{"report_id":"1d867bd1-9d88-48e8-a581-b758f354852a","version":6,"status":"done","tags":[],"date":"2026-01-02T00:11:11Z","url":{"schema":"http","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"104.21.23.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"title":"[AN] | Byse","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"104.21.23.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T00:11:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img-place.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-18","domain_rank":600057,"first_seen":"2023-06-18T09:20:16Z","last_seen":"2026-01-01T13:00:44.233434Z","alert_count":0,"request_count":1,"received_data":58324,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bysezejataos.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-12-16T02:17:27.273447Z","last_seen":"2025-12-25T08:11:57.889635Z","alert_count":15,"request_count":16,"received_data":1769961,"sent_data":8656,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-29T14:32:54.672001Z","alert_count":0,"request_count":1,"received_data":831,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fin-3dg-b1.i8yz83pn.com","ip":{"addr":"185.237.105.49","port":443,"asn":203973,"as":"Eurolir OU","country":"United States","country_code":"US"},"domain_registered":"2025-06-09","domain_rank":666526,"first_seen":"2025-06-10T20:15:52.071598Z","last_seen":"2025-12-28T04:56:23.990299Z","alert_count":0,"request_count":4,"received_data":1728668,"sent_data":2307,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"g9r6.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-11-26T09:24:02.624758Z","last_seen":"2025-12-28T04:56:23.956768Z","alert_count":21,"request_count":21,"received_data":2684451,"sent_data":11402,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":11856,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sentry.byse.sx","ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-01T23:28:58.504202Z","last_seen":"2026-01-01T23:28:58.504203Z","alert_count":5,"request_count":5,"received_data":4096,"sent_data":3056,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"e7cod.com","ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-09-07","domain_rank":0,"first_seen":"2025-12-09T19:09:56.779126Z","last_seen":"2026-01-01T20:09:08.384367Z","alert_count":3,"request_count":3,"received_data":120511,"sent_data":2254,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"twdqlmthkayqht.com","ip":{"addr":"139.45.197.154","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1220,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-CrTzQ-WO.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"832693c16b88d0f73d7eb155361703e4","sha1":"9ffab11322b41d91c39e7b82a2c6666cd2962e0f","sha256":"c0d41b4198a23699a84316fad28db930eec26303f41bf6b1d8d8c23fec707f8e","sha512":"92344119b0b200b67ef9a390f773bbf1bb0ee4de24ccbc034a55154d43254ed9cab42913ececd661b2cccf14d632006febc1a6c6df45da78d07146ed2d2b9ecd","ssdeep":"6144:nPZO+bScD3YJbQfO+N7Cn9b1AiUN/x4/k9nkwS96+aNk+bkDZya7:nZDrNY9xAiUN/x4c9r26+aNk+bkDF7","tlshash":"02a43cdc71a6717267e706a5507b0203b3391912384d84a0f12dddef7ab9806a2b7fbd","size":476417,"data":"","first_seen":"2026-01-01T23:29:06.337979Z","last_seen":"2026-01-02T00:11:24.816767Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/polyfills-BfMHPzsK.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"256e1ee127c116aae62a7b0a187e21d0","sha1":"97fa746fad9a194153e3e60dab969a30704a48c8","sha256":"6d957f2213ba97528d26da6fe2f14c362e0eeeb186a5312eedb8b56253d9c5f0","sha512":"13d7e89df90f9f61447cfee957c777996a2c251d555b9dc3b4362a5f2a5a36dd8e316a62d8f68c9ea7e22fb379d6a7c023d97b6fdc2ac4b1f54b48a060e43a25","ssdeep":"1536:BlWLxyIEk4bnh8incFOeEiKvE1iVrpUNiK5XxNOUx715vb9qQKH:BlSy64bhncSvRppUNiK1OUx715vb9qQs","tlshash":"ccb3d589f6c6f0a243e771a4403f510bf23b6d55b80e8090e766d5d17cb9a8a813bf6d","size":117332,"data":"","first_seen":"2025-11-27T16:15:12.640698Z","last_seen":"2026-01-14T03:42:55.063965Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/js/jquery.min.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-02T18:01:58.39732Z","times_seen":476948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc8b119590b657861b40c95650d29e94","sha1":"3a47d2077693087d988f72fbb5dd2f5a22672ad2","sha256":"c30a1d89edfca8bed12eeb3c47a188242c8e8b36c0612f227a7cd81f30c1c199","sha512":"854e552f2189ddc331e909a2dfa4c9821539273dfff959295686f38dc09be815852b8ba3119c50540bcbbe3dec5b9e7e5e7be250883c3da83edee304ca8a3f7d","ssdeep":"384:+v0a/K7iYFRdYtS00Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOIf:+K72SbQ80GaIoQPzahq/AMOY","tlshash":"4bc2e5a7321eb91a8719626110ef2ec5a2cc48c4718f1b7ce724e53678d753485ebef8","size":27954,"data":"","first_seen":"2025-10-24T05:06:10.166738Z","last_seen":"2026-05-09T21:09:24.283607Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f2dfc871117e44264ee487d8e08e03","sha1":"84df50deb1da07577c6308d6229b6838977355ca","sha256":"1d38267e6325306a1b5993faaf6250de6fdcffe27bd9a654895482f7662cab0d","sha512":"1507e457223f7d9e4236fc7b490a455e470aea75c55eb5ecd08e819e01c0e7722e0282e865d96d806c6ba65a6f62d53d32453633689c4f4afb8f8c506befb41a","ssdeep":"","tlshash":"e83155b63128347882f5166f7cbb664df07756512d1e9080905ce4643828f79f6334ce","size":1529,"data":"","first_seen":"2025-01-25T03:50:38.139741Z","last_seen":"2026-06-01T16:14:32.909376Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/jwplayer.core.controls.js?v=2","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee77850b6b254569cf03f43a4dfdde4","sha1":"35841d306d3404fbef6825371ffdbcd992ade913","sha256":"50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f","sha512":"84d9c23a355b9aa6e6d37f4e4090a41a250499a6c3bb8d5808fa2851a376edfe71d7f1d3d35f658266299339ae88c85fc478a820014c19eeed4e026b4cdab683","ssdeep":"3072:wKH7nFuhglX/qZ3ux2wI9Y7J+3qbOXUvDY6MnJMyXR286CcYZ6mfjq:vHxA4/qZ3V3Y7J+30Y6MnJt2lSZ6mfjq","tlshash":"7d641832214256359aea82da76514604b3398085f516cfacff2ceddd4c6e8cb31f6bb4","size":326903,"data":"","first_seen":"2024-03-12T19:48:43Z","last_seen":"2026-06-01T16:14:32.850002Z","times_seen":1828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1676bfea4b16968bde6fe1baac971b25","sha1":"e2305c1343db7d63028d9c21e9c9fabcea6d33ac","sha256":"c3adea52d43109205f53a0bf6f885a407985bf7a47bff1c97dc931f3f8b91a37","sha512":"8ed77633c4837e8d89460de0498023d17b2c738723cb9b09aa77ffbec004f4ecc30a4ab0d3429848887fccff7084d232345f5ee0b3e12467cd135ecec3149694","ssdeep":"","tlshash":"092157581ce60876907369ab0f9ea2443a36d0d30186cc727e9ccb249f905ee06b6bc8","size":1111,"data":"","first_seen":"2025-11-16T08:53:46.805721Z","last_seen":"2026-06-01T16:14:32.908198Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f98cf8486a8beb4d2d271b8e9304216","sha1":"112dd81cdd24e37a4554c9a5c5327b30a476acf8","sha256":"77b18c051d8450512853f4643dd7ac0e4c3205b7ec4cd1373ca5ad0dd2f470c3","sha512":"110b22e3e2f501f3dcc8f1dea02efaaa338ae6379f15907e15301de227279570bd997c4dbdb46e3c8814dd61779303c6fd26b9c0dfe53f3a733c1379da5e85aa","ssdeep":"","tlshash":"ca90003208200280ae2c0a20200aa0888820ae3b232208a28bb20a0a08088a0028cbe2","size":43,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-06-01T16:14:32.906027Z","times_seen":1608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","size":273070,"data":"","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1676bfea4b16968bde6fe1baac971b25","sha1":"e2305c1343db7d63028d9c21e9c9fabcea6d33ac","sha256":"c3adea52d43109205f53a0bf6f885a407985bf7a47bff1c97dc931f3f8b91a37","sha512":"8ed77633c4837e8d89460de0498023d17b2c738723cb9b09aa77ffbec004f4ecc30a4ab0d3429848887fccff7084d232345f5ee0b3e12467cd135ecec3149694","ssdeep":"","tlshash":"092157581ce60876907369ab0f9ea2443a36d0d30186cc727e9ccb249f905ee06b6bc8","size":1111,"data":"","first_seen":"2025-11-16T08:53:46.805721Z","last_seen":"2026-06-01T16:14:32.908198Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/provider.hlsjs.js?v=2","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f95e38aa7bb0943693b51bd6a7deed0","sha1":"26c89f76894108f76ad23af32ecc6b1e708993ba","sha256":"1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1","sha512":"664696a45bacbf3ee40fe544f92104f568b10a6cffb6a3fffa9afe351294d00dc0a1883d50cc799a1b1dba0fd00797047729670ee72c19cf0e302539fe63b075","ssdeep":"6144:GCXemC8LqtXLauG9L2aEyflDc2iGLY6I2KlqJxRC9i5q9GYqT:1MXxG9L2By5cbOYRqJxRCG","tlshash":"36943bed7795a02642c2a1a5903f4617633b7d0a3409c1bcfa2be9d75db8849b03bf74","size":422959,"data":"","first_seen":"2024-04-13T15:29:15Z","last_seen":"2026-06-01T16:14:32.864577Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-02T17:05:27.806045Z","times_seen":35764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-BzHJPym2.