{"report_id":"1c6969cc-47f8-4992-a6f6-a1e6b978e054","version":6,"status":"done","tags":[],"date":"2026-01-17T01:54:32Z","url":{"schema":"http","addr":"alexisbreeze.com","fqdn":"alexisbreeze.com","domain":"alexisbreeze.com","tld":"com"},"ip":{"addr":"212.92.105.26","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"title":"The most popular dating site of this month","dom":{"size":65206,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30543)","md5":"d6cc75c6b7c8bfe23438948fda0d2e8c","sha1":"27e43536657d5b53782bc06a5c6276ce62ad4fd6","sha256":"6708eab80ebfd6621bfd3a1d4d0fa8a753467f9d3c7c5f90dcf344cef7499569","sha512":"6635ebdad00e474ac54134603c6e7790407e5a97386d98c2a4c4b031587d83e5cbc88bda771b17a7c9026d518be99c7342e897fc45c511e5d10156c15e2c091a","ssdeep":"768:gb4XiBpgBiX4yG/bSqAPbBRvB3ACfaYOTQpz0eEdAfHupQSbpjHfx9vKgqc:8VRvB3ACfaYT0eESH1c","tlshash":"85531b5c38e73436026375a927afd20876799907600e8840b9bd43d46fe4f6952bbfec","dom_hash":"domhash8807e619e0dc4da742419eb0a9e805aa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"alexisbreeze.com","fqdn":"alexisbreeze.com","domain":"alexisbreeze.com","tld":"com"},"ip":{"addr":"212.92.105.26","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-21T01:54:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trk.cloudsecure-dt.com","ip":{"addr":"185.254.196.64","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"domain_registered":"2023-04-07","domain_rank":0,"first_seen":"2023-04-07T14:47:00Z","last_seen":"2026-01-16T10:43:04.442281Z","alert_count":3,"request_count":1,"received_data":67726,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-11T22:17:18.570046Z","alert_count":0,"request_count":2,"received_data":4094,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-11T22:14:24.773767Z","alert_count":0,"request_count":2,"received_data":34216,"sent_data":1122,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-01-11T23:19:13.154617Z","alert_count":0,"request_count":1,"received_data":29244,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"dhaaeh.smartclickmatch.com","ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-05","domain_rank":0,"first_seen":"2025-06-18T12:53:21.300394Z","last_seen":"2026-01-16T10:43:03.631995Z","alert_count":0,"request_count":5,"received_data":142364,"sent_data":17264,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"alexisbreeze.com","ip":{"addr":"82.192.80.79","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-03-09","domain_rank":0,"first_seen":"2026-01-17T01:54:32.885544Z","last_seen":"2026-01-17T01:54:32.885544Z","alert_count":0,"request_count":1,"received_data":65937,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"q1.quotes.com","ip":{"addr":"5.79.68.236","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-05-20","domain_rank":3978262,"first_seen":"2022-09-19T03:10:30Z","last_seen":"2026-01-14T11:40:23.735743Z","alert_count":0,"request_count":1,"received_data":65793,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-11T22:30:04.050705Z","alert_count":0,"request_count":1,"received_data":6801,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-11T22:41:44.362435Z","alert_count":0,"request_count":1,"received_data":87515,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-11T01:53:53.87538Z","times_seen":134444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"167c422fc8202c5fc2a6f92933c22866","sha1":"59ac1b088c3d7d355757edec561f89e89ad61415","sha256":"9b543432680d246b4db6da3bf9c95f1c247c5feecca08420bd541f3ade29dc1c","sha512":"ba4220a3668894358bb04dd8c3400107c12fc821f1676208d65b5a48f704e158eb4c8d595b2a6c0fc65b1f5c7cefb9d7af27a6fbe1e256a5becf7f8ca1151aab","ssdeep":"","tlshash":"a9615c4c7ddaf5260edd19be54f0e0948bed0cf5420146a9a1dc8aec2bdcb695d8d01d","size":3191,"data":"","first_seen":"2026-01-17T01:54:36.466385Z","last_seen":"2026-01-17T01:54:36.466385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d88a8476e1bfc2ab0259a3d9bef96f3","sha1":"f4bd47d2307e310279ae6cf904d3a623d6bbe619","sha256":"b96aaa3fc0eb2e5f4940dc09396443cfa7198733f392a3c9b9d556330a488179","sha512":"12eb71ab022b054bd572043f339bc76c66b1e5dff0f1a4cc3561d9ccd26697015e409825f9e1c4efdd7cd7dc38253205254dbb00b69e715b9fa00c8ac456b214","ssdeep":"768:JqAPbBRvB3ACfaYOTQpz0eEdAfHupQSbpjHfx9vg:pVRvB3ACfaYT0eESH9","tlshash":"e4331c5c78e7303a026375a9179fd108b1794947304e8800bdad46a46fe4f7a62bbfec","size":51380,"data":"","first_seen":"2026-01-08T16:36:32.445687Z","last_seen":"2026-01-28T10:07:54.144064Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/just-validate@4.1.0/dist/just-validate.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"713352ee6a16034c696a6e2785b92280","sha1":"6289cf9b1f0e775ad3feb36b0fcfe5af301a0e5b","sha256":"c08b11b232cea03b467d40d5b0990d7deaee04ae1de7af2d4eb94c3544b4c1a5","sha512":"8c42085cda5010ff9eb71174f3f5af3f94f276ab1b134241ed70cd37b3c8d7b8efc7a0899e964be8cef88474da2bee314158b86e45a64ecc0294f8dd628de2fa","ssdeep":"768:VkW++Jv/0btODUsl7dMrXfSCiwgRgpZ1UuVvw1CByfDwty0HD/h7PCByCrCagSZi:mCsRXaCiwgRgysnY3gSK6U","tlshash":"0ad2d606267109234dd94ae9e08b9543b3d1375da518a4ccf73dacfb9a8dec630937b2","size":28389,"data":"","first_seen":"2025-09-05T11:13:19.031002Z","last_seen":"2026-06-11T01:22:45.50243Z","times_seen":8698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"149056fccb5063e0260d8fb1f9e14966","sha1":"46cab50b3ca932a0ddaec7140a583f4d9a5ed11e","sha256":"a6e396bf650118b365fa4d73f3669a524d18f2af0905a8b36701d50c477967f8","sha512":"0c01b1d7121e9ba3d5d3b151b82