{"report_id":"1ac9b954-95d2-4621-b047-deb4463d410e","version":6,"status":"done","tags":[],"date":"2026-04-22T12:46:59Z","url":{"schema":"http","addr":"rogersreplay.com","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"title":"Rogers Replay","dom":{"size":9607,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1140)","md5":"eb537a14ab38391b4b170b704c63e4ba","sha1":"1afee8d5cfddf58eee22da9720f966762abc9a85","sha256":"6f8d7aef52f4c162ddb62af68f83094f45926f3b35b484c7d72734bd3417de6d","sha512":"bceb8cbd9f22c4d8673a2a1b6e22a42fa81777a41319af425fc23b24e27a0e95eb2170322b6717eede39e144d3f0ce2868fd191d5df6de775a0e5f31efafac6f","ssdeep":"192:hkjwXAoRutSL9qjcVxKOStVR6FbHOTFkClR:AwQoRuLjcV4VIbuTWClR","tlshash":"8812ef6e3a0cca565a3263956be2bd08e057370a402cc8b4f5ef59bacf50b614f62453","dom_hash":"domhash1843d46b9a0b1103528c958ae1e98912","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rogersreplay.com","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T12:46:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rogersreplay.com","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2026-04-22T12:47:01.765357Z","last_seen":"2026-04-22T12:47:01.765357Z","alert_count":252,"request_count":63,"received_data":3724197,"sent_data":27599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8db14e01351e73907e171e71d7936d77","sha1":"ebc5f34d4e7f93700ce9f2737e4e32fcf438984a","sha256":"a2d3c43a37e2987b0ae7330d70150a28ee39f2d4140ab9c4976797ad6f33651c","sha512":"7aecbd247964416d5ed77a34b06dded16d13a8b88a0415cbb475181064e786932f54485d6dccb333a10d2bc84bc7fb2a1f0afdb8af99da86f54cc709dd10f892","ssdeep":"","tlshash":"6b9004fd471d1371057d03d344c034510f3d743740100407401544540d77f5157d0f4c","size":45,"data":"","first_seen":"2026-04-22T12:47:07.30153Z","last_seen":"2026-04-22T12:52:13.115417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e98a494c855b7c1ae8f75acdc06bd852","sha1":"614f09cd836867e139762913f28f0eece7ba0975","sha256":"b14d3c4fb775f640c638a313c0220b9e74251409ccc0dcf16769bd0ec1b40ab4","sha512":"593dc355e67ae05e1bf5566e76c3374a9c883a9144203ec6472b2d6ee608789b4c57a463bb45b3c958bde9f65b1af18d12c76230cc5cdcde9f5d23b19ad3472c","ssdeep":"","tlshash":"95219bac11e700a15a2331f50f8f24452776f0573a0dcd687f8d9b807f1575887a2f89","size":1334,"data":"","first_seen":"2026-04-22T12:47:07.302957Z","last_seen":"2026-04-22T12:52:13.113653Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cd7adbb722c718494861ff0b78b6b06","sha1":"b52330ea7dea6a5ce7745a160b7400626a7e0c0d","sha256":"2387173321198b76d1b1c10f06a693963b27dbabd2e3393da6b83b4e27c20406","sha512":"d84eba2133a0865504a8fa38845e8c65a8ba4aa5fa6ac4d6fb4011cdc9483d1dd991a1bf6793149a570358afd1e7809c98f2946eb9deea0e43f5a9bdf7862ec3","ssdeep":"","tlshash":"daf062217109c51a2c24284c6baf1a1b717c4426eadd42f1e0e2552f5c0f19b38ab3c3","size":608,"data":"","first_seen":"2026-04-22T12:47:07.30498Z","last_seen":"2026-04-22T12:52:13.116898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DKPrhHhj.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9ce659e0d5ea67f9c44cf3c814609a2","sha1":"b0a3783f3df31a2af32067224796c2c2c6a68d87","sha256":"66faa266cc642bb2c871cd8a59aab263b180674f19af9807330e7454171e2e42","sha512":"5d1f581fc88ec0fdb1bee9ce770250496e571089f14f1ec0b666a91b4b140626113e24819bc4ebbb75313130fb3eac6fd227e1a58f2ba0c51e94d8a054283df9","ssdeep":"12288:lnyLZYOXr/g6BcQKYtfaZNJy0HlSaOcwXf2j203pL3eO7ysBvG8T/lk00csXQRMX:lnyLZjXXgMs1elTYeXmOwIT4h/o","tlshash":"09656ce972a2213602d121e4903f2087b77c5c496888c09cf5bdddea7f6994d227bf39","size":1427596,"data":"","first_seen":"2026-04-22T12:47:07.308066Z","last_seen":"2026-04-22T12:52:13.114596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b3fcf6c803e815261eb5539973e24bda","sha1":"7b56ddacef598434b4b155782b7ca25f21e77358","sha256":"528ee4b6cd19d9d1037aad9e9057d725aa7418c50ed380c411a715dfd4a235fb","sha512":"5220a32645ebe0646c61ec8b7a92da0173a887a1244d6a8e882bc7405169262d9625fec0b6f95e69d4eb40bfd382e88d7f43daf07dd358dab9c3fe19d4af7aa3","ssdeep":"","tlshash":"f7700080a0e00823802322a00000800030e0022e0833000820800e238a0080830002a0","size":23,"data":"","first_seen":"2025-12-24T16:22:19.512133Z","last_seen":"2026-04-22T12:52:13.116248Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BZtuD79e.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BZtuD79e.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 192\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b0f8a4193cd435d2e78c36a163ac2fcbb9385b67613a08863317e382e63183c2-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.952861,VS0,VE231\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":299,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"0f486b912094a313f45e86934a434b34","sha1":"145021e8fde3c62d639baeb5cf437e4257ecfa9a","sha256":"2c06546e6d920108bf48005bb30253bc05ed56c1e54b9785e0bfa6e4d087d742","sha512":"8d444ec6120157b373ae94cb45b7b17e0ae4f9eab44d4aba104914534b52da73db11951e2da26268f82e6812e328a4511df46b0c38d2cd3d429e986f8a9385be","ssdeep":"","tlshash":"7ae072725208883df2030090db24722a002a26822924221a9aa018b0a12214fee2ba9c","first_seen":"2026-04-22T12:47:07.150568Z","last_seen":"2026-04-22T12:52:13.056251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CQnDPsQu.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CQnDPsQu.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 216\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"741d1d9c8a392040a04bc67f13c8d4010f2260b84ebb7c69f6af83698797748f-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.532222,VS0,VE56\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"b5da0e104e36dfb3cce5e9993b994b59","sha1":"1c9f6e8196258da5657ef2ce85ce692cf20df38f","sha256":"ba881b25414def6d69f79b5a2503e9ce4ce6274ec56306f3a5e460136b099499","sha512":"1dafa42d11bf130b678f689b546abf3bb1500efb36178a635172e421df5ab2a06a9c23e080da71ef09b493aa8a7d632af820ba888da864074c070f25c9a6c54b","ssdeep":"","tlshash":"5de02b762219cd3ce0624120fb29313e0036699663c53098edf11436650554eec3fbdc","first_seen":"2026-04-22T12:47:07.153833Z","last_seen":"2026-04-22T12:52:13.071431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/favicon.ico","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:40.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1150\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\netag: \"ecff0fa609e64a32e79a3d0301ffcb270aa45c30b48203b955d25a72e69c9f77-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.287706,VS0,VE252\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b0362f6fe996b12664a2104487706598","sha1":"9f52dcb444e779ec8631f481d627a05c448da350","sha256":"cc4ff98bd8fd6adb2c4b081c87fab3ba6f7a907143efbe08d5d460d4220454a5","sha512":"135bded9016ff2288c840f9b28114737736d230a63075c25719017b71d778dc89895abb0fc0f958c581602236a67c0da46ec5bd1c4642e87e3abca6f42417161","ssdeep":"96:aVaJise30OrbGiQTM/wAquVx23QAAvE8RYDR+dUA:2aJiRLrbGiRYg2lAvBRYN+dUA","tlshash":"44b1a71cee1d5dc8c17c167bf89a096e62b1d779f2dd184948bbfa035133200283b6ac","first_seen":"2023-05-12T00:57:43Z","last_seen":"2026-04-22T12:52:13.104926Z","times_seen":164,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BhRMzms0.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BhRMzms0.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 330\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"02a46a4b640e0f0c6f2e47a3c16dace536d409f780dd33d9758aba3779b4c12c-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.911994,VS0,VE232\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":668,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (344)","md5":"c0f60a94f93fc09e1df630550a5021a2","sha1":"0ab6a2c964a56760513e7df40249cea723d1a141","sha256":"7014be653b41865115001319db8c55a38af20cf099268dd820d7f3012ec98989","sha512":"d3776b63a5d9de67be4d491036160f83ec8bd074d13642f16d0c47b794559bdbba8722253eff1ba41d34406b1a6de5cf1d48302b208ae32b1ad67c1d0258997c","ssdeep":"","tlshash":"0c01ddd5238c837c77060f00db09b226054873e32ba71aabb1747de6222dc9edc1a6cc","first_seen":"2026-04-22T12:47:07.160642Z","last_seen":"2026-04-22T12:52:13.088596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CF4EgSMB.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CF4EgSMB.