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","size":12228,"data":"","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-02T17:05:27.806045Z","times_seen":35764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/jwplayer.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f91de142eed44442bad231961488c5d0","sha1":"ea6c79968011a5b59e444d792f7ab048a1f7e31d","sha256":"b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295","sha512":"9870ce81ead889f1a2f26abb9bc4cf17d69abba0eadec70d74e299d52791c66ab4b4669f747ef35e429928ed718d09b31ecdefee26fbb7498f694b56fd8ae370","ssdeep":"1536:lrGRl1EevCcKntukU2YYKDjAPkotbKSrvodmBiScMsz1x5rjk0ECjIUMj7DEYR/H:DeQtqR/wooiAUMj7DT9","tlshash":"5fb31ae631c2b4e643e628daa07a4041f23a0545380dc5a4fa6cede63d67947b177fbc","size":111441,"data":"","first_seen":"2024-04-13T15:29:14Z","last_seen":"2026-06-01T16:14:32.895418Z","times_seen":1552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-02T17:05:27.811739Z","times_seen":38224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/polyfills-BfMHPzsK.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"256e1ee127c116aae62a7b0a187e21d0","sha1":"97fa746fad9a194153e3e60dab969a30704a48c8","sha256":"6d957f2213ba97528d26da6fe2f14c362e0eeeb186a5312eedb8b56253d9c5f0","sha512":"13d7e89df90f9f61447cfee957c777996a2c251d555b9dc3b4362a5f2a5a36dd8e316a62d8f68c9ea7e22fb379d6a7c023d97b6fdc2ac4b1f54b48a060e43a25","ssdeep":"1536:BlWLxyIEk4bnh8incFOeEiKvE1iVrpUNiK5XxNOUx715vb9qQKH:BlSy64bhncSvRppUNiK1OUx715vb9qQs","tlshash":"ccb3d589f6c6f0a243e771a4403f510bf23b6d55b80e8090e766d5d17cb9a8a813bf6d","size":117332,"data":"","first_seen":"2025-11-27T16:15:12.640698Z","last_seen":"2026-01-14T03:42:55.063965Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","size":42987,"data":"","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d882b49167571a8dc4de310e0b2e623d","sha1":"426f496e1155dfab34840a7a467866838448c8d0","sha256":"6dc67eafa621e57610ed67c02b1c0c5532e495dfe555dcade99fb81b6744899b","sha512":"aef46b85426812f38eb29a030e1f82d73c053df2d2d9077eb0563f9906353228fd5ffec1d5afc12a76b564031171bf2ec78c994b883ebed865ebe5aad64fc674","ssdeep":"","tlshash":"e3c02b64e22c32c038bfe310486beb2c7503a5337f4b4e54196954aa2c2cd3b705b9f9","size":154,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-06-01T16:14:32.907195Z","times_seen":1596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/5/9809950","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"85894db3fda89ef9dac4a1fac39c2076","sha1":"adbf456f90787fffd2e42e9d31c0cf186a3f260c","sha256":"585745df8b7cdad70dac6250091d62e85144d5ba0826e8ce8af94518848912da","sha512":"c30d35391611fb6ff473c1fd8967a27a1c571431ddbb77d16d8ddc17a9f0648a7e33c071860e2826bab4480eff2f93cfe1b634cee552d8569923028c02069727","ssdeep":"3072:0Xki1TG8YlAVPzIqwL76WJHpYx85/MVzUTD:tWTGvllqw5JJdQzi","tlshash":"feb3195673a27bd21a6a60d42d67d60573fd8cc0488f8967e3c8787971d081cc3abbe9","size":117663,"data":"","first_seen":"2026-01-02T00:11:24.849399Z","last_seen":"2026-01-02T00:11:24.849399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d882b49167571a8dc4de310e0b2e623d","sha1":"426f496e1155dfab34840a7a467866838448c8d0","sha256":"6dc67eafa621e57610ed67c02b1c0c5532e495dfe555dcade99fb81b6744899b","sha512":"aef46b85426812f38eb29a030e1f82d73c053df2d2d9077eb0563f9906353228fd5ffec1d5afc12a76b564031171bf2ec78c994b883ebed865ebe5aad64fc674","ssdeep":"","tlshash":"e3c02b64e22c32c038bfe310486beb2c7503a5337f4b4e54196954aa2c2cd3b705b9f9","size":154,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-06-01T16:14:32.907195Z","times_seen":1596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-02T17:05:27.811739Z","times_seen":38224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f2dfc871117e44264ee487d8e08e03","sha1":"84df50deb1da07577c6308d6229b6838977355ca","sha256":"1d38267e6325306a1b5993faaf6250de6fdcffe27bd9a654895482f7662cab0d","sha512":"1507e457223f7d9e4236fc7b490a455e470aea75c55eb5ecd08e819e01c0e7722e0282e865d96d806c6ba65a6f62d53d32453633689c4f4afb8f8c506befb41a","ssdeep":"","tlshash":"e83155b63128347882f5166f7cbb664df07756512d1e9080905ce4643828f79f6334ce","size":1529,"data":"","first_seen":"2025-01-25T03:50:38.139741Z","last_seen":"2026-06-01T16:14:32.909376Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/bafsd.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","size":13706,"data":"","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-06-01T16:14:32.861686Z","times_seen":1350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/player/jw8_26/bafsd.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","size":13706,"data":"","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-06-01T16:14:32.861686Z","times_seen":1350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/js/jquery.min.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-02T18:01:58.39732Z","times_seen":476948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-CrTzQ-WO.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"832693c16b88d0f73d7eb155361703e4","sha1":"9ffab11322b41d91c39e7b82a2c6666cd2962e0f","sha256":"c0d41b4198a23699a84316fad28db930eec26303f41bf6b1d8d8c23fec707f8e","sha512":"92344119b0b200b67ef9a390f773bbf1bb0ee4de24ccbc034a55154d43254ed9cab42913ececd661b2cccf14d632006febc1a6c6df45da78d07146ed2d2b9ecd","ssdeep":"6144:nPZO+bScD3YJbQfO+N7Cn9b1AiUN/x4/k9nkwS96+aNk+bkDZya7:nZDrNY9xAiUN/x4c9r26+aNk+bkDF7","tlshash":"02a43cdc71a6717267e706a5507b0203b3391912384d84a0f12dddef7ab9806a2b7fbd","size":476417,"data":"","first_seen":"2026-01-01T23:29:06.337979Z","last_seen":"2026-01-02T00:11:24.816767Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-BzHJPym2.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","size":12228,"data":"","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","size":42987,"data":"","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","size":273070,"data":"","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f98cf8486a8beb4d2d271b8e9304216","sha1":"112dd81cdd24e37a4554c9a5c5327b30a476acf8","sha256":"77b18c051d8450512853f4643dd7ac0e4c3205b7ec4cd1373ca5ad0dd2f470c3","sha512":"110b22e3e2f501f3dcc8f1dea02efaaa338ae6379f15907e15301de227279570bd997c4dbdb46e3c8814dd61779303c6fd26b9c0dfe53f3a733c1379da5e85aa","ssdeep":"","tlshash":"ca90003208200280ae2c0a20200aa0888820ae3b232208a28bb20a0a08088a0028cbe2","size":43,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-06-01T16:14:32.906027Z","times_seen":1608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/provider.hlsjs.js?v=2","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Apr 2024 14:57:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5397\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFPoWeCMLzJAoM9zK97Oui1JWBnRIYQBdVZfV91e2IQA4E1k884TZS9t43jM92OHf%2FVJbIXt2%2BT7ZxSkP1OGKD2xl8o6Xw%3D%3D\"}]}\r\netag: W/\"6610116e-6742f\"\r\ncontent-encoding: br\r\ncf-ray: 9b76091c3d13b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"0f95e38aa7bb0943693b51bd6a7deed0","sha1":"26c89f76894108f76ad23af32ecc6b1e708993ba","sha256":"1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1","sha512":"664696a45bacbf3ee40fe544f92104f568b10a6cffb6a3fffa9afe351294d00dc0a1883d50cc799a1b1dba0fd00797047729670ee72c19cf0e302539fe63b075","ssdeep":"6144:GCXemC8LqtXLauG9L2aEyflDc2iGLY6I2KlqJxRC9i5q9GYqT:1MXxG9L2By5cbOYRqJxRCG","tlshash":"36943bed7795a02642c2a1a5903f4617633b7d0a3409c1bcfa2be9d75db8849b03bf74","first_seen":"2024-04-13T15:29:15Z","last_seen":"2026-06-01T16:14:32.864577Z","times_seen":1539,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-place.com/1qe1g7mr305g.jpg","fqdn":"img-place.com","domain":"img-place.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img-place.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 07:58:36 GMT","end":"Thu, 19 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"C3:78:F5:A6:74:93:86:CC:67:49:A8:89:FA:D4:B7:CD:B5:21:2A:94","sha256":"CE:3C:8A:E5:97:76:D8:92:E5:1F:F0:67:79:25:FB:CB:83:77:45:05:2B:14:0A:80:42:A1:D6:CA:14:AA:42:CE"}}},"request":{"raw":"GET /1qe1g7mr305g.jpg HTTP/1.1\r\nHost: img-place.