e23cacac0b64ef34ebe757033e7b2d5f95cab8a96112dce0903d491ce07788567735cb70896478d373e9049ca4d06c35e2603","ssdeep":"","tlshash":"03d08069476505700d33f57d030ee74131fb90571144cd56b5ec01441f4074981f41d0","size":268,"data":"","first_seen":"2025-09-30T17:44:21.39311Z","last_seen":"2026-06-07T07:38:41.773597Z","times_seen":5186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d566cb6e7cecae234371e35a82d90785","sha1":"eb0997313674573f1f5281ece6b3870f4c83e049","sha256":"1817447710596deffff2d5c4d63efa1c97b9144a51d87fedca21cf485fd386ca","sha512":"8a13f681954af8181cda45c0ff8aafb829b5c877f78574a43252b0b04df10e54639af3c9cf9ea93ece149e98f855bdda424fbf8712a2ff213262c71cef7cee48","ssdeep":"","tlshash":"342170696191747020f770226d2e71542577428f241fedd6b9dc33456f75f0e0a82b64","size":1241,"data":"","first_seen":"2026-01-17T01:54:36.47754Z","last_seen":"2026-02-15T18:13:02.51601Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/bundle/479/assets/js/functions.js","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f99e92b7608b97dfbbb6a8b76b96aa7f","sha1":"ad23b57ccb855a3e36e6455dca418f550241e89e","sha256":"43f373817b00db97aea693aefc11b7a7eab2bd2013e5d42f56818fd760e31630","sha512":"4d3e44a900b89349bf54f7499a507acff03f3247953077ab867e181d0771300b316c06ce8b0de1c300d7f8ea2650dbaf8349bc3cc8b0b58072d77ede06bb542d","ssdeep":"","tlshash":"fb11e345b56db8fe10bf32ab1676a4c4053dbdb0c03929e43ca690a8469fde4313278f","size":933,"data":"","first_seen":"2023-03-26T08:34:35Z","last_seen":"2026-04-06T16:44:15.128702Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60669862b7c39ecb3283b1faa9563a07","sha1":"f9b1d545cf4c85ddda753ff9609ede569d92b31f","sha256":"874cad10027313f3620a770d4a338369833ed5b3913f0793cb8500361b19e6ea","sha512":"1512c8379b8fa49935ed1bfc6a3d2f3a97f892c947c51ad07b1c227078e8a253e05aed187658c14bb242914f1042d523dfe7292d2f087077513337d7391c9a50","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZE:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2iT","tlshash":"3ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","size":5674,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-06-10T20:48:02.866768Z","times_seen":2518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trk.cloudsecure-dt.com/?a=32606\u0026o=169831\u0026c=0\u0026co=29225\u0026mt=24\u0026s1=7727729","fqdn":"trk.cloudsecure-dt.com","domain":"cloudsecure-dt.com","tld":"com"},"ip":{"addr":"185.254.196.64","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-17T01:54:10.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk.cloudsecure-dt.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 04:59:45 GMT","end":"Wed, 25 Feb 2026 04:59:44 GMT"},"fingerprint":{"sha1":"F8:C5:7E:21:63:AE:8F:30:0D:95:28:B0:E5:C6:A5:7E:7E:70:8E:9D","sha256":"97:F6:89:4D:67:7C:B5:C9:AA:DE:C0:F0:A4:B1:05:3E:EE:C8:DB:FC:33:68:02:33:99:F4:CD:DC:A9:C0:D9:D1"}}},"request":{"raw":"GET /?a=32606\u0026o=169831\u0026c=0\u0026co=29225\u0026mt=24\u0026s1=7727729 HTTP/1.1\r\nHost: trk.cloudsecure-dt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 17 Jan 2026 01:54:10 GMT\r\ncontent-type: text/html;charset=ISO-8859-1\r\nlocation: https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375\r\nset-cookie: gdm_click_freq_v2_1_001=SxL3SeUVXqKfM9/KAKrHNqpt/FkTepGO7r4PvyKK+PkrKuin5TzTlJMGgjEz67OI; Domain=.cloudsecure-dt.com; Expires=Fri, 17-Apr-2026 01:54:10 GMT; Path=/; Secure; SameSite=None\ngdm_click_adv_freq_v2_1_001=wrmmRlFvZdIE/aKi//TozjkOp9zY1oRdxpSPFhI+H6818BIr7jNNGxpPH584p5ko; Domain=.cloudsecure-dt.com; Expires=Fri, 17-Apr-2026 01:54:10 GMT; Path=/; Secure; SameSite=None\ngdm_sid_v2_3_001=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; Domain=.cloudsecure-dt.com; Expires=Fri, 17-Apr-2026 01:54:10 GMT; Path=/; Secure; SameSite=None\r\ncontent-language: en-US\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,X-Auth,Pasha-Jlob\r\nstrict-transport-security: max-age=0;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65538,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":109,"dns":19,"connect":39,"send":0,"wait":320,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"trk.cloudsecure-dt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/bundle/479/assets/js/functions.js","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartclickmatch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 22:27:47 GMT","end":"Thu, 29 Jan 2026 22:27:46 GMT"},"fingerprint":{"sha1":"12:A8:8D:37:47:BE:A0:C9:2D:C6:49:52:8C:59:41:7D:0E:2D:7A:F1","sha256":"10:32:CC:95:4B:25:53:B9:0C:44:EF:53:28:BF:75:EB:18:9B:F2:21:A0:D9:81:D3:CE:89:8E:B2:CE:CD:07:E6"}}},"request":{"raw":"GET /bundle/479/assets/js/functions.js HTTP/1.1\r\nHost: dhaaeh.smartclickmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375\r\nCookie: s=yk9cuCqDP%2FXX84yD7uqEV8L1rDoXN8%2Fyo1zz83KWqgaYzpIMrVVb1YK04xHcL%2FeLwJxuO5hFGoPCXePD7hXQ1CB%2BNveRHqtb4xS4f6joZU2yzng%2BxMZGarGOePvrwba%2BdbxCgCTVB0DlKBIiVZL4bR9d1DSuUz%2Bp5KZLSapnutlb8%2BywnaHVQX9j8II8kAdHBKZ7yn2NAHT%2F6ZKbAQTkcG3xakhH4TRRADz7WR2MaNnZXEJ6Np1jFyBZkDuy07U8YNCBvMYuGxX99yjJFhbmXuCyrd97jILlPT8GKoWqxeoRr87qRUc8NZ%2FX7Q1%2B6qMhQhandtunal1GElXNk8Om35JTL6QaagB3f8EyRI9mNGTpLj%2FSTc4O%2Fk%2Bj3MIpAh7iStqqBoKTPDQuGMXv5pNaiXcsYRwdxSrxA8jWFlH0bMpYusEhyGeW9NYi8ElDGaP%2BwMoyMd%2BznyNa0jwHCVYocu8jy2q2s6azvdNttbTrIGZHls%2B2PzcwcKHlVORipBv4qXvAHq%2FPO6pAfQIlheHPELdzn%2FqJ7hD1v%2BFjDcHfBSeTfU3FwXdK2RLjXNymXdr8YidgvhkaF50ckWzltBvFaNKLUXM35SmPK5Dyls5YD7E2h8LzqJy5QQyMDBurGQIXkSisRzTgzUrlTz00r2fiBD15RPP2CfMVMMfxAhr99%2BTvmLse9z0netH4y%2BPO2wOH3tbKE2HhU85ABFucVgHRszvBYdoQGIZKcfJfl4FvDW1KIdprQA%2BO2yuxir3qB9h5laHZfjD3%2FSJXQSzNwfTT0rJakh9I4jOwqI6O6y5AASOwg7jTi8FsMG7Zf%2BtRo%2FF%2BE5ub7nKdsQdPixZYQA%2FTxMCbRjvv8iFIf2lRQbMFEo35vI1QJLorKhxU3XW5InZ%2F6H7zEN4InHhes%2FTdaZzy5KeCP7s6qSAoenilPlZIJrPFrD6%2BmHQA%2BrTmS7%2FpxnbZgQxYBI7uJDhAhxJOEosGwLKEaUsZMw9MGmmmgLEb6TtLKqff%2FRmeFPMUfbXF7aY9jh3pJysOP95VQMKHdfiy%2FH%2BCPsMcIJ3iSign%2F7R3%2Bu3OVcZvPnwqzH8MBpL9ajQ3MF0EEe4tPynZfIuHEBARJSTuI1htmkg0Qe%2BbfiItg%2B1TcUtvXv1xUySYDnbc6%2FOmIAK4xTT2z0mwMTpO5lM1GOGoeS4rl96AZz1%2FW%2Bi7ICXqa7ajzxhPBULShs4tktMs8SycxzED4hr80WYk47nB50CzmS%2B5yx%2FDeMQZbEUdq5oofDOO91fB4ZNO0fKqQELh9e0e0gRfowXr0cPUIpGKqpb4QsVHAvgZzfvQtztF4GxgR3RE%2BDXd%2BkYerapuO2eioYDKZbFJaMUZNFHIjJRd8rGoZaIL65ZURtsS3IGQLEPkgiyiiYvjjpuBQ0rC%2B%2FlCgkBKONFHE18ZPWiTGV3ZnZoSoV26uOyfp1096WBF79cW72tse%2FEgi1praNVZUH3vYLYSWqAkQs7nkGCKp2nElQWhoiPi0WDtg%2F29i4W9PF9jY6vnRZE2BqL3d3Ti5r%2BkIOUICjMgcywoynUc69lYB258GgotBC5tF9muKLWAC5CujvWgNlChOfwVPcvd3%2BjTwKF1aTPOcYHyjqjQfTVd%2F%2BhyVHlDVOTs6J262BeGGr%2FkXk3dsKb9v0MBuQLptDuLPWHdAAEOM%2FqpnU3k3JY9t3Ee3elTsESe0jhIhQxgg8yEsv1pexwc1Loc0gZ2O8kwNjmp6VuSD6hkou9sQHoaOfHMdHBOCeBhalt7YvxHoSklbZk5%2FrI8DP2Uo5hD6iQv7t7DCtoBtOVeA9OvxkvLLbnBmPTOStQGczMDE5CIWHgMh%2FTbjVnLULUOlN6xhJtwXgi0vNm5boJTgG7JKjgUwW3Xlu2ibl8XhetIFLRYD1WiZ4Sjcp60n7IuvvnkgmsZevth%2FCM%2Bd1AkXZCsj9ahMwskc6%2F6wxThmoQBv46GtCrTsEqXNr6tgIiicobFs3uD3Kk4X%2B%2BYuuT8DJLUkwUWXr6uyAknwE735KK08IR3hu%2F8xJtMGlfBy5XVwYAJGH74xSibbRohl0JbJhyP6j4NqS6FGJF6Ty80hOz6vnscitA5UAcYXdi4R789YkfIUiIFIol9bYun9h6brMmUDAjd6g0xkVRIw%2Fze%2FkbQj%2FfoUolNnrvLvxghDDgzPQoUi%2FG5WUtPtx1V7kEpgzTCJ%2B%2FfidNIEfvZj%2BoVVVqpHQ5EH5EjkS4dBpQOGjfNx0xdTNBxZ4%2FVOt5xtimBicofvUkLDRwfbOcjHopURVeh4YwAKSgzNEe%2FfKgqZg1F1LkpoH7WVyVAwpLie4YK7ktg7nBlNun%2Bq2SFSziZnclSpvyje4yOrt%2FdaREbvbPbFyC0yrdGXM39aVlv%2BIgjAPwMLRUD%2BS2jKGL4%2F0f9tgeICX%2FOS9Df%2BIOzudAFQUtymqK%2B5Jo2mN97Y237NW9Bcom6Ne%2FofRaKHS35YiFY%2BtymCHrwjCNGg6gGu9nfeHjtbEsQ8sYugnKg8Z5%2Ft88JrkF6LTy9PQDD%2F0w3hp93EQux03eQxh5O4GyvIc2n4Jk2VPx78IhrjEBhSDSivqSOCrLFXKdofKLWiLh8hoMMbl35%2Fd2PP29XVgSwXEenpCg0wVxPKR8iecalaXn6g00knL%2FP8Abke4z7XzKMZcbjER%2BoJXe2525hLpLp15BGERz43JTgFTLWQde9R0WsFxiCa60L4Ea76ics2RITWYAlu3a4WNP7FNEwWaTaqoKKm3nAws39V4GDJrRRCkONFWjAKr%2BF604y1i0Vw7Rc82ATfcDQGvY%2FtLCDsKeo5ORaqF9j%2BU3jnHC7dSbHsmqowrMnor1k51AWvPkVPxc%2F1KzubYsOgGc9bV6lFIaHHRmwEIvqZ0maOL2MeGU6ZAubsbMAGKFCFgSjH8YbPDOtZDY8KoQIPjI0VAXKiwpM5Lvzl6xmaZ%2F6ruTJr9Dx74A1QCbb3aw1VasIpa56lMaNO8pOJXCr3haAnFPP5jRhzbCIdZNvpeuCIA2gPCgfu9jaxLbhsPTjRirl8fIoshOi2yZ908HdOR6Tj3%2F5UYJ5TV%2FaC%2FTXDOEC5Frzoy46B382oetxUrybUxVB9mOyAdki7O4ofLn03dBgQY%2BhtWhq3Dn9mnk%3D; sr=jIkOf7o95kulw3ANSibMS3tAU%2BSZaumdIQ9JHY6DKQC7jtWz5SrxwmQgj0XEOAcavXFhWVJJneCVLHAwoTwmrSB%2BUBn4Q%2FYxn9bfzilmkSIrCz%2BAFZe8sEYq%2F3IP13Xr35LUWmZGIJuOJC%2BYurEKvZSjzsAKid6xIWvshx04V%2BCrbVwPCyvnLqaPX7jfbyd3nczdi5BFfd6sn%2Bv2LTwtXiarXMGZMFKBW46FaTcxjO4QykiCV1KNeYrDjxFZ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=86400, public\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f99e92b7608b97dfbbb6a8b76b96aa7f","sha1":"ad23b57ccb855a3e36e6455dca418f550241e89e","sha256":"43f373817b00db97aea693aefc11b7a7eab2bd2013e5d42f56818fd760e31630","sha512":"4d3e44a900b89349bf54f7499a507acff03f3247953077ab867e181d0771300b316c06ce8b0de1c300d7f8ea2650dbaf8349bc3cc8b0b58072d77ede06bb542d","ssdeep":"","tlshash":"fb11e345b56db8fe10bf32ab1676a4c4053dbdb0c03929e43ca690a8469fde4313278f","first_seen":"2023-03-26T08:34:35Z","last_seen":"2026-04-06T16:44:15.128702Z","times_seen":27,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:14 GMT","end":"Tue, 03 Mar 2026 17:10:13 GMT"},"fingerprint":{"sha1":"EC:AE:DB:3F:30:AD:2E:C9:C6:A5:F6:31:5D:CB:EF:06:6D:B3:2B:E0","sha256":"37:8C:B2:95:4D:4C:79:2C:79:EA:6C:AD:61:E9:E6:30:41:EA:A4:C6:D4:10:5F:FE:3B:CA:18:F3:AA:FE:CF:F0"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Jan 2026 01:54:11 GMT\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"843aefeb9f5463bd6bb43129ad695c03","sha1":"996cfa071cdf45bc4500458d3d4c35e21972e6a8","sha256":"edbe5026216edb86999a49a0af43f0619af529368ac52aba5fbb5352809f1941","sha512":"691d7c4ec8626b0d1bb1e676d69c9fb195ef01658d8e295f1a1645212f8ad39ce74d41b325bd1c6cfa3662260be739150b8acfe3a6c100f908d437aa79b6adbe","ssdeep":"","tlshash":"0e111e81042ba000db934cc532de7e32ee1f6350a404da345ffe2898bc6bc369315b1e","first_seen":"2025-09-17T01:00:44.370771Z","last_seen":"2026-06-10T18:53:20.292872Z","times_seen":3946,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":130,"dns":0,"connect":17,"send":0,"wait":38,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dhaaeh.smartclickmatch.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Jan 2026 18:16:32 GMT\r\nexpires: Sat, 16 Jan 2027 18:16:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 27459\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-06-11T02:36:29.025187Z","times_seen":7206,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":122,"dns":1,"connect":14,"send":0,"wait":16,"receive":2,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/bundle/479/assets/images/favicon.png","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartclickmatch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 22:27:47 GMT","end":"Thu, 29 Jan 2026 22:27:46 GMT"},"fingerprint":{"sha1":"12:A8:8D:37:47:BE:A0:C9:2D:C6:49:52:8C:59:41:7D:0E:2D:7A:F1","sha256":"10:32:CC:95:4B:25:53:B9:0C:44:EF:53:28:BF:75:EB:18:9B:F2:21:A0:D9:81:D3:CE:89:8E:B2:CE:CD:07:E6"}}},"request":{"raw":"GET /bundle/479/assets/images/favicon.png