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 718\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a20eddc30c14216a1ce9a4a30e1963bcbfc43e55ef77e38cc8e2c4c5cd829980-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.850052,VS0,VE206\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (573)","md5":"bb3d8eadca7e1a333c141c0bab3ea36c","sha1":"a0b17191cbc11769ab2f4ac774e4cc4e4511ef4b","sha256":"15dc9b5e44dbbcb17da5a38e2a53099193c732255813d89832d6d6e43612f94e","sha512":"21e01e49992e93d4384e57f9e0af27ca8f731b3d88acf1373651064a57a21c726dfed35f2ec39c4a812ce65e92aa0c31ec4b7455489c4f316ae6e1e1d8559a3d","ssdeep":"","tlshash":"233153543b94802cf120f3db9b25b1b8b56e2064376b815bc9a00974766341c5ebfcf9","first_seen":"2026-04-22T12:47:07.164842Z","last_seen":"2026-04-22T12:52:13.038842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CxsPZuEX.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CxsPZuEX.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 243\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"0e99048c2e7a527bb21750a5b153eeaefe19090b8ee0707ad105ea7a2f150695-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.862442,VS0,VE91\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":564,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"99297d23643f76d901dc14a2a48d2722","sha1":"8b9392cf216e988e3eea926ed8e8d6bd48f117ec","sha256":"b83ac0a3c432d7651ceafbdd216cdbabcfea488fcd3722b909b9f30a3dc42599","sha512":"974fb313523de8196e407a681db55e3857618f0208be9d4fde368397a40c90b5f43bfc8c902829e2d20d07136c91f7136d588c2433eef272d5abfd24b24e6474","ssdeep":"","tlshash":"ccf08b0a63193f2df8464330f34971393a3361f21f2c5288d5382b38050a26cbe3b6e4","first_seen":"2026-04-22T12:47:07.168836Z","last_seen":"2026-04-22T12:52:13.081772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/error-404.GHub-I6s.css","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/error-404.GHub-I6s.css HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 933\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"65bf21f64770d65f2fabc237c7b0bfd52a8c96e83e6e38dc0459fd0f4c861dc2-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.951193,VS0,VE113\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3555)","md5":"eef1ec67bb0c77e69bbef66683cdff72","sha1":"ba38fece5edd947fa03117f5f767e486af979492","sha256":"afab527c5dedd8f97ce19830392e5bcc14930101c29396508c3c1aee1bb07557","sha512":"7f45a6d236888ac8c11f09abb1005faaedceff45dcc8759eaa1c9c39aff8fd563cd4fe627c81e4641a9297659de07f862de3a19059c1926b707a18533de1155d","ssdeep":"","tlshash":"4f71fed535cd300fb037e9aaea41e74ce029b223d502cf9c978aa954cea3ec62453748","first_seen":"2025-08-17T19:57:47.079558Z","last_seen":"2026-04-22T12:52:13.08263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/mOgWQUQC.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/mOgWQUQC.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 897\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"54d97928c584de5a0295f24288d65f4040714add8f32562ed9ba4afa67e5bdd2-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.175806,VS0,VE58\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1239)","md5":"fad5387dacb1e625ad998f8b963a54b6","sha1":"544d8c7c6ae1703942a5fd7154b75eec08fc8f3f","sha256":"adea1e2c7d892533b9214ae6bf71cbc8da217268a588ec27bb2a5f9efd46f65d","sha512":"935b1c965d40177aa1a4003b9996fc2670f562b49c1c2699dae6e541afd38ab23adb296e0ab4e4336bc06feaf6bca552df01f1cc6fff9c6b8a4d0489ad37ff23","ssdeep":"","tlshash":"7d519a4933194d7cf823467de362723e50371a832a65b158ce760cb92a1590dde7fed4","first_seen":"2026-04-22T12:47:07.175853Z","last_seen":"2026-04-22T12:52:13.089581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BsIfsdxY.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BsIfsdxY.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 577\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e8231fc44ba65dcbff0dd6fe5119c25261f0693a4ff19858b0a6d6c5feb8d9b3-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.216268,VS0,VE66\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1045)","md5":"5689a490a86cc5c702278370c2953e39","sha1":"4974e5b3d041596ab13cef29dd133c79294415ce","sha256":"a522849a3c038f7f027f221808c42a263f2080ea6e38636da12788815d12664f","sha512":"2588c04ae9350ce702bfb93a84517768387cfda8547c33924106e017b3f990015926e121f8a525fda7ec0f74b4080722bd1b4c70214df783e0073783ce7e3bd3","ssdeep":"","tlshash":"8e2114dc6331d5a4b4c2abf8410eb26cb1963cf09780de01d262dd1fe5a791a249abc5","first_seen":"2026-04-22T12:47:07.17738Z","last_seen":"2026-04-22T12:52:13.076648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/B16zrVxF.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/B16zrVxF.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 259\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"93918a7c04f31b1569804ac3bb6405fca946180ab34d947ddaef9f3139406cd3-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.443768,VS0,VE249\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (341)","md5":"b1b35b6c8f7976d3f63b9cd450781b0f","sha1":"8aac4dee57770b088b67ecaff4e705434502e424","sha256":"c0a99dd185752bf1d9beb0636c9b80caf8f65258c9ee4f77c7d35d62b2881d99","sha512":"7ef257077467eba3bf3344a9bd48bf8ad130d9b9127cf263306f2279eb9f6356bf32cb3623be00390f33fad601b4f3caeb028c78c69ebe66d0ac80ad490db329","ssdeep":"","tlshash":"10f097b842480ffdb429ab40f77bb13630663be30d1da814c6a2ac3221464df5c3955d","first_seen":"2026-04-22T12:47:07.178729Z","last_seen":"2026-04-22T12:52:13.065742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CTwQul0f.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CTwQul0f.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 740\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b7bab392d32d184143fef99cdd67c0fce066162950bc9f072728b2ad47326be4-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.548302,VS0,VE73\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3247,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (308)","md5":"778c9de7cb07cf86fe3f7946d7c95fde","sha1":"318177b9a9fe5c4ed4735680cdba534370a48c3c","sha256":"4736801b76b95aca3296bb95a95e22bd565ef5fac4e0214698cc8419d04ee3c5","sha512":"4eb5e41b6b79b1b4a5ec243e6da345180f1602cc537736827660e175996b1ae146eec918d0af1b35da49d1f706bbb843729ae8d1f138a68fdfbf19fadb68fa04","ssdeep":"","tlshash":"c3616b4d33750d3cf1230a68e752337e217b16832919329ccdba193a2a1651deabfbc4","first_seen":"2026-04-22T12:47:07.179952Z","last_seen":"2026-04-22T12:52:13.099418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DKPrhHhj.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DKPrhHhj.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rogersreplay.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 314797\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f22c1b6a93969a13bb587e770597f2fe5146d5cc9f6ec80c3c8c76e7ee8bedce-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1776861998.372561,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427596,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21746)","md5":"570ab461a9e6e9f678aa1f67b8321e1c","sha1":"6a319127d316de241edb192cf7016ce2b854ee24","sha256":"080bb7d96cf7a2b829e4fa05a1ea586797d60be0e82ec8de31ce990c7dbc9570","sha512":"b7ef4556ce01aafc3e87d5456fe9b908dbef931af0ec1f5a9274d54ab053fde3eb38a09a1561911b0ae1236a4444cb927794fe532e6e0fa5c012781bb99a7d55","ssdeep":"12288:lnyLZYOXr/g6BcQKYtfaZNJy0HlSaOcwXf2j203pL3eO7ysBvG8T/lk00csXQRMx:lnyLZjXXgMs1elTYeXmOwIT4k","tlshash":"67256be872a2703202d115f9a03f0547b6396959344cc09cf62ce9eb7e7a94961bff78","first_seen":"2026-04-22T12:47:07.182103Z","last_seen":"2026-04-22T12:52:13.084368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":16,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DoovjYUD.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DoovjYUD.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 193\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a7e22dae088d30f1c73bc3cb0b31ebc2f2d9c1ef73a1e8fc9d690fcc38cc7edd-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.593012,VS0,VE101\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":323,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"97c60f28638731bbd28b9b55c051b5bd","sha1":"cd0b5e1f689991d99813d052823718a8a00d8371","sha256":"00ba8ea2c45247beba9c62056181bd1d5f04c8380cb173b124486aa15fbb473b","sha512":"fe4599a0f822b54f5bca0a8bccf1a356c70b2d2d272c5380607fef83f9ef0c62a2fa8cafb0c23af04b3398e4fcce9ac7982fd9d5234346eeb94a8679ce5efbb0","ssdeep":"","tlshash":"dde07d65311fcceca1230d48d77473bdc2732542120c1048e4511832a2130e9ac27698","first_seen":"2026-04-22T12:47:07.185601Z","last_seen":"2026-04-22T12:52:13.098588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/MiuFquxq.