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57606\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 01 Jan 2026 09:09:23 GMT\r\netag: \"695639c3-e106\"\r\nexpires: Thu, 15 Jan 2026 11:21:40 GMT\r\ncache-control: max-age=2678400\r\naccept-ranges: bytes\r\nage: 46149\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zo8wRfgQlsU8%2FSUGHWB4BD9v7iEmWSW4H2z9HmAyvxTdgkZT%2Fq6Z68jingRmw6UwT7qnO%2FIrnBMooFaC2n1RjYfedLFXZoSNZAve4Wo%3D\"}]}\r\ncf-ray: 9b760920a92b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57606,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1215x1216, segment length 16, comment: \"Lavc59.32.100\", baseline, precision 8, 608x1080, components 3","md5":"11499e5171e402f375505fe16b066534","sha1":"a774807856d92c9f8269ea2fa1d43994958e8366","sha256":"f1119e52b190c8a7ce96b1f778a2b3158dc8247331e5f1d055f18436f1104d2e","sha512":"3a43f6ea9716b3cfce050779661a6374929126725909def34d6c9643c1b8c0bdf8ca1c504ba180fc3c9233bbf13b51e2046369f64e752813d6995f4af9353c52","ssdeep":"768:jrhsTdjjJIDG/Jjadf54LwGW8j541jefQM0RrGsuGJYBXTfwIdEI4M+hOLrJYZFD:Xm5q8452u054pep0NGsu2sXkI3dxzm","tlshash":"1e43023624da1c1f460cbbfb390d51e0c5c916ab498105f37a751ba2b3799bfa5273c8","first_seen":"2026-01-02T00:11:24.812417Z","last_seen":"2026-01-02T00:11:24.812417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":37,"dns":21,"connect":1,"send":0,"wait":6,"receive":4,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-BzHJPym2.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/index-BzHJPym2.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/assets/videoPagesBundle-BJU5jZ29.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4348\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-10fc\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QM1%2BL1H7VQqJNUQW%2BtnF4hRcZEJMsJiN9UPhzlJ%2Bhd3Sq9N7%2BT5kvlCb4MyKhurZWR7uobzT0gmLLDb8%2FK4eaoEayyhDe3o3eRkwMvS3B6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b760911ddc92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12184)","md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-CrTzQ-WO.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/index-CrTzQ-WO.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 154639\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-25c0f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:38:31 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 30736\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBWhvtMy4DqIiCCRxJFYC2fWJ30HKsRkcHM2JP7A0YgEUUF6bE39ZyNggYHlPMSMin6WKQ0ATJ6Fq5Y%2FrM6ZLCiK%2BtLWawGot0g8bjz%2Fqy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b76090f4bc82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49911)","md5":"832693c16b88d0f73d7eb155361703e4","sha1":"9ffab11322b41d91c39e7b82a2c6666cd2962e0f","sha256":"c0d41b4198a23699a84316fad28db930eec26303f41bf6b1d8d8c23fec707f8e","sha512":"92344119b0b200b67ef9a390f773bbf1bb0ee4de24ccbc034a55154d43254ed9cab42913ececd661b2cccf14d632006febc1a6c6df45da78d07146ed2d2b9ecd","ssdeep":"6144:nPZO+bScD3YJbQfO+N7Cn9b1AiUN/x4/k9nkwS96+aNk+bkDZya7:nZDrNY9xAiUN/x4c9r26+aNk+bkDF7","tlshash":"02a43cdc71a6717267e706a5507b0203b3391912384d84a0f12dddef7ab9806a2b7fbd","first_seen":"2026-01-01T23:29:06.337979Z","last_seen":"2026-01-02T00:11:24.816767Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/LegacyLayout-DpyCdONU.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: cf3a84aea364412a89caf9bb8ca2d8bf-a405c1a1b8c63603-0\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=cf3a84aea364412a89caf9bb8ca2d8bf,sentry-sampled=false,sentry-sample_rand=0.7921160460343336,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12658\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-3172\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YX40jOOBPIgG90L7yr5rjVdqMU3en%2Fqq5sq%2BnzgU9cbe800NAGFj2jsyZxPVZdVO5vzDLh62iWXSBTeS1ZIToe5pRF%2F5zOHAYlYroOxMsDo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609112d212678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42919)","md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/js/jquery.min.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:48.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 30894\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 07 Dec 2025 21:19:14 GMT\r\netag: \"6935ef52-78ae\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 07 Jan 2026 06:50:51 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 2135996\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqokqmHAYZ76q7ZF9B0%2FDg%2BaFG1W9Y4uulO98PbY4sVxVGJA5qvjfpeHDiNG9evVrhFy8Ad%2FuX4l8tiDpujuzx8CLCeu0v4oOhqrWl1VXYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609121de82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-02T18:01:58.39732Z","times_seen":476948,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/api/videos/1qe1g7mr305g/embed/settings","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /api/videos/1qe1g7mr305g/embed/settings HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nX-Embed-Parent: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-932d444067ae2384-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BN0g9%2BnAsSE%2F995sm9xTMJbEVxd65qE708KtOf2e%2FDGL%2BRXqVyXBqpZYI%2BFG2F8e6%2BeD8Un0lPxMVTc9HaTN5yqB8wCsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b760919ab2bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80d994f9b874a1c5c6c52aee63dcce24","sha1":"4242edaebc88610456371d3e805e2f5c441ea213","sha256":"5ef488b21110769180971aac75de65bed45a554b9d819ca7fd593bd8ef582987","sha512":"666aa92be03e14a4576eb7218dd865589dd447b2080e2a25044ad9176cf6fe04078c4902da6ad0bfa5d0f6b0c8e41c847cb288f47855740d745ff48a77052a73","ssdeep":"","tlshash":"3ce0727f50652baccfdb8200eac9a10713ec4a3078a0b728e8c0402d29df0d9992009b","first_seen":"2026-01-02T00:11:24.831712Z","last_seen":"2026-01-02T00:11:24.831712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 00:10:50 GMT\r\ndate: Fri, 02 Jan 2026 00:10:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"872397029f2e679476239e9af1ee89d7","sha1":"d7d9f8128975cdc4d6b71f8f4d0179c39e636a9b","sha256":"f52a6da7c0ccc77c22b7933e4c9226361066fd8f7f850c2c9862c44a81aba486","sha512":"7ae4f1c02e523c0d9ebbb1e45f4f68e47b2c41dfb01f90a5f114cf2af8e8efbf0e5b1da5933109779a43384bf5f0fcc89b20a15662cbaff68f5eedf38978e715","ssdeep":"192:2NKfmNKfNK4NKfkNK/qbNKDbqGIwV4BNKnNKuwNKiNKfXNKuNKNNKfZNK/qqNKDZ:8KfMK1KWK6KyhK/qY4XKNKtK4KfdKkKW","tlshash":"023210a1041b50009b834ce223cebf75fe1f52117142d0b5abfdab6b9dcbc66526935d","first_seen":"2025-11-19T00:21:16.090021Z","last_seen":"2026-02-19T20:26:46.863195Z","times_seen":4215,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":88,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sentry.byse.sx/api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0","fqdn":"sentry.byse.sx","domain":"byse.sx","tld":"sx"},"ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:52.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.byse.sx","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 13:03:45 GMT","end":"Wed, 01 Apr 2026 13:03:44 GMT"},"fingerprint":{"sha1":"22:AE:E1:F7:30:10:68:48:A6:C3:6A:7D:3C:59:46:6A:A9:B2:BC:59","sha256":"58:CD:DE:E8:E4:2C:26:AA:4F:9E:DC:E8:2A:CA:16:B0:0B:03:90:CF:B5:E1:27:B0:E0:7F:DC:4D:45:5F:5C:89"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0 HTTP/1.1\r\nHost: sentry.byse.sx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1551\r\nOrigin: https://bysezejataos.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1551,"data":"{\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\"}}\n{\"type\":\"trace_metric\",\"item_count\":2,\"content_type\":\"application/vnd.sentry.items.trace-metric+json\"}\n{\"items\":[{\"timestamp\":1767312647.9,\"trace_id\":\"cf3a84aea364412a89caf9bb8ca2d8bf\",\"span_id\":\"82fb0817424fde36\",\"name\":\"frontend.route.view\",\"type\":\"counter\",\"value\":1,\"attributes\":{\"path\":{\"value\":\"/e/1qe1g7mr305g\",\"type\":\"string\"},\"embed_route\":{\"value\":\"true\",\"type\":\"string\"},\"sentry.release\":{\"value\":\"0.1.17+7b8d37d4\",\"type\":\"string\"},\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"sentry.sdk.name\":{\"value\":\"sentry.javascript.react\",\"type\":\"string\"},\"sentry.sdk.version\":{\"value\":\"10.27.0\",\"type\":\"string\"},\"sentry.replay_id\":{\"value\":\"ab4b663f10624cfda158fa5e232c4b42\",\"type\":\"string\"},\"sentry._internal.replay_is_buffering\":{\"value\":true,\"type\":\"boolean\"}}},{\"timestamp\":1767312647.901,\"trace_id\":\"cf3a84aea364412a89caf9bb8ca2d8bf\",\"span_id\":\"82fb0817424fde36\",\"name\":\"frontend.route.render_ms\",\"type\":\"distribution\",\"unit\":\"millisecond\",\"value\":25,\"attributes\":{\"path\":{\"value\":\"/e/1qe1g7mr305g\",\"type\":\"string\"},\"embed_route\":{\"value\":\"true\",\"type\":\"string\"},\"sentry.release\":{\"value\":\"0.1.17+7b8d37d4\",\"type\":\"string\"},\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"sentry.sdk.name\":{\"value\":\"sentry.javascript.react\",\"type\":\"string\"},\"sentry.sdk.version\":{\"value\":\"10.27.0\",\"type\":\"string\"},\"sentry.replay_id\":{\"value\":\"ab4b663f10624cfda158fa5e232c4b42\",\"type\":\"string\"},\"sentry._internal.replay_is_buffering\":{\"value\":true,\"type\":\"boolean\"}}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LUNSj98XNJRYD4mG; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg10_=1767312652; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg9_=91.90.42.154; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg1_=o5hdVnd62UlejuyuCVs9; Domain=.byse.sx; HttpOnly; Path=/; Expires=Sat, 02-Jan-2027 00:10:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 02 Jan 2026 00:10:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-02T18:05:30.125322Z","times_seen":695718,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/videoPagesBundle-BJU5jZ29.