HTTP/1.1\r\nHost: dhaaeh.smartclickmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375\r\nCookie: s=yk9cuCqDP%2FXX84yD7uqEV8L1rDoXN8%2Fyo1zz83KWqgaYzpIMrVVb1YK04xHcL%2FeLwJxuO5hFGoPCXePD7hXQ1CB%2BNveRHqtb4xS4f6joZU2yzng%2BxMZGarGOePvrwba%2BdbxCgCTVB0DlKBIiVZL4bR9d1DSuUz%2Bp5KZLSapnutlb8%2BywnaHVQX9j8II8kAdHBKZ7yn2NAHT%2F6ZKbAQTkcG3xakhH4TRRADz7WR2MaNnZXEJ6Np1jFyBZkDuy07U8YNCBvMYuGxX99yjJFhbmXuCyrd97jILlPT8GKoWqxeoRr87qRUc8NZ%2FX7Q1%2B6qMhQhandtunal1GElXNk8Om35JTL6QaagB3f8EyRI9mNGTpLj%2FSTc4O%2Fk%2Bj3MIpAh7iStqqBoKTPDQuGMXv5pNaiXcsYRwdxSrxA8jWFlH0bMpYusEhyGeW9NYi8ElDGaP%2BwMoyMd%2BznyNa0jwHCVYocu8jy2q2s6azvdNttbTrIGZHls%2B2PzcwcKHlVORipBv4qXvAHq%2FPO6pAfQIlheHPELdzn%2FqJ7hD1v%2BFjDcHfBSeTfU3FwXdK2RLjXNymXdr8YidgvhkaF50ckWzltBvFaNKLUXM35SmPK5Dyls5YD7E2h8LzqJy5QQyMDBurGQIXkSisRzTgzUrlTz00r2fiBD15RPP2CfMVMMfxAhr99%2BTvmLse9z0netH4y%2BPO2wOH3tbKE2HhU85ABFucVgHRszvBYdoQGIZKcfJfl4FvDW1KIdprQA%2BO2yuxir3qB9h5laHZfjD3%2FSJXQSzNwfTT0rJakh9I4jOwqI6O6y5AASOwg7jTi8FsMG7Zf%2BtRo%2FF%2BE5ub7nKdsQdPixZYQA%2FTxMCbRjvv8iFIf2lRQbMFEo35vI1QJLorKhxU3XW5InZ%2F6H7zEN4InHhes%2FTdaZzy5KeCP7s6qSAoenilPlZIJrPFrD6%2BmHQA%2BrTmS7%2FpxnbZgQxYBI7uJDhAhxJOEosGwLKEaUsZMw9MGmmmgLEb6TtLKqff%2FRmeFPMUfbXF7aY9jh3pJysOP95VQMKHdfiy%2FH%2BCPsMcIJ3iSign%2F7R3%2Bu3OVcZvPnwqzH8MBpL9ajQ3MF0EEe4tPynZfIuHEBARJSTuI1htmkg0Qe%2BbfiItg%2B1TcUtvXv1xUySYDnbc6%2FOmIAK4xTT2z0mwMTpO5lM1GOGoeS4rl96AZz1%2FW%2Bi7ICXqa7ajzxhPBULShs4tktMs8SycxzED4hr80WYk47nB50CzmS%2B5yx%2FDeMQZbEUdq5oofDOO91fB4ZNO0fKqQELh9e0e0gRfowXr0cPUIpGKqpb4QsVHAvgZzfvQtztF4GxgR3RE%2BDXd%2BkYerapuO2eioYDKZbFJaMUZNFHIjJRd8rGoZaIL65ZURtsS3IGQLEPkgiyiiYvjjpuBQ0rC%2B%2FlCgkBKONFHE18ZPWiTGV3ZnZoSoV26uOyfp1096WBF79cW72tse%2FEgi1praNVZUH3vYLYSWqAkQs7nkGCKp2nElQWhoiPi0WDtg%2F29i4W9PF9jY6vnRZE2BqL3d3Ti5r%2BkIOUICjMgcywoynUc69lYB258GgotBC5tF9muKLWAC5CujvWgNlChOfwVPcvd3%2BjTwKF1aTPOcYHyjqjQfTVd%2F%2BhyVHlDVOTs6J262BeGGr%2FkXk3dsKb9v0MBuQLptDuLPWHdAAEOM%2FqpnU3k3JY9t3Ee3elTsESe0jhIhQxgg8yEsv1pexwc1Loc0gZ2O8kwNjmp6VuSD6hkou9sQHoaOfHMdHBOCeBhalt7YvxHoSklbZk5%2FrI8DP2Uo5hD6iQv7t7DCtoBtOVeA9OvxkvLLbnBmPTOStQGczMDE5CIWHgMh%2FTbjVnLULUOlN6xhJtwXgi0vNm5boJTgG7JKjgUwW3Xlu2ibl8XhetIFLRYD1WiZ4Sjcp60n7IuvvnkgmsZevth%2FCM%2Bd1AkXZCsj9ahMwskc6%2F6wxThmoQBv46GtCrTsEqXNr6tgIiicobFs3uD3Kk4X%2B%2BYuuT8DJLUkwUWXr6uyAknwE735KK08IR3hu%2F8xJtMGlfBy5XVwYAJGH74xSibbRohl0JbJhyP6j4NqS6FGJF6Ty80hOz6vnscitA5UAcYXdi4R789YkfIUiIFIol9bYun9h6brMmUDAjd6g0xkVRIw%2Fze%2FkbQj%2FfoUolNnrvLvxghDDgzPQoUi%2FG5WUtPtx1V7kEpgzTCJ%2B%2FfidNIEfvZj%2BoVVVqpHQ5EH5EjkS4dBpQOGjfNx0xdTNBxZ4%2FVOt5xtimBicofvUkLDRwfbOcjHopURVeh4YwAKSgzNEe%2FfKgqZg1F1LkpoH7WVyVAwpLie4YK7ktg7nBlNun%2Bq2SFSziZnclSpvyje4yOrt%2FdaREbvbPbFyC0yrdGXM39aVlv%2BIgjAPwMLRUD%2BS2jKGL4%2F0f9tgeICX%2FOS9Df%2BIOzudAFQUtymqK%2B5Jo2mN97Y237NW9Bcom6Ne%2FofRaKHS35YiFY%2BtymCHrwjCNGg6gGu9nfeHjtbEsQ8sYugnKg8Z5%2Ft88JrkF6LTy9PQDD%2F0w3hp93EQux03eQxh5O4GyvIc2n4Jk2VPx78IhrjEBhSDSivqSOCrLFXKdofKLWiLh8hoMMbl35%2Fd2PP29XVgSwXEenpCg0wVxPKR8iecalaXn6g00knL%2FP8Abke4z7XzKMZcbjER%2BoJXe2525hLpLp15BGERz43JTgFTLWQde9R0WsFxiCa60L4Ea76ics2RITWYAlu3a4WNP7FNEwWaTaqoKKm3nAws39V4GDJrRRCkONFWjAKr%2BF604y1i0Vw7Rc82ATfcDQGvY%2FtLCDsKeo5ORaqF9j%2BU3jnHC7dSbHsmqowrMnor1k51AWvPkVPxc%2F1KzubYsOgGc9bV6lFIaHHRmwEIvqZ0maOL2MeGU6ZAubsbMAGKFCFgSjH8YbPDOtZDY8KoQIPjI0VAXKiwpM5Lvzl6xmaZ%2F6ruTJr9Dx74A1QCbb3aw1VasIpa56lMaNO8pOJXCr3haAnFPP5jRhzbCIdZNvpeuCIA2gPCgfu9jaxLbhsPTjRirl8fIoshOi2yZ908HdOR6Tj3%2F5UYJ5TV%2FaC%2FTXDOEC5Frzoy46B382oetxUrybUxVB9mOyAdki7O4ofLn03dBgQY%2BhtWhq3Dn9mnk%3D; sr=jIkOf7o95kulw3ANSibMS3tAU%2BSZaumdIQ9JHY6DKQC7jtWz5SrxwmQgj0XEOAcavXFhWVJJneCVLHAwoTwmrSB%2BUBn4Q%2FYxn9bfzilmkSIrCz%2BAFZe8sEYq%2F3IP13Xr35LUWmZGIJuOJC%2BYurEKvZSjzsAKid6xIWvshx04V%2BCrbVwPCyvnLqaPX7jfbyd3nczdi5BFfd6sn%2Bv2LTwtXiarXMGZMFKBW46FaTcxjO4QykiCV1KNeYrDjxFZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: image/png\r\ncache-control: max-age=86400, public\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"68f93060548121ac6a313c59c9305434","sha1":"ceba12d68bb821af360267aed3b0fa28676f1783","sha256":"d939f4e0922bf8c52dea5946e5b72af59230babbf06aa740646218be04b0ae6d","sha512":"ad3fc38c3de48ce78f8126cf88b701ce8cee4042e7ae1a5d1835d4ab1fb3958682c11cf88c8307c30415ee07af19a3649fa6d27f382c646e90e5c64abd4f2c54","ssdeep":"","tlshash":"e731e9c73152dcc6a85128a052334bd6de27debf0c53fa25d602e672283f77d09a99c5","first_seen":"2023-05-09T07:25:15Z","last_seen":"2026-06-07T07:38:41.761008Z","times_seen":794,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alexisbreeze.com/","fqdn":"alexisbreeze.com","domain":"alexisbreeze.com","tld":"com"},"ip":{"addr":"82.192.80.79","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-17T01:54:09.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alexisbreeze.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 04:27:10 GMT","end":"Tue, 14 Apr 2026 04:27:09 GMT"},"fingerprint":{"sha1":"B8:CB:21:DE:B5:AB:B9:18:EC:05:EF:8D:E5:4E:03:8D:CD:79:87:4C","sha256":"91:A7:9C:8F:2B:98:5E:CE:65:0F:C5:8F:08:8C:11:EA:EC:13:B4:28:B4:DE:9A:79:17:36:0D:92:B3:3A:32:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: alexisbreeze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Sat, 17 Jan 2026 01:54:09 GMT\r\nlocation: http://q1.quotes.com/69f57a80-f347-11f0-bfb4-0ffea0c2e8aa\r\nserver: Cowboy\r\nset-cookie: sid=69f27179-f347-11f0-bba9-fc275fef8131; path=/; domain=.alexisbreeze.com; expires=Thu, 04 Feb 2094 05:08:17 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":65538,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":92,"dns":33,"connect":22,"send":0,"wait":750,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"q1.quotes.com/69f57a80-f347-11f0-bfb4-0ffea0c2e8aa","fqdn":"q1.quotes.com","domain":"quotes.com","tld":"com"},"ip":{"addr":"5.79.68.236","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-17T01:54:10.