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/MiuFquxq.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 183\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"3bb21eecf9e80ec4babf71b934237144ca1f2d3c7b16a84c50e865f4d8c95e19-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.851287,VS0,VE101\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"52f2ca57a4b859d4636eccface2ba12b","sha1":"759fb7ddc0027220e5b4162e8714090351232982","sha256":"bb1bfe576cbc4b28537d276d7a033db23ee7e8403243ec8d3f6fa3c3ca1cc4ad","sha512":"7cee1c8e7a08aa6c9bd09b6809b1cc09d0070c34be28b7ef026b8e9dd9188ece8b76094bc534b2ab8ed73ad7b1e1ed7d16656abcf10d2fb03c6587aac907b428","ssdeep":"","tlshash":"f7d02b25a38c4c3cf4124750f328753e84375293219c219885b5153192214daec3bbdc","first_seen":"2026-04-22T12:47:07.188408Z","last_seen":"2026-04-22T12:52:13.085995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/tkSFEGN1.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/tkSFEGN1.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 171\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"74ea59aab6096af811b62e2be847f0b793d378dbc4a6b2ce9d25a7609eef8990-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.461323,VS0,VE70\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":246,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"2b4f2ded111e8a478e2ff86e028bd0e8","sha1":"08455fb88d3ade8d99f9f15f755c70d17f07b4d3","sha256":"65ba9581c1e1d08306b475bbe898e68f0cc7c9acc2dfc7a2066623aa5735d7f3","sha512":"4ce7b3c3c3bea6833904b68e845291fd1d80a24dc5b15509ea7263ccf23c8dd2fe6449ba718179528ab4fc515e89f423cb7f74ce4aab426650f84e5142cd0058","ssdeep":"","tlshash":"a3d0a76656188f3cb0234511f325b17a546aa98266882168ce621932610559ebd3badc","first_seen":"2026-04-22T12:47:07.194171Z","last_seen":"2026-04-22T12:52:13.041978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/9QUThrN2.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/9QUThrN2.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1010\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e2f74a230b022dc6d7aecbe3755c6cb033e01b46a99a16be57fc0f76b84ce3fe-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.582681,VS0,VE337\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3797,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (413)","md5":"bc0b56db78efc20cda62c98866ad16c7","sha1":"0cd2a24a6c8e3d7bdff510ef8daf736bd3d2fe71","sha256":"89dd0cc50a6b47186e41f3a6be199819b61aa0f7bc4e54a23bb9d72de53ebe5b","sha512":"08816cec00803d8fb20c55c2816746facb4728c28ff2dfe85807c4175d456896c997ffba16f64158711f03641ea099542161f24a2dd670a32a44970be0468257","ssdeep":"","tlshash":"607165e963249274f591839eab16703c167339c1266e1180cf466e0f7c4492edf7ecda","first_seen":"2026-04-22T12:47:07.198988Z","last_seen":"2026-04-22T12:52:13.112076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Bdilnh3v.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Bdilnh3v.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1481\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"5fb8b287cc2fdb067e080bd6d0a5370ed22d43ef7b27c370fb9866efa388ae20-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.709243,VS0,VE253\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":13855,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3405)","md5":"2dca6f249c97393cb8315197fd127fd3","sha1":"040cf729d6b3d7b57b77bf4abe77a367df643ec1","sha256":"55cc656bf445caef7a49af8f406ae9222ad2bfcf12a1bb8ce2299e6e356fa187","sha512":"e86e10438aac93468cf7bc302753685b84db084cd74474b94e28f7ba8d8b7f3fbfb1217fedf3ee6ac7e0f28d169b1780bc84e7f25f4182363a4c068e86da6333","ssdeep":"384:OgwnK58VGtieRwnK58VGtieyWIwnK58VGtieRwnK58VGtiev:YK4Gti/K4GtiwK4Gti/K4GtiC","tlshash":"8f528aa16758a5b4aa0ab3bc8c339cb53d521df73e13c5994ab70c196019c2c0f7addb","first_seen":"2026-04-22T12:47:07.201404Z","last_seen":"2026-04-22T12:52:13.059111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/D2Gq5dBn.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/D2Gq5dBn.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 381\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"67ae9c21dc5e8b8c4c967383b4e14fb2952f23ed6bc29b269c8550738029e1b8-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.725945,VS0,VE93\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"2e7d1c03f4695985f8eb4bdea1ebd823","sha1":"761470ab1ee5158068632dfb9e73877d1deda58f","sha256":"106d2fa79264f039f861046ef6ead7a873725ee0b3ab482c408602dfc4f718a2","sha512":"16fd7aa5c37a9b911873d0dcca45d8265ffb495283a4100877f082a83e91122e6f08d8211eadb3d09db44c610a522a4f39cf10dbe22a5e03af3dabb31837592b","ssdeep":"","tlshash":"4531290a3314557cf1b3034de341713d31bb259392b8734cad64283a8a1e55ede77ae8","first_seen":"2026-04-22T12:47:07.203869Z","last_seen":"2026-04-22T12:52:13.085128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/nJK2D-nP.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/nJK2D-nP.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 199\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1487218e9bbda3f3c2b3d0fed4bdd9960e638b10417bd2ebb2a7de1737b8865e-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.993281,VS0,VE264\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (306)","md5":"8efc273e1817e54d9bfdb2597000b458","sha1":"446b72aaab16019aecc9f1043141f0fb42bb9da1","sha256":"1c735e282c1a34479b195234b863ea8dba13bc77960be86a3419861db5ba689e","sha512":"92d8b16a28448efccbbb063ffe4a20b96b4bc432e1a65d88bc9902089e9d4d7053c1e651307f69e6af85438e965d6261b7fa6eb3bf26c3d8c712e0a93e7005d8","ssdeep":"","tlshash":"59e07d6d34881220350389ac8433b725032876312f9df0f1911386420ab40628227635","first_seen":"2026-04-22T12:47:07.205849Z","last_seen":"2026-04-22T12:52:13.083409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BMS6lbfb.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BMS6lbfb.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2739\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1e48aa185b121fd46de1ccc7968e39c653cea57a4b1c4c1e4919a8f1b445e4f3-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.454998,VS0,VE102\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7408,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6771)","md5":"b3407f9702f10cc67dc62a7f4915cd71","sha1":"773d8bd257e56dc045e8651d252a28524fdd1f64","sha256":"9f85b07cd6000ff6aedc26d9c45907d91a911d4ce70ff15dc18d98abc6797944","sha512":"79798619d7c15a2e30bebdf729b4932826886b170af5f5b0724abd3459842451cc5616aee13fdbe64d5e595fd35bd2ad30ac84592c9078fded014d7c22eebc00","ssdeep":"192:+wWrgS73U/85zRA8u+8CBXaTOqpBnA0ZC2uNmER:+wWMS73p5zRA8u+8qaiq7buR","tlshash":"a0e1b4d575c7a87167a6128000e7001bf27d7ca1208db4a0f0fd4a3a3e7ad0a966bf7d","first_seen":"2026-04-22T12:47:07.207587Z","last_seen":"2026-04-22T12:52:13.092568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/pfFFIdqd.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/pfFFIdqd.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 458\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1a47baae6e9b0245f89e162269893b3241ab4a53fe05876bab7d7576f9fa7597-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.740898,VS0,VE111\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1091,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (509)","md5":"8ef156a0d5105edc8adff8c7231ddf52","sha1":"32ae818b86827a7d61424656f6ada2316feadda6","sha256":"d504ba72176ffef12d8901a4fdd3352f7887cc737ca5ce0e50ee036968ef95fb","sha512":"787375826e77f21564e3615f01b7ce8e67f6e9195d538049678faae07970371dc66fdec2e0483299be41c8b07a242d2f74122fa45cf70a810a3a50f72bc9b636","ssdeep":"","tlshash":"b811e227278949bcf7030644cb11b1bc523956125998d25cdc7b7d55b814c0cddefa84","first_seen":"2026-04-22T12:47:07.209664Z","last_seen":"2026-04-22T12:52:13.067062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Yzvu2TDC.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Yzvu2TDC.