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: cf3a84aea364412a89caf9bb8ca2d8bf-9cb8b41a117cfc09-0\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=cf3a84aea364412a89caf9bb8ca2d8bf,sentry-sampled=false,sentry-sample_rand=0.7921160460343336,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 101469\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-18c5d\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yezjOwM2WkC%2BfR56GIwtqpmMs20bsN9YpMlx2vqEC423NW6idjpNc43Pv2tYrKBOd6Xj%2FMnfPvukHOzFtVOvXnfIKkthSkJaOPeDN2XBWdw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609112d112678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/api/videos/1qe1g7mr305g/embed/details","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:48.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /api/videos/1qe1g7mr305g/embed/details HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nX-Embed-Parent: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: cf3a84aea364412a89caf9bb8ca2d8bf-acf11163bfcb0e44-0\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=cf3a84aea364412a89caf9bb8ca2d8bf,sentry-sampled=false,sentry-sample_rand=0.7921160460343336,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrMPnHFnL2QWW2uqfnA5S4VeUwTD9mN2z9F0GEwrH4hztwYoK7tIk8zTwSeXYZhvLyj6ovOicriBFWESF7V8%2B7%2BbFxVqRhdTz61L0RUlceY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609123e042678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e67cb8f992c4d9f41c10f9a932546fd1","sha1":"55fb46eb343ce31338b48f226dd9960616c1e262","sha256":"07a30a7609060734b8e50a6724fc2f2bde251abb877e8c73d8bd16df956be5d2","sha512":"e999371ec2949e6301ab84083079407e2394885aa7e8756b8f750462da0d59d58ebc06c68ac7eb8affd9ed39a80445a003588f8aed427f16599fd9d2caf34f51","ssdeep":"","tlshash":"93d02ef34aaec802ca4220c2dd06b718a56d360e6cc0f44c9d11e7f600908e20c1880b","first_seen":"2026-01-02T00:11:24.843194Z","last_seen":"2026-01-02T00:11:24.843194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:48.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /eur4q/1qe1g7mr305g HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9PJ9R%2FrfL6VqKB4k27Pe%2FLTQ9QEZGM8jlSIeOyZ8jc7mwxqf072pkPXPX4I6LNbi323oZLzwoKiJLkfvaLxynExERK4PA%3D%3D\"}]}\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b7609135b8d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2953,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"b3a2b211eeb6a1439fe6785109de14cd","sha1":"0d10dd99559a202c9822cc328de5c4ca79b5bb4c","sha256":"b89a4f330b0a38285fb4fee2d9c21c9f8783dfca2997e3c27e5fea018c84faf2","sha512":"6bb29547e9e07620c7ebd62984745e63d4443b16042617eb13210c622810ff49f503d80ee5709438b19233622563c0571bcdb2d628565e850af44b01adb15023","ssdeep":"","tlshash":"c8516245acf4c9b701762d5f2e69f5083da192c34149dc503aedc4b88f50eea0eabdd8","first_seen":"2026-01-01T23:29:06.329232Z","last_seen":"2026-01-02T00:11:24.846181Z","times_seen":3,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":51,"dns":33,"connect":1,"send":0,"wait":352,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/videoPagesBundle-BJU5jZ29.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/assets/index-CrTzQ-WO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KM90HnNoPgNLF9z1QnvKuUs1VWuOXM9IrAMXvOFLmPejdAK09%2BMPFnlC9%2BAqT1RGWrlyRjBzVtXjYETDfOhrMJizdbptVw%3D%3D\"}]}\r\netag: W/\"69568d08-42aae\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609189a86b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/jwplayer.core.controls.js?v=2","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Apr 2024 09:09:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=604800\r\nexpires: Tue, 06 Jan 2026 21:42:08 GMT\r\nage: 181720\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXqDUUkbvjQmxBYSShkI3qvS%2BxQEeQTqtSrVrQ1etwo4WLFGY59BBWdaxRsyP%2BMYkejo1ZaPsQK92kSxPHGMXWydV3ABsg%3D%3D\"}]}\r\netag: W/\"660d1cce-4fcf7\"\r\ncontent-encoding: br\r\ncf-ray: 9b76091bfcebb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"fee77850b6b254569cf03f43a4dfdde4","sha1":"35841d306d3404fbef6825371ffdbcd992ade913","sha256":"50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f","sha512":"84d9c23a355b9aa6e6d37f4e4090a41a250499a6c3bb8d5808fa2851a376edfe71d7f1d3d35f658266299339ae88c85fc478a820014c19eeed4e026b4cdab683","ssdeep":"3072:wKH7nFuhglX/qZ3ux2wI9Y7J+3qbOXUvDY6MnJMyXR286CcYZ6mfjq:vHxA4/qZ3V3Y7J+30Y6MnJt2lSZ6mfjq","tlshash":"7d641832214256359aea82da76514604b3398085f516cfacff2ceddd4c6e8cb31f6bb4","first_seen":"2024-03-12T19:48:43Z","last_seen":"2026-06-01T16:14:32.850002Z","times_seen":1828,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/5/9809950","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"GET /5/9809950 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 00:10:50 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 95518b3727d7f1a18af60d3c440c4eb4\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0082b2c14e92441dfda68175aa070f37; expires=Sat, 02 Jan 2027 00:10:50 GMT; path=/; secure; SameSite=None\noaidts=1767312650; expires=Sat, 02 Jan 2027 00:10:50 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"85894db3fda89ef9dac4a1fac39c2076","sha1":"adbf456f90787fffd2e42e9d31c0cf186a3f260c","sha256":"585745df8b7cdad70dac6250091d62e85144d5ba0826e8ce8af94518848912da","sha512":"c30d35391611fb6ff473c1fd8967a27a1c571431ddbb77d16d8ddc17a9f0648a7e33c071860e2826bab4480eff2f93cfe1b634cee552d8569923028c02069727","ssdeep":"3072:0Xki1TG8YlAVPzIqwL76WJHpYx85/MVzUTD:tWTGvllqw5JJdQzi","tlshash":"feb3195673a27bd21a6a60d42d67d60573fd8cc0488f8967e3c8787971d081cc3abbe9","first_seen":"2026-01-02T00:11:24.849399Z","last_seen":"2026-01-02T00:11:24.849399Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":73,"dns":14,"connect":26,"send":0,"wait":53,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0082b2c14e92441dfda68175aa070f37","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=0082b2c14e92441dfda68175aa070f37 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://g9r6.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0082b2c14e92441dfda68175aa070f37; expires=Sat, 02 Jan 2027 00:10:50 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b76091fbccd569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"644d78f404909ad82adede860c6f4f9f","sha1":"837fd5a37861cce1bf792ce82d5f16e102d31072","sha256":"a89030642ddcbb7871ada3dfa4b8d3c1fa6bb46432e9852cb8a305a94b9f9ad2","sha512":"33ffe73b45bc3db7d671ca0a9dcd184ac25942cf55eeca41d34e1e7260c8ad6e5e744ddc998414fd665806f0c80257650d05d66f24db8327f34ee6f70b190a93","ssdeep":"","tlshash":"bda00240597459c8106096557e8baf66548b12719406a394c1d8c20255da39c5749241","first_seen":"2026-01-02T00:11:24.851467Z","last_seen":"2026-01-02T00:11:24.851467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":40,"dns":20,"connect":2,"send":0,"wait":37,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190094\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-02T18:08:20.372402Z","times_seen":863352,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":93,"dns":1,"connect":20,"send":0,"wait":21,"receive":27,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/LegacyLayout-DYKwlHYt.css","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/LegacyLayout-DYKwlHYt.css HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 4931\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Jan 2026 14:32:40 GMT\r\nvary: Accept-Encoding\r\netag: \"69568588-1343\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 