20c4f4cd4a45f967d4c38c182515411787ea50e19657d050517c30a52bea","first_seen":"2025-07-29T08:08:49.870944Z","last_seen":"2026-01-11T02:17:37.338588Z","times_seen":68,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.cpcstar.com/load","fqdn":"ad.cpcstar.com","domain":"cpcstar.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:51.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcstar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 13:46:48 GMT","end":"Sun, 15 Feb 2026 14:45:10 GMT"},"fingerprint":{"sha1":"2E:41:1A:EC:59:12:13:51:13:47:DC:56:9A:04:F7:1A:3E:AB:29:AE","sha256":"87:A9:AA:29:D7:32:1A:91:D5:AA:C4:E2:C1:8A:A7:73:62:4A:B2:74:E3:07:14:C4:80:34:EC:35:5A:A5:B9:AC"}}},"request":{"raw":"POST /load HTTP/1.1\r\nHost: ad.cpcstar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 90\r\nOrigin: https://ad.cpcstar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.cpcstar.com/sub/4YpnNkW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"url=https%3A%2F%2Fxml.acertb.com%2Fredirect%3Ffeed%3D806725%26auth%3Dktx8%26pubid%3D221787"}},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 18:32:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://xml.acertb.com/redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuXq%2F1DZxGq%2FMnWqizUcDu7m1mtVyBiepV67K8f2ekEQEqL8ljvjMrtTjNRtq%2F4RTX50c31QOo4H%2BFUyE7iaxO0Co32Ke0Q6QthcZYO2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c0690a554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.cachegorilla.com/redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775","fqdn":"xml.cachegorilla.com","domain":"cachegorilla.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cachegorilla.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 12 Nov 2025 00:00:00 GMT","end":"Thu, 12 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:28:02:3C:C3:8B:27:70:55:C3:CB:99:19:63:1A:AC:DA:85:21:27","sha256":"83:FF:94:B6:1C:50:DE:2C:85:9B:63:16:FB:F7:60:82:F1:CC:96:4D:A8:EA:77:CF:40:B2:D9:40:F5:D1:D2:B6"}}},"request":{"raw":"GET /redirect?feed=806709\u0026auth=w4fo\u0026pubid=221775 HTTP/1.1\r\nHost: xml.cachegorilla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":403,"dns":38,"connect":138,"send":0,"wait":97,"receive":1,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/aas/r45d/vki/2063262/105dadc5.js","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"GET /aas/r45d/vki/2063262/105dadc5.js HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advertape.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 18:32:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-25df4\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a6804f1a7200b0acc176dcb7449ebca","sha1":"c8145ea2c561b6220f965c7ddf302e11198d0363","sha256":"f29f89e4c4abbb3cbb58cd7a4565ea68318f452c16642f29c63db28a5bee83b7","sha512":"f7d20d2094b40816c01dc25d24f80e2b4a3a48cb68050f00546fbfe473b47895cdefde293e2e5d8cc232d0d1e125c4454290d048e37b422113e30cd157a1284a","ssdeep":"1536:shFi9uwX4u7bbP/gUds+NJy93xA3o3Qc6dgsPShdMn6hmKn0/XHUynP8MWL2WA6:shgHJbbgEwLA3o3Qctp0PUVXA6","tlshash":"1fe3a58caea7a0354206a469083b7a0f632b17d1ed6d40c494b7f5c83d6f446e916ffb","first_seen":"2025-11-22T08:51:35.629311Z","last_seen":"2025-11-23T18:33:17.333615Z","times_seen":6,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":154,"dns":0,"connect":18,"send":0,"wait":25,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.acertb.com/redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787","fqdn":"xml.acertb.com","domain":"acertb.com","tld":"com"},"ip":{"addr":"174.137.133.16","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://advertape.net/v/LkrZb4ejL1CRG84/EUUD-077.mp4","date":"2025-11-23T18:32:41.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.acertb.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FF:F6:89:60:08:E2:96:75:14:D9:DB:62:A0:1A:A3:C3:6B:1A:47:72","sha256":"A2:28:57:B5:3D:E7:BE:50:88:68:1D:79:5F:9A:BC:DA:BC:C5:FD:38:64:D7:8B:DA:5D:DD:21:1F:C1:65:CA:4E"}}},"request":{"raw":"GET /redirect?feed=806725\u0026auth=ktx8\u0026pubid=221787 HTTP/1.1\r\nHost: xml.acertb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ad.cpcstar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: frame\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 18:32:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":22,"connect":108,"send":0,"wait":103,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}