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 462\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"1093c2297e506fea5da02cafa680f97747b1ba2b7956a7f12ca71464fcdf028a-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.828029,VS0,VE93\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450)","md5":"b7590f03fffd9f1f5e0751bc5669b675","sha1":"81085f1da83da52a0fac003f9b1d6ff595a194bc","sha256":"599611dd0f6908967406e5639a6f385fe6d90bd32a41d9743faff79bd86b475d","sha512":"335c51bc7a43398c510859720b398df32ad2e5b6ad298447301da151141cf076359fda06691653e12e462b388aa420cc7c0e3b0636c2f37a929fee08729bd1a1","ssdeep":"","tlshash":"8611ccde23ddd0d0e100bb18431364a13fdb77ea69b3c18a6a5218a110146bd4c19acb","first_seen":"2026-04-22T12:47:07.211202Z","last_seen":"2026-04-22T12:52:13.106421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Bkd2qfgo.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Bkd2qfgo.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 260\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a50f25b24dd5867be6aa067a5054fa7daf2259781b1d61a84e1518af35bf0ca0-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.911632,VS0,VE95\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (341)","md5":"e491774ed3484a1e1ee93cfc614ac0c9","sha1":"f171e7a9419a271096f51136bb45ad7ecf1ff96d","sha256":"aedc578d81087bbf979b7ab58d58a39494213bf0d1ca3bd414abf10d817060bc","sha512":"acb0b111baf6499b0b5e779a6e43e92d0e081841bf9be2a7cd694c69fc7619b25e886473310bb041df6549ee9610d67ab7511b72cfe2ab71d81b0013237f9464","ssdeep":"","tlshash":"bef09ef841840ffd64195740f736b03a30a635f31d1c6800c5a39d7220064df5c7955d","first_seen":"2026-04-22T12:47:07.212587Z","last_seen":"2026-04-22T12:52:13.05465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Beri8gbb.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Beri8gbb.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3067\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"8cb33792b323e3a58ad71bb581a1b464ffdd4b26be18126d51d8146630900c92-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.283637,VS0,VE88\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7185,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5315)","md5":"02b15553cbeed33ca711ec799f7142ab","sha1":"21ce9dbcc390187eeca0145b396d147de0deef28","sha256":"5c9624e13f4f513060f44e0b4d385eefbbe8a78bfad47a19956c82c04427eefd","sha512":"c074c59ede7e5bc9cf9b7a401acf661d198956be8aa536a71cd96ad8bc6ffcf15459b2bc73c3d6f5094ac219b8af636ade5b2422ab304351119d07d9c5c8f70a","ssdeep":"192:kCF84YIa5C5mIr00pomvI99KZm8padPUNwuj2riTw:aqa5wo/KZSxcwUw","tlshash":"e2e193c473a9a3e8f002e3bc432670797d6328e73a52c5b5c3e59d58e55601c8da6ceb","first_seen":"2026-04-22T12:47:07.213979Z","last_seen":"2026-04-22T12:52:13.094306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CKbMtGTY.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CKbMtGTY.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 369\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"ff435747ea2f63dffa325889d256e3d5304dd7e8a338e29589ce85ff0028d5a7-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.602245,VS0,VE85\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (581)","md5":"33e706a0babd37a96bcb0e6dbcd5d748","sha1":"2ab3fa777c8e10de94a2c1d3d4ee095588b7b42a","sha256":"c73eaad0559da27f5186ae59b89315032009cbd0343f1a9a2e3e9d33fdd2639d","sha512":"1906173643a6c24fbf6e7561c85662d72ba7001bb7c72b42f0156b8a2b4b322f5f104ec40a14e939106c9d780363ec1b060601a7fe0e344bea5d7aa3e64ddf04","ssdeep":"","tlshash":"9601c0dbf304972420425be4d2e565ba136f15a33b4957559ce05db3b52104cb4af9cc","first_seen":"2026-04-22T12:47:07.215723Z","last_seen":"2026-04-22T12:52:13.109107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/hZcgH8wn.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/hZcgH8wn.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1322\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"7ba5fa16d078b2a652b93893808119eac53c6ee09670c7beb5859ebbaf67143f-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.012134,VS0,VE193\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3407,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3406)","md5":"03222b9c63f79035f299fae7f5851de5","sha1":"33a207d774e410c6f55cf11f8ec845ea6dbb9265","sha256":"700322f02fce1258ff9788096dce633b7c07bcb4e1f96d1579577c0930d64a51","sha512":"943f695c294744f8a72ab39aea0a865b3285014b2bf159bea48eeaf1cda5db07bdb8992631376d53fbea00db53541c4fef547f76a3d81a7f4a7b83132810198c","ssdeep":"","tlshash":"54617664b8c086568f964d6bf9f2b7085d081681fb2384f1f2c81c1576c65aff99b70b","first_seen":"2026-04-22T12:47:07.217944Z","last_seen":"2026-04-22T12:52:13.101563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BmgWa93q.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BmgWa93q.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 190\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"7cdf91ccc68e3cb8fcb12409ffbf80ef1ce0065bc43a2179e64806092362159a-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.726195,VS0,VE68\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"d38f01be4cc8dad7c0004a375f7817ab","sha1":"bcee3dcb0de04386372815c5362e68322371acf6","sha256":"2656bf74062a720cfce70e282ef016d01c30beecac0029a8a3298f3c68d27278","sha512":"8d7e4c35d5b76ecdf08a5fbb4fa045be7c250356ab4329bfbb0b4fb30ec7637747ea3a863146ed887c28c342e6e690720b6be0846a09af1adc69eab0eca98bd8","ssdeep":"","tlshash":"2de07d36f1048c2ce6170000e728307a00a7d18129699305e4132422a69a05fdf3b2c8","first_seen":"2026-04-22T12:47:07.219315Z","last_seen":"2026-04-22T12:52:13.105558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BrDvcGpz.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BrDvcGpz.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 330\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"99fed05907671a310937655afce694f75946c407b29894a6de99580ec406cbfd-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.134578,VS0,VE112\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (347)","md5":"d74d2764cc92f93eff97832386ca9c3a","sha1":"d59c887182ca8cf5b607fb270b590652af6c40a4","sha256":"4b5ac49d756ab52e81c2ecf9875518682780c82561648308ea7fdc85c8e4e256","sha512":"ae5af042658980b0e1aefbb286ac3b385b4d756356656af88754a809a3870ca1c56e63ff78574ef26d90c11e3a4c6fe77411be25f64d7cad0af9953e44fa2986","ssdeep":"","tlshash":"7f01260251569919cb6f9600cf69f2fe907b62412d7a4358e28b2e17505d01fab2ee8c","first_seen":"2026-04-22T12:47:07.2208Z","last_seen":"2026-04-22T12:52:13.068539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/ie_p45fJ.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/ie_p45fJ.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1785\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"042e7bfff3cb3e06859a34cf2d4e5b28fa117f87cae92e5f54f267a3eea1166b-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.202226,VS0,VE106\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5400,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (824)","md5":"a1de91be0e16a3e2f51f0c55f7d85e10","sha1":"e8f5a127c96fc7e06e28425d8b139a8b69ccc007","sha256":"8567c21fce1e21e97688e08c15fc02b954fc6bca245ca9d171e3a61264223457","sha512":"a585063511435d71d5e2c26f830ec5ef69e71baee6359e4e4e05c95bd65ef6edfedb9191b4a16dffb4193873e2fdb2ff6f2c3e497e5516968c51361cf8b03058","ssdeep":"96:FBS8y89OTY1z/G5UJES0DGRSnJXVQYjfpHXyfd7dhUkf7tRgbd6vWXRHht7LFId7:fI8cTYQKkGR2JDzpHwhUCocvSt9DWp","tlshash":"bbb173923bfc92fcf50abfb90626a47abe6615d667a4c045c3d1ae1ab50001d4e18cc3","first_seen":"2026-04-22T12:47:07.223779Z","last_seen":"2026-04-22T12:52:13.080942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BxDtOZas.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BxDtOZas.