14:37:21 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 34406\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FHxOw5Iy9%2B15g9KPYqicA8%2FUrMGQxcz901YZPsQgIHpaPLmmm9fcvB3jI%2FuBhL%2FAg%2BoLj3rSbaqLTz1xXhy25yuBRCJNyJfZ7I5Y04WEnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609110cfb2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26418)","md5":"3c107ca96d51ee2fc91913b6793ad573","sha1":"3a538b72514052c5e7d7a2f5173e7bd2c1d7f5bf","sha256":"756fb1eedadeb27f5f114b74a54f069cee9f3722458276f832c2c91e203c4c2c","sha512":"1caeda4c22e87b381c65e7f73b825233fefc85f666f9477a6d4b55209286ca62f8fcce1f85d9a6d04c85c50f30d554649397501ce0c75ae51eeace88fdfcd77f","ssdeep":"192:llhnnt+Vz8hLoIPYN0sxE86VX2maUBsCqg4bBM/9FO2qxqgEuOufFa+:Jn4/N0sKfMmaUuCH4bBM/9w2qxqWFa+","tlshash":"3ac2b62db10a343efcdbc26e59b0a34ce0854812f91347fdaf5b96550fd720b6a6e948","first_seen":"2026-01-01T23:29:06.296326Z","last_seen":"2026-01-15T19:05:30.405942Z","times_seen":58,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/videoPagesBundle-CVR9WjYW.css","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/videoPagesBundle-CVR9WjYW.css HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 4029\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Dec 2025 10:54:05 GMT\r\netag: \"693bf44d-fbd\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 15 Jan 2026 18:20:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 1403412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biSTfEfGs%2Fld%2BS3DsSFPuLAKowu5Q2UHj6dkAV%2F%2B4hF5%2BenlS4zpozKm5VenLnCoBI0sXt1C%2Bkgr6Rv%2FXFQ3YbmU30e8sMXicz4%2BPqB4ows%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609110cff2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18965)","md5":"79e53f4dcc9656ac16dd05aa6087e79c","sha1":"3e7e99d5d9fbb597e58e330ff43bdaf528c5283e","sha256":"1fb218d07c797ed9af02cf070fbaaafe1cef61a05aeb835e3b85cdbc9516dc68","sha512":"05a4b89eebf9aeaa018dff2a909077ddb4feac8ebc1cf2e0b7780568c64158ae630a859e89c3e7ac359a4b58c75cc367a4003d19329ef02de53c5bc670794fe8","ssdeep":"192:AebfIKjwoShGQ89hzf/Xx3tJ3foTuLkbL86YplGBfIs90NZtt2fwaJotQSHqB2:Ae7NFfzHFtDQ6zH/3","tlshash":"f6822421d625de1db52bc09a7cd0468ef8654205f22343f9c9a3a3664f8a1cf9b732cd","first_seen":"2025-12-07T05:24:19.704632Z","last_seen":"2026-01-13T06:55:59.834035Z","times_seen":131,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/js/jquery.min.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 16 Dec 2025 22:21:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 19 Jan 2026 02:20:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 1115443\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhM7FzshwrcbaFPDmShBd3nhVf7P2K%2BuviCXGoqMf3Q8A%2Fx6J8Ppg%2F%2BW2hjWF3WNCceo0rB8Y9h8XCjqlRL0yEP7uTZbRQ%3D%3D\"}]}\r\netag: W/\"6941db75-15d9d\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609196b05b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-02T18:01:58.39732Z","times_seen":476948,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0","fqdn":"fin-3dg-b1.i8yz83pn.com","domain":"i8yz83pn.com","tld":"com"},"ip":{"addr":"185.237.105.49","port":443,"asn":203973,"as":"Eurolir OU","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fin-3dg-b1.i8yz83pn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:48:53 GMT","end":"Mon, 05 Jan 2026 14:48:52 GMT"},"fingerprint":{"sha1":"67:BF:D4:F7:DC:11:B8:FE:A2:5C:16:B7:ED:20:98:6C:53:29:26:DE","sha256":"97:A3:AE:91:7A:44:20:A3:AA:9C:D0:15:01:B5:20:4F:32:CF:8D:47:3E:45:F5:65:7C:72:82:00:45:AC:6A:F5"}}},"request":{"raw":"GET /hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0 HTTP/1.1\r\nHost: fin-3dg-b1.i8yz83pn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 00:10:50 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Fri, 02 Jan 2026 00:10:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Mon, 05 Jan 2026 00:10:50 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: BYPASS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26887,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"95f4130a53cd3adf6134daf68721e5e5","sha1":"fc5aa7e056a664d5563e6f9ee99749562bc51c40","sha256":"7f8f88925502ab4e25752ca42a957747d1073a28121161be6d917e5367f18f35","sha512":"bb6daafe78f089a1132b300a7e79afa0c1e2fbd3170449bcb03bf13f8cf8bd74010f559f09a36173ab61709e2c8feca82f4f47a2ab3696d0f1f1d948cc8811a6","ssdeep":"192:b80h0QwxHOkxOHVrYtjK4m1a89P5xflRqNHOG7BXcRnuUup43iFlwkFQ/y/U/p//:w01Y9e","tlshash":"cac24ff3a9fa9e0587adec5a8350556ca8057dadec0ef3aac08cc3707754e9d3c69640","first_seen":"2026-01-02T00:11:24.857618Z","last_seen":"2026-01-02T00:11:24.857618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"OPTIONS /wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://g9r6.com/\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 00:10:51 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://g9r6.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":59,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:51.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"POST /wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/\r\ncontent-type: application/json\r\nContent-Length: 3459\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=0082b2c14e92441dfda68175aa070f37; oaidts=1767312650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3459,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":1,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://bysezejataos.com/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 00:10:51 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://g9r6.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0","fqdn":"fin-3dg-b1.i8yz83pn.com","domain":"i8yz83pn.com","tld":"com"},"ip":{"addr":"185.237.105.49","port":443,"asn":203973,"as":"Eurolir OU","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:51.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fin-3dg-b1.i8yz83pn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:48:53 GMT","end":"Mon, 05 Jan 2026 14:48:52 GMT"},"fingerprint":{"sha1":"67:BF:D4:F7:DC:11:B8:FE:A2:5C:16:B7:ED:20:98:6C:53:29:26:DE","sha256":"97:A3:AE:91:7A:44:20:A3:AA:9C:D0:15:01:B5:20:4F:32:CF:8D:47:3E:45:F5:65:7C:72:82:00:45:AC:6A:F5"}}},"request":{"raw":"GET /hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0 HTTP/1.1\r\nHost: fin-3dg-b1.i8yz83pn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 00:10:51 GMT\r\nContent-Type: video/MP2T\r\nContent-Length: 1699904\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Sun, 04 Jan 2026 10:52:36 GMT\r\nETag: \"5f693e80-19f040\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699904,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"f8d669f31f792a41d19de72810d85a41","sha1":"faf5c2568bf6681704e73e8dc4c1f6a3eda4a00d","sha256":"919751428135e579a9b280fabf86f3f0e4bf8cc584d81a2a8c7e0666f9c88ca7","sha512":"50e93750864249f06e8ff277b95af428d767a96b6786c82be7f3b2ede53817bc52b079738e8f060cbef236405ffc22c1f234bb12205392d8a0cd48026db4896c","ssdeep":"24576:kdVbjXqIgzORjiUTYBv/plLC2hudqPVpbbJ77JhkIRlXjFKDgj6R:kjQORjirfudqXbbx7wg6","tlshash":"d7253381d3785d993069b0cc59f57abe1a1b96f9087834d1b1cbe7a978db0e0e18a40f","first_seen":"2026-01-02T00:11:24.860606Z","last_seen":"2026-01-02T00:11:24.860606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":21,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/polyfills-BfMHPzsK.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/polyfills-BfMHPzsK.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 47162\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 14:32:40 GMT\r\nvary: Accept-Encoding\r\netag: \"69568588-b83a\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 14:37:20 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 34406\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUZnnW4G3WSWNYd6Ty4VL15oZlubCSh%2Fmao5BYXgVbmhPhXTyJKDl09jpsXlvSQK3Y7auhdeFms5cSREQnzQmxDEbuEPkhjqqgkTSplTT5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b76090f3bbc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62205), with NEL line terminators","md5":"256e1ee127c116aae62a7b0a187e21d0","sha1":"97fa746fad9a194153e3e60dab969a30704a48c8","sha256":"6d957f2213ba97528d26da6fe2f14c362e0eeeb186a5312eedb8b56253d9c5f0","sha512":"13d7e89df90f9f61447cfee957c777996a2c251d555b9dc3b4362a5f2a5a36dd8e316a62d8f68c9ea7e22fb379d6a7c023d97b6fdc2ac4b1f54b48a060e43a25","ssdeep":"1536:BlWLxyIEk4bnh8incFOeEiKvE1iVrpUNiK5XxNOUx715vb9qQKH:BlSy64bhncSvRppUNiK1OUx715vb9qQs","tlshash":"ccb3d589f6c6f0a243e771a4403f510bf23b6d55b80e8090e766d5d17cb9a8a813bf6d","first_seen":"2025-11-27T16:15:12.640698Z","last_seen":"2026-01-14T03:42:55.063965Z","times_seen":123,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/polyfills-BfMHPzsK.