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /69f57a80-f347-11f0-bfb4-0ffea0c2e8aa HTTP/1.1\r\nHost: q1.quotes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\nconnection: close\r\ncontent-length: 11\r\ndate: Sat, 17 Jan 2026 01:54:09 GMT\r\nlocation: https://trk.cloudsecure-dt.com/?a=32606\u0026o=169831\u0026c=0\u0026co=29225\u0026mt=24\u0026s1=7727729\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65538,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":66,"dns":43,"connect":23,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-17T01:54:10.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartclickmatch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 22:27:47 GMT","end":"Thu, 29 Jan 2026 22:27:46 GMT"},"fingerprint":{"sha1":"12:A8:8D:37:47:BE:A0:C9:2D:C6:49:52:8C:59:41:7D:0E:2D:7A:F1","sha256":"10:32:CC:95:4B:25:53:B9:0C:44:EF:53:28:BF:75:EB:18:9B:F2:21:A0:D9:81:D3:CE:89:8E:B2:CE:CD:07:E6"}}},"request":{"raw":"GET /s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375 HTTP/1.1\r\nHost: dhaaeh.smartclickmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: s=yk9cuCqDP%2FXX84yD7uqEV8L1rDoXN8%2Fyo1zz83KWqgaYzpIMrVVb1YK04xHcL%2FeLwJxuO5hFGoPCXePD7hXQ1CB%2BNveRHqtb4xS4f6joZU2yzng%2BxMZGarGOePvrwba%2BdbxCgCTVB0DlKBIiVZL4bR9d1DSuUz%2Bp5KZLSapnutlb8%2BywnaHVQX9j8II8kAdHBKZ7yn2NAHT%2F6ZKbAQTkcG3xakhH4TRRADz7WR2MaNnZXEJ6Np1jFyBZkDuy07U8YNCBvMYuGxX99yjJFhbmXuCyrd97jILlPT8GKoWqxeoRr87qRUc8NZ%2FX7Q1%2B6qMhQhandtunal1GElXNk8Om35JTL6QaagB3f8EyRI9mNGTpLj%2FSTc4O%2Fk%2Bj3MIpAh7iStqqBoKTPDQuGMXv5pNaiXcsYRwdxSrxA8jWFlH0bMpYusEhyGeW9NYi8ElDGaP%2BwMoyMd%2BznyNa0jwHCVYocu8jy2q2s6azvdNttbTrIGZHls%2B2PzcwcKHlVORipBv4qXvAHq%2FPO6pAfQIlheHPELdzn%2FqJ7hD1v%2BFjDcHfBSeTfU3FwXdK2RLjXNymXdr8YidgvhkaF50ckWzltBvFaNKLUXM35SmPK5Dyls5YD7E2h8LzqJy5QQyMDBurGQIXkSisRzTgzUrlTz00r2fiBD15RPP2CfMVMMfxAhr99%2BTvmLse9z0netH4y%2BPO2wOH3tbKE2HhU85ABFucVgHRszvBYdoQGIZKcfJfl4FvDW1KIdprQA%2BO2yuxir3qB9h5laHZfjD3%2FSJXQSzNwfTT0rJakh9I4jOwqI6O6y5AASOwg7jTi8FsMG7Zf%2BtRo%2FF%2BE5ub7nKdsQdPixZYQA%2FTxMCbRjvv8iFIf2lRQbMFEo35vI1QJLorKhxU3XW5InZ%2F6H7zEN4InHhes%2FTdaZzy5KeCP7s6qSAoenilPlZIJrPFrD6%2BmHQA%2BrTmS7%2FpxnbZgQxYBI7uJDhAhxJOEosGwLKEaUsZMw9MGmmmgLEb6TtLKqff%2FRmeFPMUfbXF7aY9jh3pJysOP95VQMKHdfiy%2FH%2BCPsMcIJ3iSign%2F7R3%2Bu3OVcZvPnwqzH8MBpL9ajQ3MF0EEe4tPynZfIuHEBARJSTuI1htmkg0Qe%2BbfiItg%2B1TcUtvXv1xUySYDnbc6%2FOmIAK4xTT2z0mwMTpO5lM1GOGoeS4rl96AZz1%2FW%2Bi7ICXqa7ajzxhPBULShs4tktMs8SycxzED4hr80WYk47nB50CzmS%2B5yx%2FDeMQZbEUdq5oofDOO91fB4ZNO0fKqQELh9e0e0gRfowXr0cPUIpGKqpb4QsVHAvgZzfvQtztF4GxgR3RE%2BDXd%2BkYerapuO2eioYDKZbFJaMUZNFHIjJRd8rGoZaIL65ZURtsS3IGQLEPkgiyiiYvjjpuBQ0rC%2B%2FlCgkBKONFHE18ZPWiTGV3ZnZoSoV26uOyfp1096WBF79cW72tse%2FEgi1praNVZUH3vYLYSWqAkQs7nkGCKp2nElQWhoiPi0WDtg%2F29i4W9PF9jY6vnRZE2BqL3d3Ti5r%2BkIOUICjMgcywoynUc69lYB258GgotBC5tF9muKLWAC5CujvWgNlChOfwVPcvd3%2BjTwKF1aTPOcYHyjqjQfTVd%2F%2BhyVHlDVOTs6J262BeGGr%2FkXk3dsKb9v0MBuQLptDuLPWHdAAEOM%2FqpnU3k3JY9t3Ee3elTsESe0jhIhQxgg8yEsv1pexwc1Loc0gZ2O8kwNjmp6VuSD6hkou9sQHoaOfHMdHBOCeBhalt7YvxHoSklbZk5%2FrI8DP2Uo5hD6iQv7t7DCtoBtOVeA9OvxkvLLbnBmPTOStQGczMDE5CIWHgMh%2FTbjVnLULUOlN6xhJtwXgi0vNm5boJTgG7JKjgUwW3Xlu2ibl8XhetIFLRYD1WiZ4Sjcp60n7IuvvnkgmsZevth%2FCM%2Bd1AkXZCsj9ahMwskc6%2F6wxThmoQBv46GtCrTsEqXNr6tgIiicobFs3uD3Kk4X%2B%2BYuuT8DJLUkwUWXr6uyAknwE735KK08IR3hu%2F8xJtMGlfBy5XVwYAJGH74xSibbRohl0JbJhyP6j4NqS6FGJF6Ty80hOz6vnscitA5UAcYXdi4R789YkfIUiIFIol9bYun9h6brMmUDAjd6g0xkVRIw%2Fze%2FkbQj%2FfoUolNnrvLvxghDDgzPQoUi%2FG5WUtPtx1V7kEpgzTCJ%2B%2FfidNIEfvZj%2BoVVVqpHQ5EH5EjkS4dBpQOGjfNx0xdTNBxZ4%2FVOt5xtimBicofvUkLDRwfbOcjHopURVeh4YwAKSgzNEe%2FfKgqZg1F1LkpoH7WVyVAwpLie4YK7ktg7nBlNun%2Bq2SFSziZnclSpvyje4yOrt%2FdaREbvbPbFyC0yrdGXM39aVlv%2BIgjAPwMLRUD%2BS2jKGL4%2F0f9tgeICX%2FOS9Df%2BIOzudAFQUtymqK%2B5Jo2mN97Y237NW9Bcom6Ne%2FofRaKHS35YiFY%2BtymCHrwjCNGg6gGu9nfeHjtbEsQ8sYugnKg8Z5%2Ft88JrkF6LTy9PQDD%2F0w3hp93EQux03eQxh5O4GyvIc2n4Jk2VPx78IhrjEBhSDSivqSOCrLFXKdofKLWiLh8hoMMbl35%2Fd2PP29XVgSwXEenpCg0wVxPKR8iecalaXn6g00knL%2FP8Abke4z7XzKMZcbjER%2BoJXe2525hLpLp15BGERz43JTgFTLWQde9R0WsFxiCa60L4Ea76ics2RITWYAlu3a4WNP7FNEwWaTaqoKKm3nAws39V4GDJrRRCkONFWjAKr%2BF604y1i0Vw7Rc82ATfcDQGvY%2FtLCDsKeo5ORaqF9j%2BU3jnHC7dSbHsmqowrMnor1k51AWvPkVPxc%2F1KzubYsOgGc9bV6lFIaHHRmwEIvqZ0maOL2MeGU6ZAubsbMAGKFCFgSjH8YbPDOtZDY8KoQIPjI0VAXKiwpM5Lvzl6xmaZ%2F6ruTJr9Dx74A1QCbb3aw1VasIpa56lMaNO8pOJXCr3haAnFPP5jRhzbCIdZNvpeuCIA2gPCgfu9jaxLbhsPTjRirl8fIoshOi2yZ908HdOR6Tj3%2F5UYJ5TV%2FaC%2FTXDOEC5Frzoy46B382oetxUrybUxVB9mOyAdki7O4ofLn03dBgQY%2BhtWhq3Dn9mnk%3D; expires=Sun, 18 Jan 2026 01:54:11 GMT; Max-Age=86400; path=/; domain=smartclickmatch.com; secure; SameSite=none\nsr=jIkOf7o95kulw3ANSibMS3tAU%2BSZaumdIQ9JHY6DKQC7jtWz5SrxwmQgj0XEOAcavXFhWVJJneCVLHAwoTwmrSB%2BUBn4Q%2FYxn9bfzilmkSIrCz%2BAFZe8sEYq%2F3IP13Xr35LUWmZGIJuOJC%2BYurEKvZSjzsAKid6xIWvshx04V%2BCrbVwPCyvnLqaPX7jfbyd3nczdi5BFfd6sn%2Bv2LTwtXiarXMGZMFKBW46FaTcxjO4QykiCV1KNeYrDjxFZ; expires=Sun, 18 Jan 2026 01:54:11 GMT; Max-Age=86400; path=/; domain=smartclickmatch.com; secure; SameSite=none\r\ncache-control: must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":65538,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30543), with CRLF, LF line