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 515\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"99636c62c06398b50a73db228ba504db4cb221a4eac23595acce2fd34f0f12c8-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.405049,VS0,VE95\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (557)","md5":"fac8bf33c6433d263c1238c6fbf8a44c","sha1":"734aa87d7d7896fda414f495c54a6206ee65d306","sha256":"085a92532be54f67b3f7d66926112963b91cd67121114b7a9ce82406887915f8","sha512":"68dc2c42ce37cb405ecc2ab38d6857e5a2753ff618dbd284632e6da416a858d4fc44af67f4063f15c73b3262479e17e21b6aeb34e6e4403c2ddf0a44c56a3e5e","ssdeep":"","tlshash":"9731dee52726087cb0106738b29d703468243dd76a196545c438bf7163a319e6da7dfb","first_seen":"2026-04-22T12:47:07.227746Z","last_seen":"2026-04-22T12:52:13.070492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/error-500.B7Kx5a2V.css","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/error-500.B7Kx5a2V.css HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 615\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"3c35e8af099560cb086cac3606c8f29e4c7843214504f0a263ae42a13f485875-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.010971,VS0,VE101\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1884,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1883)","md5":"61412a3b9fb31ad31230617cf132ba1f","sha1":"c43bfdf01271b1216910d430a403096453860f3a","sha256":"18c7a1c873a124a7f721463cb158b9d2aa82653eda8d05f2f43055efc2138c4e","sha512":"2b507d796161bba420fa1d0d9a3475fcd3c07dc1bba4b80ef7e329ca5f036a85c6ceeed96f62d4fc6842215f4198afc512282b8d2eb33c4ddbac05f2909453e8","ssdeep":"","tlshash":"7d41870b35ad621595778862e0cb5f244c1d7f22ce225dfb794b3e6c4da32cf2a8174a","first_seen":"2025-08-17T19:57:47.111504Z","last_seen":"2026-04-22T12:52:13.078372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/bg-desktop-fallback.DvmY-_VR.png","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/bg-desktop-fallback.DvmY-_VR.png HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167423\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"76515246e52ceeb24d8b14999b825239c6bb6ca4df5a0c5f52e201e17964551a-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.454847,VS0,VE385\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1921 x 1081, 8-bit/color RGBA, non-interlaced","md5":"71b0a5e5e4c4f5f5703f85872d572c78","sha1":"8ff96ccf200f34f74f7ac37e6e0493108627ca80","sha256":"1f8bf37cc492149fde3aba513f1cf319f462d9dc1a3d062be5ec323a82b99267","sha512":"2ac02b698bc7129b60ce3530dac9fdf6183db41088da1a14ca03271f92e3f43856cb7b7281b1c5bcce2b369a6dc304ffcdb8483724ade609bebdec54827da59e","ssdeep":"3072:Bv0fXQ9gFTCdxZ6DLXITOcgynjZB4pCSa2Vn4tXgwKfCpobd81yA1ja2M:OQ9g9CGW5gYjH7SaFVgwLI+B1VM","tlshash":"5f1412844456b9f7c91832aef6d720407d106f461f16160f6ba52cfcb4ac5cea2e3ead","first_seen":"2026-04-22T12:47:07.231927Z","last_seen":"2026-04-22T12:52:13.072378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/-jBDmadF.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/-jBDmadF.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2693\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"5e0d330e36d969c291ab96770e9435fc4802fbdd690e9ea7dcd91cf18ce0134d-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.020858,VS0,VE81\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":6410,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5312)","md5":"4f83ed3dd89f9db3a1ed98fd8dab59ab","sha1":"3eaa118dea1a8ea22c0d593a4f974ee6279b3274","sha256":"e0f69692cb05b4a279d0e3daa8b14bb1d91a17b28c5a85d5a2fabd645eaf8ec6","sha512":"75c7292fb4adeb3cc79f7ca4e1fa7e2eada6e43088320289ec4aafa7e4319c34c0c3daca27fb4d6333b42050ac2ade45c7e93b2e073fa2b699f047144d5b964b","ssdeep":"96:pTUcXpylnLRWBUx+GmI6gC2fL/Q3OrhaG4/7zzj5NpGsRGi52YKohwxuwEq:tylLz2R2kxL/vDpGsH52Shuuy","tlshash":"62d19748b3bd92acf005f7e843a964753b232de27a22c9ac4bf62d25d50145d1cb9ce7","first_seen":"2026-04-22T12:47:07.233871Z","last_seen":"2026-04-22T12:52:13.109948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BgICdMgg.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BgICdMgg.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1275\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a791b52386bc4d0dd1f92d5b3a19fa4e844ffbebde1e97e91316382242863686-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.397447,VS0,VE119\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5872,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (309)","md5":"6d0d3e89cadb3d91fa5b7ba386dcc48d","sha1":"822b302dcc0aef0b97d5e3bcddb5b251a623f03c","sha256":"d9b29628f08be93ae006f0c9182d56c5226ff82fecb7c868dc24be7b64a2c20e","sha512":"be3ea44aaf6c37c9bed397e5beb464309c4ee0ac829509671a093251bd16c3a3b18970c851bf3705e8d67cf19f1d9a4a9b6fd7d8c59b29541fc5d4e81bd8ee6e","ssdeep":"48:N05bO/ws8wFwizJ/h0L1L+Nf3vKQ9795OC2LUjaYWLGvMbKCgcFL+SEJFfUQN1le:NoVs9jJ/h0L1c/XjMLN9JopJFfUfX","tlshash":"a9c1acc9b3040d7cf523966dd302b27d657b26d32a55a168cc3b2c792c0891dea7fae4","first_seen":"2026-04-22T12:47:07.235914Z","last_seen":"2026-04-22T12:52:13.069555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CFdSodvD.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CFdSodvD.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1174\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"4479bc85ff0ac6433787a9496013f467aa3be72e5fe971ea797843f1012f0c74-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.717478,VS0,VE113\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3191,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3054)","md5":"d3f24ae91a2c818575eb7cefdf5f66d5","sha1":"e2fa8718d2cafc3f825a50d96c8cd0ee2042a76f","sha256":"22e95203911d0a2cbdb340f8fcc01764297ac84e7dee0527e667e04719298b2e","sha512":"6189871fedda7e077e356526cad100532beaefd0c8dc0c042dd84445dbfe33fbfda6dd055b033b2f8d4925e59244ff245c031c2d6e39bd07cf428fa881cc8e6b","ssdeep":"","tlshash":"be61775553a653b4f40e6bfa56360c773c1538d77660c8e1c79e2c01f6a211c2ab6ecb","first_seen":"2026-04-22T12:47:07.237942Z","last_seen":"2026-04-22T12:52:13.112882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BXmZm0NA.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BXmZm0NA.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 285\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e4af8a5a8374a9d71eae7f1f41b8001a981354377dd146f4ae3f8b54323a0101-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.733225,VS0,VE245\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":506,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (369)","md5":"35fec246991b0027f94d6e54d2e90cbd","sha1":"f05d8d18c93346ab3d17d86441c8ea390559b496","sha256":"0c06c8eb90f7b99c4ea6d323eafa6051661ca43b5a7465acc9a61d2a787c5309","sha512":"e66b84283b62d241c3738eaf0d388e0ff9f9e4116d3335b0f6412dc571dd1e863c643694bc600f8eb9544c26e9e6b0fda25b3e6585b0ccb6c6004663cb5e7e8c","ssdeep":"","tlshash":"eff0d4b193a8c7fd58054fb0cb197573a05e31361454d25788b70d61b18018f6c3bdcc","first_seen":"2026-04-22T12:47:07.23974Z","last_seen":"2026-04-22T12:52:13.077537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DE2AZJBE.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DE2AZJBE.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 391\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"376020299ade1bc32cbb978150e83fcf0843c76a2ecf5f67c5766926f658e769-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.827658,VS0,VE97\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":681,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (544)","md5":"751cc5d9ad55f55efc52a054805352e4","sha1":"342cfcba5436c51cebfcd09c55e723f9a819e27f","sha256":"82234d3d9219f3073c185f49893c42a178b43cb60446f46fa61caf2fa5b4be24","sha512":"59bde2ba8a31ff4d395fe88eab02f4404e9aea24d6f17682b40598f6388f31245bb0d2e65bf061d5a6878412f8641ecd703de44f106c9d8fb1e60109835a349b","ssdeep":"","tlshash":"0201c0a581b8a9f890115f92f16770b13c5939f73a04a974ce706c3041200bd5d3a9c8","first_seen":"2026-04-22T12:47:07.24123Z","last_seen":"2026-04-22T12:52:13.103325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/B8_ysyoj.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/B8_ysyoj.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 468\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"94f42c36a28fde2a0848452274491c4a973d92a1796e085e92fde32a9daac7d0-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.563644,VS0,VE114\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450)","md5":"b4fccf0898e498c375a2c9f1af815552","sha1":"2cf8d7b4f10dd5f1f25cec0ad86110a8cd59376d","sha256":"2a4b18cd2908ea0abc6b0ed5ec69afbe9aba2e817d116cc2f5314117e481188e","sha512":"85815f1a1eccfdf4cee5d121ad5efb938468d816755546576d510cfb4c2a6e4c0044735574d0a36c4523ccfd0803cf4ed108a446646637c85e780d9721297d40","ssdeep":"","tlshash":"b7211e6a73231e79f113475df32335b9429f29a1276172885a681c76b804d0cf83b3cc","first_seen":"2026-04-22T12:47:07.242666Z","last_seen":"2026-04-22T12:52:13.057691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CSbMEtCh.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CSbMEtCh.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 204\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e8fc475cd7f5778381a7443432d97b7aa098c2ebe62f6821121778a8879a61fe-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.780388,VS0,VE111\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"859d717cd7ece4f9f4bffce0f45deeb5","sha1":"0ad5451b9e99c356c640d3664a22d80e7d86a533","sha256":"83ea9d72b4aebbde2727c48ceecff76378a0af013ac5edc3459d6b0e252cd2c6","sha512":"c5993ddf134eeed8d13d669cc2b9ab1a525def53b62b766e9be150b1f1f509e2a153705d7371ea5e8b9ee588fb7135bb921e335bce0b2b12b663dcc277c6e1fa","ssdeep":"","tlshash":"98d02b376344cc6ca0274910d358313f20372266628a6044d8723471d1420cded3bf98","first_seen":"2026-04-22T12:47:07.244406Z","last_seen":"2026-04-22T12:52:13.07905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/B-AizHTw.