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/polyfills-BfMHPzsK.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 31 Dec 2025 14:19:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 30 Jan 2026 14:23:27 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 121641\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXNR1iIcy4tpFW%2FnwDti1y2qBG53mdudbxPJQyQe%2B6xuCYFezJ%2FBBf%2B9gQoHHjdLlOdk2xgdjO%2FylEibRZwq456NLR52mQ%3D%3D\"}]}\r\netag: W/\"695530f7-1ca54\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609163903b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62205), with NEL line terminators","md5":"256e1ee127c116aae62a7b0a187e21d0","sha1":"97fa746fad9a194153e3e60dab969a30704a48c8","sha256":"6d957f2213ba97528d26da6fe2f14c362e0eeeb186a5312eedb8b56253d9c5f0","sha512":"13d7e89df90f9f61447cfee957c777996a2c251d555b9dc3b4362a5f2a5a36dd8e316a62d8f68c9ea7e22fb379d6a7c023d97b6fdc2ac4b1f54b48a060e43a25","ssdeep":"1536:BlWLxyIEk4bnh8incFOeEiKvE1iVrpUNiK5XxNOUx715vb9qQKH:BlSy64bhncSvRppUNiK1OUx715vb9qQs","tlshash":"ccb3d589f6c6f0a243e771a4403f510bf23b6d55b80e8090e766d5d17cb9a8a813bf6d","first_seen":"2025-11-27T16:15:12.640698Z","last_seen":"2026-01-14T03:42:55.063965Z","times_seen":123,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-BzHJPym2.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/index-BzHJPym2.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSMFV1oVeS%2BjQaHa80RtTE%2F2opQZB5MUYmvaDkpbEfm0McM9UUAysG65%2FIkjKfoJZfvHixK8DU56k1THxt76GIh%2FG1BGjA%3D%3D\"}]}\r\netag: W/\"69568d08-2fc4\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609190abeb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12184)","md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/api/videos/1qe1g7mr305g/embed/playback","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /api/videos/1qe1g7mr305g/embed/playback HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nX-Embed-Parent: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-93f93875e82e4809-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwKYIwuLVRiZUCC8I6AJ7WCqpc4DZ3WlrGCG5N5chy%2BMnqnbiWkQ6CQHT80IdcrnJ90QVmoEsbxPuFoGHb%2FG%2FcCo9b0y2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b760919ab2eb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e43a57387c7c598d6765210551e7434","sha1":"f748dc60a61e120482e31979d30fcf083cd60a16","sha256":"8d93d660d3d9c9af69e71647f7985240f05f6894621adbda3a40d3de0ba00ca3","sha512":"b28e59346536d5478ccb9592a6265feb75a173ad2150803dfdf03bf464ec3aba9b416725370d1f2dd7f0f97d73f1db969593ec5e0b0f7d0d952d5e93a32b0766","ssdeep":"","tlshash":"bd31fada5a966554d7f08bc646d6fdde0806514d242c2457ebec0095cb02f4450675a4","first_seen":"2026-01-02T00:11:24.863403Z","last_seen":"2026-01-02T00:11:24.863403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/bafsd.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /player/jw8_26/bafsd.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 04 Oct 2024 05:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2039\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZ0Y3C0lqw42aeYitu%2FldVF2T9GiNLwO95w79ohdRZRtSI4Lx9SPKtS1fQxgxpvFgyYJ03zs7azIB3FBxr%2By1Fu1lIzOxQ%3D%3D\"}]}\r\netag: W/\"66ff82ab-358a\"\r\ncontent-encoding: br\r\ncf-ray: 9b76091a1b72b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-06-01T16:14:32.861686Z","times_seen":1350,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/LegacyLayout-DpyCdONU.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-a9c5b8cc650454cd-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32754\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xwr%2F1OpfC%2BQPsOSY3%2FpQxIu9XHTzsmYGb0I2tayxwvnEx9Oe36HIUXoidMeZhdB7x%2FkokDhoXWPtJAzjBm%2B6X5rWGhnP%2BA%3D%3D\"}]}\r\netag: W/\"69568d08-a7eb\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609186a66b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42919)","md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/e/1qe1g7mr305g","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T00:10:47.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /e/1qe1g7mr305g HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIH31QUaKeOxKzKJKhvlVC7yz5rV%2F1HcXGsSttOycapSgPDRnlNjyevnl6fKwAx3OoYv52vntClzd%2BfNR2Mshou71vQ9kUXYMclwztMF\"}]}\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b76090db9c556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2953,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"b3a2b211eeb6a1439fe6785109de14cd","sha1":"0d10dd99559a202c9822cc328de5c4ca79b5bb4c","sha256":"b89a4f330b0a38285fb4fee2d9c21c9f8783dfca2997e3c27e5fea018c84faf2","sha512":"6bb29547e9e07620c7ebd62984745e63d4443b16042617eb13210c622810ff49f503d80ee5709438b19233622563c0571bcdb2d628565e850af44b01adb15023","ssdeep":"","tlshash":"c8516245acf4c9b701762d5f2e69f5083da192c34149dc503aedc4b88f50eea0eabdd8","first_seen":"2026-01-01T23:29:06.329232Z","last_seen":"2026-01-02T00:11:24.846181Z","times_seen":3,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":98,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/videoPagesBundle-BJU5jZ29.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/assets/index-CrTzQ-WO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 101469\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-18c5d\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHzt9W62zfreMZQ5FD41eZJfJV7N3q3oXrFDh8z1JEDoIIXraGSDZlnWpHHoM3zE7GWad3n6P8gNZfFjQVQ4wLz6OUsp4OQAO6tfmDsMJSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609115d5e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/player/jw8_26/bafsd.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:48.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /player/jw8_26/bafsd.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 04 Oct 2024 05:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3436\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzgHptOLpTpjgT5hvLFzk%2F%2B9SxpxMcGPEaxPIwyFQqQtGbSiY8lCIJjDwjcMoxymErehqoioRO%2F%2Bh1rl4fTbVvMFeu8vOSK0DXT0yfC%2FgSY%3D\"}]}\r\netag: W/\"66ff82ab-358a\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609127e262678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-06-01T16:14:32.861686Z","times_seen":1350,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/LegacyLayout-DYKwlHYt.css","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/LegacyLayout-DYKwlHYt.css HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Jan 2026 13:44:21 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 13:46:40 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 37448\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCpI%2BfKGOC1FdtK0FlbaZZEQFfSxKt0PzW3dtTfneEht1ZNeuRSQN3Qt5LsW51yn%2BwkVXnFQO04uCaUBY8yPme5Vu%2BQnWQ%3D%3D\"}]}\r\netag: W/\"69567a35-6733\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609183a42b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26418)","md5":"3c107ca96d51ee2fc91913b6793ad573","sha1":"3a538b72514052c5e7d7a2f5173e7bd2c1d7f5bf","sha256":"756fb1eedadeb27f5f114b74a54f069cee9f3722458276f832c2c91e203c4c2c","sha512":"1caeda4c22e87b381c65e7f73b825233fefc85f666f9477a6d4b55209286ca62f8fcce1f85d9a6d04c85c50f30d554649397501ce0c75ae51eeace88fdfcd77f","ssdeep":"192:llhnnt+Vz8hLoIPYN0sxE86VX2maUBsCqg4bBM/9FO2qxqgEuOufFa+:Jn4/N0sKfMmaUuCH4bBM/9w2qxqWFa+","tlshash":"3ac2b62db10a343efcdbc26e59b0a34ce0854812f91347fdaf5b96550fd720b6a6e948","first_seen":"2026-01-01T23:29:06.296326Z","last_seen":"2026-01-15T19:05:30.405942Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/jwplayer.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /player/jw8_26/jwplayer.