terminators","md5":"1fab462b2de41fd7f3db6c0f01833d22","sha1":"b863025f5d9754ddf2a794f5a88a6c2a35e2a27f","sha256":"490faa89b9d18b9ead48d51fb2b2d4ac509e5c993b568548ef33cb004adc2de0","sha512":"449ce936dfc85db997bc4331cf4bc26e7672b2dfb1bb07efd5639a14b726a784d2afbff6eb95fdc45f9cee6d28d751917dab7de69a39ab9f89c7e337f57090d7","ssdeep":"768:QUtAL2iV2LAtER/bSqAPbBRvB3ACfaYOTQpz0eEdAfHupQSbpjHfx9vKgqP:KVRvB3ACfaYT0eESH1P","tlshash":"ca53095c38d73036027365a916afe208f6b98547610ec800b9ad53d46ff4f6952bbfe8","first_seen":"2026-01-17T01:54:36.456939Z","last_seen":"2026-01-17T01:54:36.456939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":234,"dns":179,"connect":20,"send":0,"wait":161,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/bundle/479/assets/css/style.css","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartclickmatch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 22:27:47 GMT","end":"Thu, 29 Jan 2026 22:27:46 GMT"},"fingerprint":{"sha1":"12:A8:8D:37:47:BE:A0:C9:2D:C6:49:52:8C:59:41:7D:0E:2D:7A:F1","sha256":"10:32:CC:95:4B:25:53:B9:0C:44:EF:53:28:BF:75:EB:18:9B:F2:21:A0:D9:81:D3:CE:89:8E:B2:CE:CD:07:E6"}}},"request":{"raw":"GET /bundle/479/assets/css/style.css HTTP/1.1\r\nHost: dhaaeh.smartclickmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375\r\nCookie: s=yk9cuCqDP%2FXX84yD7uqEV8L1rDoXN8%2Fyo1zz83KWqgaYzpIMrVVb1YK04xHcL%2FeLwJxuO5hFGoPCXePD7hXQ1CB%2BNveRHqtb4xS4f6joZU2yzng%2BxMZGarGOePvrwba%2BdbxCgCTVB0DlKBIiVZL4bR9d1DSuUz%2Bp5KZLSapnutlb8%2BywnaHVQX9j8II8kAdHBKZ7yn2NAHT%2F6ZKbAQTkcG3xakhH4TRRADz7WR2MaNnZXEJ6Np1jFyBZkDuy07U8YNCBvMYuGxX99yjJFhbmXuCyrd97jILlPT8GKoWqxeoRr87qRUc8NZ%2FX7Q1%2B6qMhQhandtunal1GElXNk8Om35JTL6QaagB3f8EyRI9mNGTpLj%2FSTc4O%2Fk%2Bj3MIpAh7iStqqBoKTPDQuGMXv5pNaiXcsYRwdxSrxA8jWFlH0bMpYusEhyGeW9NYi8ElDGaP%2BwMoyMd%2BznyNa0jwHCVYocu8jy2q2s6azvdNttbTrIGZHls%2B2PzcwcKHlVORipBv4qXvAHq%2FPO6pAfQIlheHPELdzn%2FqJ7hD1v%2BFjDcHfBSeTfU3FwXdK2RLjXNymXdr8YidgvhkaF50ckWzltBvFaNKLUXM35SmPK5Dyls5YD7E2h8LzqJy5QQyMDBurGQIXkSisRzTgzUrlTz00r2fiBD15RPP2CfMVMMfxAhr99%2BTvmLse9z0netH4y%2BPO2wOH3tbKE2HhU85ABFucVgHRszvBYdoQGIZKcfJfl4FvDW1KIdprQA%2BO2yuxir3qB9h5laHZfjD3%2FSJXQSzNwfTT0rJakh9I4jOwqI6O6y5AASOwg7jTi8FsMG7Zf%2BtRo%2FF%2BE5ub7nKdsQdPixZYQA%2FTxMCbRjvv8iFIf2lRQbMFEo35vI1QJLorKhxU3XW5InZ%2F6H7zEN4InHhes%2FTdaZzy5KeCP7s6qSAoenilPlZIJrPFrD6%2BmHQA%2BrTmS7%2FpxnbZgQxYBI7uJDhAhxJOEosGwLKEaUsZMw9MGmmmgLEb6TtLKqff%2FRmeFPMUfbXF7aY9jh3pJysOP95VQMKHdfiy%2FH%2BCPsMcIJ3iSign%2F7R3%2Bu3OVcZvPnwqzH8MBpL9ajQ3MF0EEe4tPynZfIuHEBARJSTuI1htmkg0Qe%2BbfiItg%2B1TcUtvXv1xUySYDnbc6%2FOmIAK4xTT2z0mwMTpO5lM1GOGoeS4rl96AZz1%2FW%2Bi7ICXqa7ajzxhPBULShs4tktMs8SycxzED4hr80WYk47nB50CzmS%2B5yx%2FDeMQZbEUdq5oofDOO91fB4ZNO0fKqQELh9e0e0gRfowXr0cPUIpGKqpb4QsVHAvgZzfvQtztF4GxgR3RE%2BDXd%2BkYerapuO2eioYDKZbFJaMUZNFHIjJRd8rGoZaIL65ZURtsS3IGQLEPkgiyiiYvjjpuBQ0rC%2B%2FlCgkBKONFHE18ZPWiTGV3ZnZoSoV26uOyfp1096WBF79cW72tse%2FEgi1praNVZUH3vYLYSWqAkQs7nkGCKp2nElQWhoiPi0WDtg%2F29i4W9PF9jY6vnRZE2BqL3d3Ti5r%2BkIOUICjMgcywoynUc69lYB258GgotBC5tF9muKLWAC5CujvWgNlChOfwVPcvd3%2BjTwKF1aTPOcYHyjqjQfTVd%2F%2BhyVHlDVOTs6J262BeGGr%2FkXk3dsKb9v0MBuQLptDuLPWHdAAEOM%2FqpnU3k3JY9t3Ee3elTsESe0jhIhQxgg8yEsv1pexwc1Loc0gZ2O8kwNjmp6VuSD6hkou9sQHoaOfHMdHBOCeBhalt7YvxHoSklbZk5%2FrI8DP2Uo5hD6iQv7t7DCtoBtOVeA9OvxkvLLbnBmPTOStQGczMDE5CIWHgMh%2FTbjVnLULUOlN6xhJtwXgi0vNm5boJTgG7JKjgUwW3Xlu2ibl8XhetIFLRYD1WiZ4Sjcp60n7IuvvnkgmsZevth%2FCM%2Bd1AkXZCsj9ahMwskc6%2F6wxThmoQBv46GtCrTsEqXNr6tgIiicobFs3uD3Kk4X%2B%2BYuuT8DJLUkwUWXr6uyAknwE735KK08IR3hu%2F8xJtMGlfBy5XVwYAJGH74xSibbRohl0JbJhyP6j4NqS6FGJF6Ty80hOz6vnscitA5UAcYXdi4R789YkfIUiIFIol9bYun9h6brMmUDAjd6g0xkVRIw%2Fze%2FkbQj%2FfoUolNnrvLvxghDDgzPQoUi%2FG5WUtPtx1V7kEpgzTCJ%2B%2FfidNIEfvZj%2BoVVVqpHQ5EH5EjkS4dBpQOGjfNx0xdTNBxZ4%2FVOt5xtimBicofvUkLDRwfbOcjHopURVeh4YwAKSgzNEe%2FfKgqZg1F1LkpoH7WVyVAwpLie4YK7ktg7nBlNun%2Bq2SFSziZnclSpvyje4yOrt%2FdaREbvbPbFyC0yrdGXM39aVlv%2BIgjAPwMLRUD%2BS2jKGL4%2F0f9tgeICX%2FOS9Df%2BIOzudAFQUtymqK%2B5Jo2mN97Y237NW9Bcom6Ne%2FofRaKHS35YiFY%2BtymCHrwjCNGg6gGu9nfeHjtbEsQ8sYugnKg8Z5%2Ft88JrkF6LTy9PQDD%2F0w3hp93EQux03eQxh5O4GyvIc2n4Jk2VPx78IhrjEBhSDSivqSOCrLFXKdofKLWiLh8hoMMbl35%2Fd2PP29XVgSwXEenpCg0wVxPKR8iecalaXn6g00knL%2FP8Abke4z7XzKMZcbjER%2BoJXe2525hLpLp15BGERz43JTgFTLWQde9R0WsFxiCa60L4Ea76ics2RITWYAlu3a4WNP7FNEwWaTaqoKKm3nAws39V4GDJrRRCkONFWjAKr%2BF604y1i0Vw7Rc82ATfcDQGvY%2FtLCDsKeo5ORaqF9j%2BU3jnHC7dSbHsmqowrMnor1k51AWvPkVPxc%2F1KzubYsOgGc9bV6lFIaHHRmwEIvqZ0maOL2MeGU6ZAubsbMAGKFCFgSjH8YbPDOtZDY8KoQIPjI0VAXKiwpM5Lvzl6xmaZ%2F6ruTJr9Dx74A1QCbb3aw1VasIpa56lMaNO8pOJXCr3haAnFPP5jRhzbCIdZNvpeuCIA2gPCgfu9jaxLbhsPTjRirl8fIoshOi2yZ908HdOR6Tj3%2F5UYJ5TV%2FaC%2FTXDOEC5Frzoy46B382oetxUrybUxVB9mOyAdki7O4ofLn03dBgQY%2BhtWhq3Dn9mnk%3D; sr=jIkOf7o95kulw3ANSibMS3tAU%2BSZaumdIQ9JHY6DKQC7jtWz5SrxwmQgj0XEOAcavXFhWVJJneCVLHAwoTwmrSB%2BUBn4Q%2FYxn9bfzilmkSIrCz%2BAFZe8sEYq%2F3IP13Xr35LUWmZGIJuOJC%2BYurEKvZSjzsAKid6xIWvshx04V%2BCrbVwPCyvnLqaPX7jfbyd3nczdi5BFfd6sn%2Bv2LTwtXiarXMGZMFKBW46FaTcxjO4QykiCV1KNeYrDjxFZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=86400, public\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9849,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (314), with CRLF line terminators","md5":"e698fd78a68bd1ef3693f28ac4e7f9f6","sha1":"6839d1d5ebb5135d42cea14a394adc1666975203","sha256":"153885c1832b6c8ee58e3da8f96bfa12161a01402dc1faaf6b45e7992833f000","sha512":"50bcbfdf8a52e0ff428baf2716e5de04e77d7910dfd61467fe4d61ea5e348403d7d7cc2abf0ff53c547da1c4e295925d9b5f3758d7b450b8da2053348e28599c","ssdeep":"192:EYzXvqI20MwD939fm+3dA3d5degvQlM0+TNAUcNqqJiRVpKh5InVa80V9ScE9:EYP20MwpvdSd5dHvl0+TNAoqJiTI5Ind","tlshash":"261253141613200ea313db98a3f14b69ddacc431ae0f01af76df256ac3d61a892637ce","first_seen":"2023-05-21T06:52:51Z","last_seen":"2026-04-06T16:44:15.137192Z","times_seen":27,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/lazyload@2.0.0-rc.2/lazyload.