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/B-AizHTw.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 595\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d6c9a0ad9f1f27af204b0082b20484e889b2e87f993eec2f3cd86503ef6771bc-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.098517,VS0,VE69\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (462)","md5":"bc3988049071027f94782ac0fb4ea2d3","sha1":"28755cbc1dc4a301c84f380aad38045e387597ad","sha256":"69fcdc0a4d7e39b851f760d007f8add8a66a9ea3c4e7d3c3e2914f5b9733239d","sha512":"486ef1ec0786c2420c25eeb2cb04de314cfd5dabbc5b6a906909c1958bb6d73f349ec9f3a128f17b1a14c186cd44fd9e65771ba8627a431d8d15f9abd73436ce","ssdeep":"","tlshash":"0a2132a2a7f5a5e4f505b3a51718a53931e2b5f9770205188ea50e60b1600becc7ded3","first_seen":"2026-04-22T12:47:07.247199Z","last_seen":"2026-04-22T12:52:13.075812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/entry.Jx98S9xw.css","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:37.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/entry.Jx98S9xw.css HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"de7789618674b8b64d56d98a6825bb2ab874410cb12a85a1718271f87e0c4224-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.968967,VS0,VE210\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 77553\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142022,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7ee599336a3e827054c848f997e1ffaf","sha1":"5ca623125ea7e944c0b1fa68b1ca9dd093264c75","sha256":"2607e0125b175f51eabc5a7e46ec80781c5f9b66ef39056c2bc0f4ef502ac897","sha512":"d7bc5f57f528f310d1cf6a422d559c7f805245d3265863fddca90b4ad0f24aeea5ced5d99c3085f6064c4a6af1ea86e5f7e6b5aff1a97b9572140cfe49439fe6","ssdeep":"1536:J69H44CCBG+WOnWxc96lXN7OcOxUyw+gBRNsXUB/MF+JCyxKckQYimnt:244fBG+ficsPObL3+R2QEF+JCokQMt","tlshash":"6fd36d206afe3414f773c622a0e0cadcf336a606d5324b7dd2667d7e57870a925a39c1","first_seen":"2026-04-22T12:47:07.249664Z","last_seen":"2026-04-22T12:52:13.052718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/D2dYKU1L.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/D2dYKU1L.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 188\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a55306d9fcc3a0808553d5197466fc8cc7eaf5df2a698479bf2f72034ee09017-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.673156,VS0,VE135\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"80a62d319889442d45d0799d1d6bd626","sha1":"58f1ed9d6cd1d6eafbca70653349d0dd9d354aa7","sha256":"cbb92fcdc12d1e1d5c72b0cd028295b3a0af942fa17b08d3a121e2a5c0c85199","sha512":"a64394d83c3b597e32a7d41ae17d5c6d485376f21b3d13190ce040ddf9dc2099ce8d2837d2b36a0ba37ac9b5bfe7fb8c06c646e770125a4e021e916fe602685c","ssdeep":"","tlshash":"47e07273a2484c2ce3038800d324b27a00763282ba78e348d8113e72619015bae2fe9c","first_seen":"2026-04-22T12:47:07.252292Z","last_seen":"2026-04-22T12:52:13.073938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DRnMBb08.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DRnMBb08.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 181\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"9df05d21ce136a9948532ef0c2e80ac3eb21a6dd16cb7af49cabb3a0210354af-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.922769,VS0,VE67\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"09f39aa3f37deea0764e8114ad48d061","sha1":"a79b4802be41894eebab82759fcec02ddb0cb060","sha256":"d39257314e6c017641b880c731bcf2984fd368ffbe0bf9af076f58db742dc8a2","sha512":"307f8fe4d3ed403ad3fb079b0ac454fafcccd331691efa15053f18d15d2576ad28f2fc52c029335057fb6d13b2f6a5468dbe3243edc23e3b24e0eaf4268402c9","ssdeep":"","tlshash":"9bd02b6651488c3df6070490db34722a007569833964625e89f108f0e16215ede27ed8","first_seen":"2026-04-22T12:47:07.25554Z","last_seen":"2026-04-22T12:52:13.104089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/xe3Gsj_n.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/xe3Gsj_n.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 560\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b5edc1cbff7fc79d88131c0d8714f6d51ed9717501424be9a1203ed324c44971-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.205892,VS0,VE345\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"f077c86f026ca37aa485ad97c5ec4465","sha1":"98f7a44c88d276ea9251f5f2fbfb78d04a57a22d","sha256":"40d2eaa40d39f1d7db1bf9d40873006723f573dbb1651f1869791ddc906be46d","sha512":"ccaac0aa1b021fcb655a15e931c636dedee84722d1a135cbc8af8f27ff4856f986751f004adfdb5e74303adbcad307591286ca236b1674b997a9c186b7ff5bab","ssdeep":"","tlshash":"c141899923184dbcfa234718e76272b8e02939935e497248c9bb7c33221110da97fedc","first_seen":"2026-04-22T12:47:07.256709Z","last_seen":"2026-04-22T12:52:13.093289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DRwHLAmz.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DRwHLAmz.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 536\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"000d1e1f497ef72071a0b9fe930d6db32a928b7f1f7258c74e60c0f91d12e8f7-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.313867,VS0,VE98\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1891,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"b9a8c1a4374ef66fc39a5c05256be449","sha1":"2822a69a450cb211288bb0d24b9a3e8f82007fce","sha256":"74272b3cdecf56d9e6fbc2f4fb20140c11fdf7c99c444500ef37cccbbd21683a","sha512":"19b24d6ccc0dfb13ffe778a6fd620122638f0423e4714d2dd1459ee95531bcddeba52b7b0868ea0b36deeac9ab983fdd8b3e7250d275eeb5a043fd80cb6f87b5","ssdeep":"","tlshash":"80417e9633084d7cbd139f20f7663639641536672c84e2448db62db2ad1281cbebfdd0","first_seen":"2026-04-22T12:47:07.258245Z","last_seen":"2026-04-22T12:52:13.107319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CJTv3Hv7.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CJTv3Hv7.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1257\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b8e10bfb0645b4d86f5cba98c32228b724fa0cd10f582fa5594f9c77fab6bf49-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.778679,VS0,VE112\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1257)","md5":"fc1bc7b449e7e7ddebc2029078d7fb76","sha1":"9453fad42d1f3280c4c5ca16df225439d9ddf139","sha256":"923fcb1ed00b27cf26bb5e33a5a071391d320e82e3674de155f6e92b89f0c7d0","sha512":"2ac7072e1bcbc59df5a90f16fb115fbe4fc0092d153904aa7e88ba6bb7450f3733c650d7ef520b05411b4bf573e1af51b134d37a1f602666a3d1c2b760bf3cfe","ssdeep":"","tlshash":"e4615fc473ac4374ea01f3f8096b60b56c2b6cd66965d8b6c2464c42d5831fc09aefeb","first_seen":"2026-04-22T12:47:07.260589Z","last_seen":"2026-04-22T12:52:13.050503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/QeKQHTQF.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/QeKQHTQF.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1804\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f3d939059954211dd3c63a383bc512416b26f1e532665a6e5f5df2fc9d1da76a-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.456707,VS0,VE249\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5953,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (857)","md5":"b5e6e630f1e9778797f13892ef387cfc","sha1":"3b382249f406e001a9a962d092a3c9e7df598680","sha256":"4b2091faecd2898adb28f5c609e5a23205509d60b5702827b68de8e4b02feace","sha512":"570948fd4d4ca0c42192c934de7b998c9caa04fcaccc87a7213d47a49db79f83867a8a54d7797b56fc58794842c997d6bb5290de42b494d127b7b0a118d80a53","ssdeep":"96:Zb/aXjfx2HvUmtvYsDUt2obN2ikHfe9eIH+aS30g2UuL+XUn7w/qN:Zb+fM9Ysot2jikHWegm0RUIH","tlshash":"56c14ec42319c3bcf451e37d972910786d2a28c04ec66038cb866d1ab89641fdcbfad7","first_seen":"2026-04-22T12:47:07.262709Z","last_seen":"2026-04-22T12:52:13.097791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/BgNyibj5.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/BgNyibj5.