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 05 Apr 2024 14:58:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1929\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLWhtQlXdy2LhyL31ugvYuBm9kuF34hV2UQ6ff1bfFApz5keH20e2x5sblJ4URL0F63KBWhZ3ceY%2BcX%2BmIBy4i9mSoNW%2Bg%3D%3D\"}]}\r\netag: W/\"661011a3-1b351\"\r\ncontent-encoding: br\r\ncf-ray: 9b76091b2c5ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65511)","md5":"f91de142eed44442bad231961488c5d0","sha1":"ea6c79968011a5b59e444d792f7ab048a1f7e31d","sha256":"b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295","sha512":"9870ce81ead889f1a2f26abb9bc4cf17d69abba0eadec70d74e299d52791c66ab4b4669f747ef35e429928ed718d09b31ecdefee26fbb7498f694b56fd8ae370","ssdeep":"1536:lrGRl1EevCcKntukU2YYKDjAPkotbKSrvodmBiScMsz1x5rjk0ECjIUMj7DEYR/H:DeQtqR/wooiAUMj7DT9","tlshash":"5fb31ae631c2b4e643e628daa07a4041f23a0545380dc5a4fa6cede63d67947b177fbc","first_seen":"2024-04-13T15:29:14Z","last_seen":"2026-06-01T16:14:32.895418Z","times_seen":1552,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/player/jw8_26/red-theme.css?v=hkd2aow2","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /player/jw8_26/red-theme.css?v=hkd2aow2 HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 22 Nov 2025 14:37:51 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmLTnX1IwwRmgrqF1YFYWurZySEfquoYJUnHXLX3MtR8BCDb24nOgBFSfTj6Kkqp9tCb%2FhQF1M5Y1NVLCkcJmiGKvU3n6w%3D%3D\"}]}\r\netag: W/\"6921cabf-cbde\"\r\ncontent-encoding: br\r\ncf-ray: 9b76091bfcedb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52190,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3448), with CRLF line terminators","md5":"f3f73b08642229c81c4843ac9ed2f75f","sha1":"bef3f95d6d01090812691e9059c12f6b60dc057c","sha256":"36cff0b3e82308a7dbab594a2b92af60cfe0e002fdafca6777ace94b6deaf2ff","sha512":"2384e56dde7fe14b87fc38981530828d903af64d8f5df30daf6c11159fa8b5dce6eed8d5f427a6c4c3a827d68a0ec4b431739616be2d169db78cf9af1f3d161a","ssdeep":"768:lXA2MrRkj77QW4z0yoe6BsvjNsvjNX1vB8oGnQ/WrrqoJ9f:cljNejNpGoOior","tlshash":"8533549ebed79290aa55c3b4c72256147f6b683cef27ff593e6093b4e61440ce2d8810","first_seen":"2025-11-24T23:48:33.180698Z","last_seen":"2026-06-01T16:14:32.896552Z","times_seen":194,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-BzHJPym2.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/index-BzHJPym2.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nsentry-trace: cf3a84aea364412a89caf9bb8ca2d8bf-8342aff1909855ac-0\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=cf3a84aea364412a89caf9bb8ca2d8bf,sentry-sampled=false,sentry-sample_rand=0.7921160460343336,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4348\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-10fc\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aidj75qgDwqbN3%2BJiZPvRWUZqP5xQ%2FayJy%2F2SB53xeP9jxd5qPGP5xOSjedYiVIl60Nr3RvTFE4zqOml3PrzamNLs0AZnRG9GEcd0GU%2BIbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b7609112d172678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12184)","md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/LegacyLayout-DpyCdONU.js HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/assets/videoPagesBundle-BJU5jZ29.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12658\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:42 GMT\r\nvary: Accept-Encoding\r\netag: \"69568d0a-3172\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 15:08:28 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32539\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rp81al0toIk5N9gLug125oIAcybRaLgaItHEfe2mhAMD7xYuAe4Femv6rL9zLlohuZs00Oysncwe2rPo418VOiaNN0N0p%2B4bewC7Rs3y8wc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b760911ddca2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42919)","md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sentry.byse.sx/api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0","fqdn":"sentry.byse.sx","domain":"byse.sx","tld":"sx"},"ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.byse.sx","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 13:03:45 GMT","end":"Wed, 01 Apr 2026 13:03:44 GMT"},"fingerprint":{"sha1":"22:AE:E1:F7:30:10:68:48:A6:C3:6A:7D:3C:59:46:6A:A9:B2:BC:59","sha256":"58:CD:DE:E8:E4:2C:26:AA:4F:9E:DC:E8:2A:CA:16:B0:0B:03:90:CF:B5:E1:27:B0:E0:7F:DC:4D:45:5F:5C:89"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0 HTTP/1.1\r\nHost: sentry.byse.sx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 435\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":435,"data":"{\"sent_at\":\"2026-01-02T00:10:48.808Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"a8f4a243f9e14f19b9d4950819b2a850\",\"init\":true,\"started\":\"2026-01-02T00:10:48.807Z\",\"timestamp\":\"2026-01-02T00:10:48.807Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"0.1.17+7b8d37d4\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=U65BpEUfXpQXf9Xl; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:48 GMT\n__ddg10_=1767312648; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:48 GMT\n__ddg9_=91.90.42.154; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:48 GMT\n__ddg1_=FbMSsQDzfqp3N4X49XZL; Domain=.byse.sx; HttpOnly; Path=/; Expires=Sat, 02-Jan-2027 00:10:48 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-02T18:05:30.125322Z","times_seen":695718,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/videoPagesBundle-BJU5jZ29.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/videoPagesBundle-BJU5jZ29.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-9967f3e3e0d9fa16-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3EaujsjzwHSIrnfQFoQNOCfJzlbGEjlsj0Fni51tW440xZLBDruSctBxRCY0xB0WFFVjRNpPtFfuZA72WvlduAix6ax3tA%3D%3D\"}]}\r\netag: W/\"69568d08-42aae\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609185a5bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e0edaf65e4dc55b8ae3b0eb88f60f17","sha1":"e33c6dd0e47623e581db843ef3f4472009fe7598","sha256":"d682f1446ae1db7df6062e0c49dc55faf425055adc70a04ef4dc41cc8abe2a96","sha512":"5601b039dcb944105667d8d890424c0c280c5fac1e9b0d500d0d82276381a989fb36fdbe7cbdae4ff7831dbe5a06e8040f7843f5d97f14f492c8242bb0dfffb9","ssdeep":"6144:5aigXvPRkjePMG6McUoVL9ppt1ohZscG8elZWiHkOTPkKEuG67FPfVQtVF+jbaPo:5z5UoVL9ppt1ohZscG8elZWiHkOTPkK/","tlshash":"9c449d6871a578add7ed0980647f1811b1ac1521748d41e8f0bdec3a1bdb69280bbffe","first_seen":"2026-01-01T23:29:06.286185Z","last_seen":"2026-01-02T00:11:24.83705Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twdqlmthkayqht.com/","fqdn":"twdqlmthkayqht.com","domain":"twdqlmthkayqht.com","tld":"com"},"ip":{"addr":"139.45.197.154","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twdqlmthkayqht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:13:13 GMT","end":"Wed, 01 Apr 2026 11:13:12 GMT"},"fingerprint":{"sha1":"7B:D6:75:58:31:FA:93:40:09:9D:7A:99:6F:AC:C6:53:74:6F:03:F6","sha256":"09:FE:95:BE:23:9D:F9:1F:CE:18:E1:BA:BC:AD:AA:85:9B:1F:50:C0:E6:38:86:93:65:70:89:E5:E3:78:C1:BC"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: twdqlmthkayqht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: HEAD\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://g9r6.com/\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://g9r6.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":77,"dns":13,"connect":27,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twdqlmthkayqht.com/","fqdn":"twdqlmthkayqht.com","domain":"twdqlmthkayqht.com","tld":"com"},"ip":{"addr":"139.45.197.154","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twdqlmthkayqht.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:13:13 GMT","end":"Wed, 01 Apr 2026 11:13:12 GMT"},"fingerprint":{"sha1":"7B:D6:75:58:31:FA:93:40:09:9D:7A:99:6F:AC:C6:53:74:6F:03:F6","sha256":"09:FE:95:BE:23:9D:F9:1F:CE:18:E1:BA:BC:AD:AA:85:9B:1F:50:C0:E6:38:86:93:65:70:89:E5:E3:78:C1:BC"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: twdqlmthkayqht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/html\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/html\r\nx-t2r66a28c41e9-78i64d59: 00000000000000000000000000000000\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://g9r6.com\r\naccess-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname\r\naccess-control-allow-credentials: true\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nx-application-key: u50o1KsmaVfwlwjvdgy08\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/master.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0","fqdn":"fin-3dg-b1.i8yz83pn.com","domain":"i8yz83pn.com","tld":"com"},"ip":{"addr":"185.237.105.49","port":443,"asn":203973,"as":"Eurolir OU","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:50.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fin-3dg-b1.i8yz83pn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:48:53 GMT","end":"Mon, 05 Jan 2026 14:48:52 GMT"},"fingerprint":{"sha1":"67:BF:D4:F7:DC:11:B8:FE:A2:5C:16:B7:ED:20:98:6C:53:29:26:DE","sha256":"97:A3:AE:91:7A:44:20:A3:AA:9C:D0:15:01:B5:20:4F:32:CF:8D:47:3E:45:F5:65:7C:72:82:00:45:AC:6A:F5"}}},"request":{"raw":"GET /hls2/03/10583/1qe1g7mr305g_x/master.