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1643\r\ncf-ray: 9bf23924aeaa5685-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.0.0-rc.2\r\nx-jsd-version-type: version\r\netag: W/\"162a-+bHVRc9Mhd3adT/5YJ7eVp2Ssx8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1983861\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B8GG%2FobjaWNJIvxR2LRrKm0nUIJiallicyuOwFk5YOdS1%2Fq%2FLz3o1LMFQ0WdpfCqhg3PVmTGFdJAJ7KOcS1ng0rbvAeiRATA2uAzqZ%2BsGbH4VTfNMEgeSHIHKMUamtDkAaY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"60669862b7c39ecb3283b1faa9563a07","sha1":"f9b1d545cf4c85ddda753ff9609ede569d92b31f","sha256":"874cad10027313f3620a770d4a338369833ed5b3913f0793cb8500361b19e6ea","sha512":"1512c8379b8fa49935ed1bfc6a3d2f3a97f892c947c51ad07b1c227078e8a253e05aed187658c14bb242914f1042d523dfe7292d2f087077513337d7391c9a50","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZE:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2iT","tlshash":"3ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-06-10T20:48:02.866768Z","times_seen":2518,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/just-validate@4.1.0/dist/just-validate.production.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /just-validate@4.1.0/dist/just-validate.production.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9bf23924abd65695-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 21079\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 17 Jan 2027 01:54:11 GMT\r\nlast-modified: Wed, 05 Nov 2025 00:29:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wIsRsjLOoDtGfUDVsJkNferuBK4d568tTrlMNUS0waU=:\r\nfly-request-id: 01K98PPMYQBBX9V1ZQQMN06X76-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":28389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28388)","md5":"713352ee6a16034c696a6e2785b92280","sha1":"6289cf9b1f0e775ad3feb36b0fcfe5af301a0e5b","sha256":"c08b11b232cea03b467d40d5b0990d7deaee04ae1de7af2d4eb94c3544b4c1a5","sha512":"8c42085cda5010ff9eb71174f3f5af3f94f276ab1b134241ed70cd37b3c8d7b8efc7a0899e964be8cef88474da2bee314158b86e45a64ecc0294f8dd628de2fa","ssdeep":"768:VkW++Jv/0btODUsl7dMrXfSCiwgRgpZ1UuVvw1CByfDwty0HD/h7PCByCrCagSZi:mCsRXaCiwgRgysnY3gSK6U","tlshash":"0ad2d606267109234dd94ae9e08b9543b3d1375da518a4ccf73dacfb9a8dec630937b2","first_seen":"2025-09-05T11:13:19.031002Z","last_seen":"2026-06-11T01:22:45.50243Z","times_seen":8698,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":14,"dns":0,"connect":3,"send":0,"wait":16,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dhaaeh.smartclickmatch.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18780\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Jan 2026 23:00:47 GMT\r\nexpires: Fri, 15 Jan 2027 23:00:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96804\r\nlast-modified: Thu, 04 Sep 2025 17:09:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18780, version 1.0","md5":"e7198b2dcb57c0193b0e9765353994ba","sha1":"6e2658ad73dda183d4fa2979809a73a0c29d21c9","sha256":"e66bcd2761ab6924b25ce70dafe10e57a39193c4fea1516730bd9cb5240af6c8","sha512":"01054290f69d0e4232687f67e5d2522f186f87fe833bd1b13016d0e79a1159c49e767a5c6e9c61f9b3fea0c27df2194011bf46d6f6c1ee46d1f4313ac1950f9c","ssdeep":"384:pJOL4DxNfzRV4g4Miv8HlK3z114ow92D4bH7CxPhdWS6UJ836u8K+ylyr:p5P8Mq8Hlqo92D4vOPhdWSL+qu8Kqr","tlshash":"ef82d0ec209846f9fc0a6e97dfc49bd522430cbd87166e3093ab0dc84b875a4d667693","first_seen":"2025-09-05T00:54:05.741935Z","last_seen":"2026-06-11T02:06:25.992787Z","times_seen":37621,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":71,"dns":1,"connect":14,"send":0,"wait":15,"receive":4,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dhaaeh.smartclickmatch.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\nage: 156155\r\nx-served-by: cache-lga13622-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 126\r\nx-timer: S1768614851.373547,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-11T01:53:53.87538Z","times_seen":134444,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":66,"dns":1,"connect":26,"send":0,"wait":26,"receive":8,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:14 GMT","end":"Tue, 03 Mar 2026 17:10:13 GMT"},"fingerprint":{"sha1":"EC:AE:DB:3F:30:AD:2E:C9:C6:A5:F6:31:5D:CB:EF:06:6D:B3:2B:E0","sha256":"37:8C:B2:95:4D:4C:79:2C:79:EA:6C:AD:61:E9:E6:30:41:EA:A4:C6:D4:10:5F:FE:3B:CA:18:F3:AA:FE:CF:F0"}}},"request":{"raw":"GET /css?family=Montserrat\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Jan 2026 01:54:11 GMT\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bd8eb785552dd14048bc05a0caeb4e53","sha1":"2e4baf02179f4413cba26cab547282e82d40ea0c","sha256":"3e4fc43d2973ddc920952f6c69750e388386b105591ae0867b600561ab37a2af","sha512":"8108e1541230f771d159544bc4cb927706064f6e6423b17aecee27ccdd236eed61d950672ccc92fba4b8cc5eee479692b98aa3970e1f52168e8b96cd952ab0ba","ssdeep":"","tlshash":"26319b411216e900a7431cca23ce7d26ce8e626275a0c47abffd5ca8ade5c261735b6d","first_seen":"2025-09-05T00:54:05.746777Z","last_seen":"2026-06-11T02:06:25.96856Z","times_seen":18601,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":88,"dns":0,"connect":15,"send":0,"wait":31,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhaaeh.smartclickmatch.com/bundle/479/assets/images/d1.jpg","fqdn":"dhaaeh.smartclickmatch.com","domain":"smartclickmatch.com","tld":"com"},"ip":{"addr":"81.30.157.12","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375","date":"2026-01-17T01:54:11.