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1074\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e040f587ec10eafe9d28445bc32219f157cea812e32e850cc073e99dedef338c-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.959275,VS0,VE107\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":3590,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2590)","md5":"5e9a52801e28693ce6c6a786ff724ea1","sha1":"1d18d6e8abcf286bfe889827a9cf6c6bd086b2d4","sha256":"a252b0b9904d7093366cb1189dbee04c7875ab2a49815025b48118c1b4834dc2","sha512":"f0f1a4ff1e1e3cc729003fcacac504a6b693b1e7239efd390341a671a2cde8a45d33e98e3de81ad84ff13f7bb8ab780e84c2e598093928d2d5b9e3e28f7257bc","ssdeep":"","tlshash":"e571456933a4daa0ed4153fdcb032a7d311b38867e23d25e1e851c25f9108ad68bace0","first_seen":"2026-04-22T12:47:07.265222Z","last_seen":"2026-04-22T12:52:13.086746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/JeNXJKh0.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/JeNXJKh0.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 616\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f7d2430352e606b35fd388338cf177e1b11e5b0dec3f16b32fe1b06e8b57d7f6-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.618780,VS0,VE81\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1684,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (305)","md5":"c0fa9e7629fa92617b6918a2f5ca73da","sha1":"89295f31d5819691e19d64a9d25c0f43b64422c0","sha256":"482c55cd0ef60bb6733954b893b01721f32d365b9ab271c81d6343858e7927c9","sha512":"304551854dfbd6ad47340ea339a6c177f59b0ab96a8d0a125d3249a27008621a17c115528b675ca629f2a6d06bdf606400cfd75c4feae2793f27724928e2f94c","ssdeep":"","tlshash":"9f31de957340a63cf5308b51db0070b825361df6a96b3ac9ce013530dd5946e6dbf9ee","first_seen":"2026-04-22T12:47:07.26697Z","last_seen":"2026-04-22T12:52:13.044272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/D-Hc7zrj.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/D-Hc7zrj.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 301\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"a7645599112061f25b6c5013473114af9154b6984cae32a23da25e7514d58d28-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.653096,VS0,VE94\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":678,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"555c49105593bcc7b16c3db46f01fec2","sha1":"7c50f4a226cfc5ab5eb17775f8cf2728b6aa6543","sha256":"b4c4d6ce3f596d2b3666ba48836d95ae3fff6c62962aac6162d34f1fa8975ca0","sha512":"8087a8ab25f81746d46f9699fd7be44e26a8781f0fc5f438bcebaec3514879d71313d75085534eb10e2d04f6342bfe1c4872c886f704504e011be8f86a21028a","ssdeep":"","tlshash":"0901f24823484c3de252468ce75032bd117fa1821359215cde096537643280eec3bbec","first_seen":"2026-04-22T12:47:07.269914Z","last_seen":"2026-04-22T12:52:13.047733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Crk9Ze5W.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Crk9Ze5W.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 240\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"cdf7b428a3c15e0aa4fa37a268f9b94b0521501e7bb134a60794aa0725ab9981-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.921837,VS0,VE58\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"df55c16c26d9eadf82f2c66cc04b9723","sha1":"294f52e79628d2c01fbe2fe49a717461c9b8784b","sha256":"ebcb84e58ea2f6fe4f1d683b620b068cc1fc3d5463440c45d0585452789651f5","sha512":"4874ee50d9c74e8c0b833e728c4bdfa1b15e744d3b22d870b9a38128248b8adc8467e41d0ecc3ce265f9cfa52ec052cbe645616d5623334a691178bb84363505","ssdeep":"","tlshash":"18f02b2a7b4c6c3cf473446ce359727e203b5183265ab35894331979110225ef93f6dc","first_seen":"2026-04-22T12:47:07.274819Z","last_seen":"2026-04-22T12:52:13.06198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T12:46:37.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"a306439af2e201c68e232ff37044f1d103ed15a7cd8b264267f3b1670be1861b-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:37 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776861998.786517,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9104,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1140)","md5":"b6ba3d139ae15d3570bdf4c680e2b08e","sha1":"6c770cf1dea465d676060a59ab693eb0e708a423","sha256":"519732608744f6b4e0ca36c3771869622c576980420363dfec02455386f9d7e9","sha512":"f555d783a1bc973889ba64c7b7341fdd4561694bcdddb97fe8f68e2ceb4154fb9b9eab026559bbbf17ab385470370a0889f1259133aadec016f1ca12ed54befb","ssdeep":"192:YvIwK8B0jtSL9qjcVxKOStVR6FkHnkClR:Lw9B0jLjcV4VIkEClR","tlshash":"d5129a7e3a0cce5b1a3167996bb3b508e09b371a002dd894b5ef5cbacf00b614f62557","first_seen":"2026-04-22T12:47:07.277202Z","last_seen":"2026-04-22T12:52:13.102486Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":45,"dns":6,"connect":13,"send":0,"wait":15,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DvcClyzE.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DvcClyzE.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 453\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"3261ae00f048140cbc34675c8b29a8bcb09350011a6b740fbdd43e3e0237caf8-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.457072,VS0,VE291\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":897,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (760)","md5":"0742dc79e275150e09ef09b6117b1ed5","sha1":"bcb0f214a48c63e8e524d593707ac35ca8794f92","sha256":"90c3bee89994dc3b41a1b9cfaf15301663b9e5f2848fddc9fa14062032b5f920","sha512":"8e0e685ac10082c475d2ca216edf6e9f71ca61eb512dd3c8916293dadf57dfb4c5cf7b12d3a4bb899fb87a277a0210605c815a8397c8be4cca014e1a0eb0dda7","ssdeep":"","tlshash":"0c1100ba37c38d7cf0991ebdef1764a42aa776d6381180e65941143be00146d9c16ddb","first_seen":"2026-04-22T12:47:07.278849Z","last_seen":"2026-04-22T12:52:13.100272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Bl6U51aH.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Bl6U51aH.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 543\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"001cdc6b0f2686a44992085848660e590a541aa1d08b592390afe94c1d86a088-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.984437,VS0,VE266\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1017)","md5":"76a02de916662d1392051f9b7aa59034","sha1":"1c53aa08ead64864f1592f65e97c116d3af3acb6","sha256":"154289e0c0745567e8f8979dd08eac086c8aaa89ffa8bf68a8c60c906cc271ed","sha512":"887dadb3a14cd6c27ed415ee0941f97a18776b51a504f8186303a0a6ddddf0ad223c503601dbd978e95805df83a0469f0dac07831524dcc3c38cc65532c669a3","ssdeep":"","tlshash":"d8213355b7ba42fcd40211e42a2664ffbf03456e458088f8c3f1bd95982907dcd679f6","first_seen":"2026-04-22T12:47:07.280398Z","last_seen":"2026-04-22T12:52:13.074941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/khz6uNQ9.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/khz6uNQ9.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 365\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"6898dc8c98ed174f5ecc1e960815cffc2804e1a7e2255fc0f3f28d2fbc55f879-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.266243,VS0,VE184\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (537)","md5":"b013774eecf86d65cae905162aedcd02","sha1":"b5ec81d55363bfa5c67ab3ab054319288bc0bb66","sha256":"48c30fb276e7d34cceae9effd4a651e482c3863307883ebfcd3b6920c5d2734d","sha512":"175371379ca5df5a3db7c18d6c2c624706377734c26895450ef6950c811e0aa94c54da11974e87b29e91af11fa498d9200420f256d6ef5495e043c9ee013c906","ssdeep":"","tlshash":"0f01999e12a9c738b120af3ad665a2357ac730c22105504cc798ada2f00334e7cbb8df","first_seen":"2026-04-22T12:47:07.282169Z","last_seen":"2026-04-22T12:52:13.110841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/CRasvT-c.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/CRasvT-c.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 402\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"6836351572b35d3cb90fec8e0ac15d1a6917d7cfdd41bba57fab4d83f153ae99-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.278203,VS0,VE87\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1605,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"8ffef1ab9952a671d08cf88eba28ea79","sha1":"e5670a849a310b07615bf5db8854ca3088fcf211","sha256":"08daec2510bc6ffd100b98b9e596e5de1a03152ce24a10422b4f855a27d59cc5","sha512":"04b32e019b31375df9d6b6c6a6ceca08409bdb1db6d498cf611d5cb2e0f8d6d63f9a92dc3e686b70beddcb8400ec7574c0e438ecdaa6896ab798c95ae981adc3","ssdeep":"","tlshash":"84314e9a27248d3cba330b28e7a6b274907975436e4e3254cd371972251491e7ebfdc8","first_seen":"2026-04-22T12:47:07.284215Z","last_seen":"2026-04-22T12:52:13.063611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/Bw19SBzM.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/Bw19SBzM.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4472\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f987b344846df8bd0d4b0807698cab50519ee6372d5fa55a770b8cbdd6e9f130-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.455719,VS0,VE185\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12631,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5193)","md5":"fe405771c88d2dc05cceb97e5ee7ef10","sha1":"468729df1708bc03b32d9f0c01e725c71a989153","sha256":"9933a491f8e4a684b3da9ef3f8cd06e8f88a6359f227570b8d022b877ac1ee3a","sha512":"f7a373f76b70c18f7eb1b8566374c3897597d398b889661ad1d6cdac5f506e24bc9b7dcac139692bdcf1d028d64ebb57d3c43f4d3f5e2689a71c617eb6052553","ssdeep":"192:NciahHfoctISNlWSvTh3bNbCGlI4FI3pATSs+1sN4PVU3h:N6HfocqShhpbC2XI3ST468VUx","tlshash":"2642c7d8b4543066876674f0c03f96057235b11ba8888094f621dcfb1dfe54eaa6ffae","first_seen":"2026-04-22T12:47:07.28626Z","last_seen":"2026-04-22T12:52:13.090342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/fxz0E7Kh.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:38.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/fxz0E7Kh.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 43590\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"64699995883da7fd299f73132f0446149c713d5bf983874b8ba5596792a00590-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.456042,VS0,VE322\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":341013,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63096)","md5":"9276cff5f1e41b76489b2862f630975f","sha1":"037b32941e5bcb6556863611ea1faa981f77fefb","sha256":"7c6a738a6092fe56a1413821e49699bf71befc9a92dac84489f7473511cd62ae","sha512":"8f680aeb59312bb9aa99af3814b68427cecc19d704084b038f1746f3e43d9268f37ccc3a22bf2724bb47c86e0870c739a9715680e4ad5cc7d3be4d7d5c458860","ssdeep":"6144:cqPZsLhOACt6HXtJ9PDSQNW83xqv8QRO6hTRPdUYcENc5fquMgq/1ruw1zw:cq7Ag+","tlshash":"a1744eca16a44ade00a82006d4b32b0cb4e84984ccc2dddbd6f8ddee7658db575d72db","first_seen":"2026-04-22T12:47:07.290048Z","last_seen":"2026-04-22T12:52:13.091187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/3o_gGkv7.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/3o_gGkv7.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1274\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"d7385ad355020a66b7d22d5dfaaa65ecd397eecda4c037682bb117db6599871d-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.042512,VS0,VE128\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5872,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (309)","md5":"ae923975f04504e5e87af69cdce517c0","sha1":"2533c6a05c3475839bca4dfe5981b11072636430","sha256":"a33801c1dcd4b629e39fb4f256524dd5ad81148e2afe1493b31b3ab7d29736f4","sha512":"84ecf262816e0445f472467e509bb1967abb44c778aed68ccd235bdf3bfe803f2bdbadffb911ad725ce73ee25e6ff49d6c02aa5d498d321e1e0866fd24194dc3","ssdeep":"48:O05bO/ws8wFwizJ/h0L1L+Nf3vKQ9795OC2LUjaYWLGvMbKCgcFL+SEJFfUQN1lr:OoVs9jJ/h0L1c/XjMLN9JopJFfUfy","tlshash":"59c1bdc9b3040d7cf523966dd302b27d657b26d32a55a168cc3b2c792c0891dea7fae4","first_seen":"2026-04-22T12:47:07.293451Z","last_seen":"2026-04-22T12:52:13.079958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DAFY6AsA.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DAFY6AsA.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 267\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b3427b73275e99a6780ece8c8fc16e1b60e6b440110a7d3507af1a48d5ad4e8e-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.482349,VS0,VE87\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"988e1bbdcf57e05ec91c9918c0a67f38","sha1":"ec352dd65a50df3117225bb6b5f6e7cf0adc91cd","sha256":"b0b9ce12054e22365d6005b2e624a5071070a9c5d1a8913b4f9f5ee7843f6917","sha512":"76df7a1f9938959bae71db42e35e2f42ca5838ff5165f3e4ffcd2aee62b7e42cc332836ad3f0a0c1331ca92ab0eab7c6135e26e278a42705b6ba21a414f37bcd","ssdeep":"","tlshash":"70f046a402440fbeb4228704eb77b43a307626f31d4cb410caa2adb6211649f6c7ba99","first_seen":"2026-04-22T12:47:07.29617Z","last_seen":"2026-04-22T12:52:13.10818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/2Pl3oWto.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/2Pl3oWto.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1466\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"ec90a567f01b7dfb5f367c8c63521846e0a40f7556cd460e4fb7a369fc84259f-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:40 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776862000.988356,VS0,VE90\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3755,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3754)","md5":"e511039ca3c537140f908d12e5e43696","sha1":"77a4682eab9baaa98ab7aeb3e8609ee1a7ff502f","sha256":"a30461ba29aa36c5eb174c4cd23d7edfc8f05e7799bde818c696cecac7cdd5fd","sha512":"84af20849a1b5def56e7bd2fd5885f49ab4ae0460537f393433e78e37e56e647b88ee5808fc57b26b5a1d14a37be3314f0f08b5f2ae5c15b91d8b087c1b59061","ssdeep":"","tlshash":"d87195a8b8c196668f978d5bf5f1b60558081681fb2384f1f2881c157bc659ff89e30b","first_seen":"2026-04-22T12:47:07.298383Z","last_seen":"2026-04-22T12:52:13.091872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/DKPrhHhj.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:37.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/DKPrhHhj.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"f22c1b6a93969a13bb587e770597f2fe5146d5cc9f6ec80c3c8c76e7ee8bedce-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:38 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861998.969569,VS0,VE269\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 314797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1427596,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21746)","md5":"570ab461a9e6e9f678aa1f67b8321e1c","sha1":"6a319127d316de241edb192cf7016ce2b854ee24","sha256":"080bb7d96cf7a2b829e4fa05a1ea586797d60be0e82ec8de31ce990c7dbc9570","sha512":"b7ef4556ce01aafc3e87d5456fe9b908dbef931af0ec1f5a9274d54ab053fde3eb38a09a1561911b0ae1236a4444cb927794fe532e6e0fa5c012781bb99a7d55","ssdeep":"12288:lnyLZYOXr/g6BcQKYtfaZNJy0HlSaOcwXf2j203pL3eO7ysBvG8T/lk00csXQRMx:lnyLZjXXgMs1elTYeXmOwIT4k","tlshash":"67256be872a2703202d115f9a03f0547b6396959344cc09cf62ce9eb7e7a94961bff78","first_seen":"2026-04-22T12:47:07.182103Z","last_seen":"2026-04-22T12:52:13.084368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rogersreplay.com/_nuxt/D8ujvOIq.js","fqdn":"rogersreplay.com","domain":"rogersreplay.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rogersreplay.com/","date":"2026-04-22T12:46:39.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rogersreplay.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:35:06 GMT","end":"Sat, 11 Jul 2026 03:34:21 GMT"},"fingerprint":{"sha1":"01:4D:33:A8:AA:5C:40:8F:B7:D8:34:C3:B8:E3:75:8C:9D:66:5E:00","sha256":"57:BF:7A:48:C8:9B:C3:2C:F5:5C:17:3D:53:7B:41:DF:7C:D5:AD:77:C5:D8:D3:13:C7:67:DA:CC:28:48:07:68"}}},"request":{"raw":"GET /_nuxt/D8ujvOIq.js HTTP/1.1\r\nHost: rogersreplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rogersreplay.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 546\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"b47fc8d4bf7444f0692346a447eb5c85f90f9c54b0da2579e67a28b109167155-br\"\r\nlast-modified: Mon, 28 Jul 2025 09:15:32 GMT\r\nstrict-transport-security: max-age=2592000; includeSubdomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 12:46:39 GMT\r\nx-served-by: cache-hel1410033-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776861999.340021,VS0,VE89\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"1a6cb030235b429426a7d1ff48ee5b88","sha1":"add2088d6f1259262156e6b2030c180fb092c8f1","sha256":"f6b1e6f1f4daaaa4fa5e4f94f8f2638ea034d80b38fee31143742327fe31f3c1","sha512":"33ad41854bdd96bd2949c9f0216f1cef67571fa903cb65aca35aa43311448a6fe9295e85ca43f0567dbf378c56ba781cec64807f43560dc8bf5fc219759a750e","ssdeep":"","tlshash":"c441a0ca33484dbcfa170f34eba63236942327a3ad44e564ca761c331a11a1c697fed5","first_seen":"2026-04-22T12:47:07.30006Z","last_seen":"2026-04-22T12:52:13.08779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"rogersreplay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"rogersreplay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}