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smartclickmatch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 22:27:47 GMT","end":"Thu, 29 Jan 2026 22:27:46 GMT"},"fingerprint":{"sha1":"12:A8:8D:37:47:BE:A0:C9:2D:C6:49:52:8C:59:41:7D:0E:2D:7A:F1","sha256":"10:32:CC:95:4B:25:53:B9:0C:44:EF:53:28:BF:75:EB:18:9B:F2:21:A0:D9:81:D3:CE:89:8E:B2:CE:CD:07:E6"}}},"request":{"raw":"GET /bundle/479/assets/images/d1.jpg HTTP/1.1\r\nHost: dhaaeh.smartclickmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhaaeh.smartclickmatch.com/s/5eea19b7eab2b?subsource=rot_32606\u0026ext_click_id=68814c0fcdcc40dc814812421765b7cf15375\r\nCookie: s=yk9cuCqDP%2FXX84yD7uqEV8L1rDoXN8%2Fyo1zz83KWqgaYzpIMrVVb1YK04xHcL%2FeLwJxuO5hFGoPCXePD7hXQ1CB%2BNveRHqtb4xS4f6joZU2yzng%2BxMZGarGOePvrwba%2BdbxCgCTVB0DlKBIiVZL4bR9d1DSuUz%2Bp5KZLSapnutlb8%2BywnaHVQX9j8II8kAdHBKZ7yn2NAHT%2F6ZKbAQTkcG3xakhH4TRRADz7WR2MaNnZXEJ6Np1jFyBZkDuy07U8YNCBvMYuGxX99yjJFhbmXuCyrd97jILlPT8GKoWqxeoRr87qRUc8NZ%2FX7Q1%2B6qMhQhandtunal1GElXNk8Om35JTL6QaagB3f8EyRI9mNGTpLj%2FSTc4O%2Fk%2Bj3MIpAh7iStqqBoKTPDQuGMXv5pNaiXcsYRwdxSrxA8jWFlH0bMpYusEhyGeW9NYi8ElDGaP%2BwMoyMd%2BznyNa0jwHCVYocu8jy2q2s6azvdNttbTrIGZHls%2B2PzcwcKHlVORipBv4qXvAHq%2FPO6pAfQIlheHPELdzn%2FqJ7hD1v%2BFjDcHfBSeTfU3FwXdK2RLjXNymXdr8YidgvhkaF50ckWzltBvFaNKLUXM35SmPK5Dyls5YD7E2h8LzqJy5QQyMDBurGQIXkSisRzTgzUrlTz00r2fiBD15RPP2CfMVMMfxAhr99%2BTvmLse9z0netH4y%2BPO2wOH3tbKE2HhU85ABFucVgHRszvBYdoQGIZKcfJfl4FvDW1KIdprQA%2BO2yuxir3qB9h5laHZfjD3%2FSJXQSzNwfTT0rJakh9I4jOwqI6O6y5AASOwg7jTi8FsMG7Zf%2BtRo%2FF%2BE5ub7nKdsQdPixZYQA%2FTxMCbRjvv8iFIf2lRQbMFEo35vI1QJLorKhxU3XW5InZ%2F6H7zEN4InHhes%2FTdaZzy5KeCP7s6qSAoenilPlZIJrPFrD6%2BmHQA%2BrTmS7%2FpxnbZgQxYBI7uJDhAhxJOEosGwLKEaUsZMw9MGmmmgLEb6TtLKqff%2FRmeFPMUfbXF7aY9jh3pJysOP95VQMKHdfiy%2FH%2BCPsMcIJ3iSign%2F7R3%2Bu3OVcZvPnwqzH8MBpL9ajQ3MF0EEe4tPynZfIuHEBARJSTuI1htmkg0Qe%2BbfiItg%2B1TcUtvXv1xUySYDnbc6%2FOmIAK4xTT2z0mwMTpO5lM1GOGoeS4rl96AZz1%2FW%2Bi7ICXqa7ajzxhPBULShs4tktMs8SycxzED4hr80WYk47nB50CzmS%2B5yx%2FDeMQZbEUdq5oofDOO91fB4ZNO0fKqQELh9e0e0gRfowXr0cPUIpGKqpb4QsVHAvgZzfvQtztF4GxgR3RE%2BDXd%2BkYerapuO2eioYDKZbFJaMUZNFHIjJRd8rGoZaIL65ZURtsS3IGQLEPkgiyiiYvjjpuBQ0rC%2B%2FlCgkBKONFHE18ZPWiTGV3ZnZoSoV26uOyfp1096WBF79cW72tse%2FEgi1praNVZUH3vYLYSWqAkQs7nkGCKp2nElQWhoiPi0WDtg%2F29i4W9PF9jY6vnRZE2BqL3d3Ti5r%2BkIOUICjMgcywoynUc69lYB258GgotBC5tF9muKLWAC5CujvWgNlChOfwVPcvd3%2BjTwKF1aTPOcYHyjqjQfTVd%2F%2BhyVHlDVOTs6J262BeGGr%2FkXk3dsKb9v0MBuQLptDuLPWHdAAEOM%2FqpnU3k3JY9t3Ee3elTsESe0jhIhQxgg8yEsv1pexwc1Loc0gZ2O8kwNjmp6VuSD6hkou9sQHoaOfHMdHBOCeBhalt7YvxHoSklbZk5%2FrI8DP2Uo5hD6iQv7t7DCtoBtOVeA9OvxkvLLbnBmPTOStQGczMDE5CIWHgMh%2FTbjVnLULUOlN6xhJtwXgi0vNm5boJTgG7JKjgUwW3Xlu2ibl8XhetIFLRYD1WiZ4Sjcp60n7IuvvnkgmsZevth%2FCM%2Bd1AkXZCsj9ahMwskc6%2F6wxThmoQBv46GtCrTsEqXNr6tgIiicobFs3uD3Kk4X%2B%2BYuuT8DJLUkwUWXr6uyAknwE735KK08IR3hu%2F8xJtMGlfBy5XVwYAJGH74xSibbRohl0JbJhyP6j4NqS6FGJF6Ty80hOz6vnscitA5UAcYXdi4R789YkfIUiIFIol9bYun9h6brMmUDAjd6g0xkVRIw%2Fze%2FkbQj%2FfoUolNnrvLvxghDDgzPQoUi%2FG5WUtPtx1V7kEpgzTCJ%2B%2FfidNIEfvZj%2BoVVVqpHQ5EH5EjkS4dBpQOGjfNx0xdTNBxZ4%2FVOt5xtimBicofvUkLDRwfbOcjHopURVeh4YwAKSgzNEe%2FfKgqZg1F1LkpoH7WVyVAwpLie4YK7ktg7nBlNun%2Bq2SFSziZnclSpvyje4yOrt%2FdaREbvbPbFyC0yrdGXM39aVlv%2BIgjAPwMLRUD%2BS2jKGL4%2F0f9tgeICX%2FOS9Df%2BIOzudAFQUtymqK%2B5Jo2mN97Y237NW9Bcom6Ne%2FofRaKHS35YiFY%2BtymCHrwjCNGg6gGu9nfeHjtbEsQ8sYugnKg8Z5%2Ft88JrkF6LTy9PQDD%2F0w3hp93EQux03eQxh5O4GyvIc2n4Jk2VPx78IhrjEBhSDSivqSOCrLFXKdofKLWiLh8hoMMbl35%2Fd2PP29XVgSwXEenpCg0wVxPKR8iecalaXn6g00knL%2FP8Abke4z7XzKMZcbjER%2BoJXe2525hLpLp15BGERz43JTgFTLWQde9R0WsFxiCa60L4Ea76ics2RITWYAlu3a4WNP7FNEwWaTaqoKKm3nAws39V4GDJrRRCkONFWjAKr%2BF604y1i0Vw7Rc82ATfcDQGvY%2FtLCDsKeo5ORaqF9j%2BU3jnHC7dSbHsmqowrMnor1k51AWvPkVPxc%2F1KzubYsOgGc9bV6lFIaHHRmwEIvqZ0maOL2MeGU6ZAubsbMAGKFCFgSjH8YbPDOtZDY8KoQIPjI0VAXKiwpM5Lvzl6xmaZ%2F6ruTJr9Dx74A1QCbb3aw1VasIpa56lMaNO8pOJXCr3haAnFPP5jRhzbCIdZNvpeuCIA2gPCgfu9jaxLbhsPTjRirl8fIoshOi2yZ908HdOR6Tj3%2F5UYJ5TV%2FaC%2FTXDOEC5Frzoy46B382oetxUrybUxVB9mOyAdki7O4ofLn03dBgQY%2BhtWhq3Dn9mnk%3D; sr=jIkOf7o95kulw3ANSibMS3tAU%2BSZaumdIQ9JHY6DKQC7jtWz5SrxwmQgj0XEOAcavXFhWVJJneCVLHAwoTwmrSB%2BUBn4Q%2FYxn9bfzilmkSIrCz%2BAFZe8sEYq%2F3IP13Xr35LUWmZGIJuOJC%2BYurEKvZSjzsAKid6xIWvshx04V%2BCrbVwPCyvnLqaPX7jfbyd3nczdi5BFfd6sn%2Bv2LTwtXiarXMGZMFKBW46FaTcxjO4QykiCV1KNeYrDjxFZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 17 Jan 2026 01:54:11 GMT\r\ncontent-type: image/jpeg\r\ncache-control: max-age=86400, public\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=854, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1280], progressive, precision 8, 1280x828, components 3","md5":"d0f46cbce44685f35850a30be2fe4f24","sha1":"c5bbf76699b3f0c0063c8906f8405deb8ca738b5","sha256":"1907580b782c9bda51898b9a9ddeedc2d6f6f5c33efdc8241c71dc97a5d3281b","sha512":"10c74862b53d377e699e9d7c2e2f230904e0c4e7a4afecf57051db4a583c5bd7e956cda6b93eafc62117932b0f7f0a26c222405479f9a06adba6b834001d2929","ssdeep":"768:cN4FiGN4UiEdcAjCBxg9tsRlxyYNzfmeVcXZJx+ymoxvPShD4r3uEeUQp59IeFHz:FiEdtkRNTmeVAjwymFhk3uEeDjLT","tlshash":"d943e138dfa5ce01f6dc437888d7e3425f40ce89562251b2bc8c32a5bf966e07c593a5","first_seen":"2023-05-14T22:34:34Z","last_seen":"2026-04-06T16:44:15.149384Z","times_seen":27,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}