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0 HTTP/1.1\r\nHost: fin-3dg-b1.i8yz83pn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 00:10:50 GMT\r\nContent-Type: application/vnd.apple.mpegurl\r\nLast-Modified: Fri, 02 Jan 2026 00:10:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Mon, 05 Jan 2026 00:10:50 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: BYPASS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"7fac91b8cd07bcef3d49e6e115e72455","sha1":"fef1a5c6f036d65b4ff659b5110b033a3866d7d6","sha256":"1c05e0d154659100d77507117022d8606cc3add9c45ea169243e730befa5d68a","sha512":"29b8496e48d011e0b9c391a9b465785646c84d9f3191016a924bd242650f39f251c63574da41d1184277a821f31b61270001ea15770ba7a29178311b2424f6f7","ssdeep":"","tlshash":"59e0c6e6babecb084e28e5954288283cac0a0dfc8808e719d0c882506684e803caa200","first_seen":"2026-01-02T00:11:24.869849Z","last_seen":"2026-01-02T00:11:24.869849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":72,"dns":19,"connect":17,"send":0,"wait":252,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sentry.byse.sx/api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0","fqdn":"sentry.byse.sx","domain":"byse.sx","tld":"sx"},"ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:52.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.byse.sx","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 13:03:45 GMT","end":"Wed, 01 Apr 2026 13:03:44 GMT"},"fingerprint":{"sha1":"22:AE:E1:F7:30:10:68:48:A6:C3:6A:7D:3C:59:46:6A:A9:B2:BC:59","sha256":"58:CD:DE:E8:E4:2C:26:AA:4F:9E:DC:E8:2A:CA:16:B0:0B:03:90:CF:B5:E1:27:B0:E0:7F:DC:4D:45:5F:5C:89"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0 HTTP/1.1\r\nHost: sentry.byse.sx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 46034\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46034,"data":"{\"event_id\":\"b8eff66c080b42f0b8915f480a88df23\",\"sent_at\":\"2026-01-02T00:10:52.703Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\"},\"trace\":{\"environment\":\"production\",\"release\":\"0.1.17+7b8d37d4\",\"public_key\":\"0cd7ea3076805f8201eee7a39f2e520e\",\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"sampled\":\"true\",\"sample_rand\":\"0.02159728565639596\",\"sample_rate\":\"0.1\"}}\n{\"type\":\"transaction\"}\n{\"contexts\":{\"trace\":{\"span_id\":\"8c2faf8602144f2e\",\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"data\":{\"sentry.origin\":\"auto.pageload.browser\",\"sentry.op\":\"pageload\",\"sentry.source\":\"url\",\"sentry.sample_rate\":0.1,\"hardwareConcurrency\":\"48\",\"performance.timeOrigin\":1767312648.145,\"performance.activationStart\":0,\"sentry.idle_span_finish_reason\":\"idleTimeout\"},\"op\":\"pageload\",\"status\":\"ok\",\"origin\":\"auto.pageload.browser\"},\"react\":{\"version\":\"18.3.1\"}},\"spans\":[{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.006,\"http.request.domain_lookup_start\":1767312649.006,\"http.request.domain_lookup_end\":1767312649.006,\"http.request.connect_start\":1767312649.006,\"http.request.secure_connection_start\":1767312649.006,\"http.request.connection_end\":1767312649.006,\"http.request.request_start\":1767312649.014,\"http.request.response_start\":1767312649.02,\"http.request.response_end\":1767312649.033,\"http.request.time_to_first_byte\":0.875},\"description\":\"GET https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"9967f3e3e0d9fa16\",\"start_timestamp\":1767312649.002,\"status\":\"ok\",\"timestamp\":1767312649.077,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/assets/index-BzHJPym2.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://g9r6.com/assets/index-BzHJPym2.js\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.008,\"http.request.domain_lookup_start\":1767312649.008,\"http.request.domain_lookup_end\":1767312649.008,\"http.request.connect_start\":1767312649.008,\"http.request.secure_connection_start\":1767312649.008,\"http.request.connection_end\":1767312649.008,\"http.request.request_start\":1767312649.022,\"http.request.response_start\":1767312649.033,\"http.request.response_end\":1767312649.033,\"http.request.time_to_first_byte\":0.888},\"description\":\"GET https://g9r6.com/assets/index-BzHJPym2.js\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"906c0c7c331fdd70\",\"start_timestamp\":1767312649.007,\"status\":\"ok\",\"timestamp\":1767312649.079,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/assets/LegacyLayout-DpyCdONU.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://g9r6.com/assets/LegacyLayout-DpyCdONU.js\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.01,\"http.request.domain_lookup_start\":1767312649.01,\"http.request.domain_lookup_end\":1767312649.01,\"http.request.connect_start\":1767312649.01,\"http.request.secure_connection_start\":1767312649.01,\"http.request.connection_end\":1767312649.01,\"http.request.request_start\":1767312649.023,\"http.request.response_start\":1767312649.033,\"http.request.response_end\":1767312649.034,\"http.request.time_to_first_byte\":0.888},\"description\":\"GET https://g9r6.com/assets/LegacyLayout-DpyCdONU.js\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"a9c5b8cc650454cd\",\"start_timestamp\":1767312649.009,\"status\":\"ok\",\"timestamp\":1767312649.079,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/settings\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/settings\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.202,\"http.request.domain_lookup_start\":1767312649.202,\"http.request.domain_lookup_end\":1767312649.202,\"http.request.connect_start\":1767312649.202,\"http.request.secure_connection_start\":1767312649.202,\"http.request.connection_end\":1767312649.202,\"http.request.request_start\":1767312649.228,\"http.request.response_start\":1767312649.422,\"http.request.response_end\":1767312649.423,\"http.request.time_to_first_byte\":1.277},\"description\":\"GET https://g9r6.com/api/videos/1qe1g7mr305g/embed/settings\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"932d444067ae2384\",\"start_timestamp\":1767312649.2,\"status\":\"ok\",\"timestamp\":1767312649.437,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/playback\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/playback\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.204,\"http.request.domain_lookup_start\":1767312649.204,\"http.request.domain_lookup_end\":1767312649.204,\"http.request.connect_start\":1767312649.204,\"http.request.secure_connection_start\":1767312649.204,\"http.request.connection_end\":1767312649.204,\"http.request.request_start\":1767312649.23,\"http.request.response_start\":1767312649.329,\"http.request.response_end\":1767312649.329,\"http.request.time_to_first_byte\":1.184},\"description\":\"GET https://g9r6.com/api/videos/1qe1g7mr305g/embed/playback\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"93f93875e82e4809\",\"start_timestamp\":1767312649.203,\"status\":\"ok\",\"timestamp\":1767312649.339,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"type\":\"xhr\",\"http.method\":\"HEAD\",\"http.url\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"server.address\":\"g9r6.com\",\"http.response.status_code\":200,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.503,\"http.request.domain_lookup_start\":1767312649.503,\"http.request.domain_lookup_end\":1767312649.503,\"http.request.connect_start\":1767312649.503,\"http.request.secure_connection_start\":1767312649.503,\"http.request.connection_end\":1767312649.503,\"http.request.request_start\":1767312649.505,\"http.request.response_start\":1767312649.604,\"http.request.response_end\":1767312649.604,\"http.request.time_to_first_byte\":1.459},\"description\":\"HEAD https://g9r6.com/eur4q/1qe1g7mr305g\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b1d8bf9120aa7615\",\"start_timestamp\":1767312649.501,\"status\":\"ok\",\"timestamp\":1767312649.611,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://twdqlmthkayqht.com\",\"type\":\"xhr\",\"http.method\":\"HEAD\",\"http.url\":\"https://twdqlmthkayqht.com/\",\"server.address\":\"twdqlmthkayqht.com\",\"http.response.status_code\":200},\"description\":\"HEAD https://twdqlmthkayqht.com\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"be161b4caf4b5539\",\"start_timestamp\":1767312649.71,\"status\":\"ok\",\"timestamp\":1767312649.849,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://my.rtmark.net/gid.js?userId=0082b2c14e92441dfda68175aa070f37\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://my.rtmark.net/gid.js?userId=0082b2c14e92441dfda68175aa070f37\",\"server.address\":\"my.rtmark.net\",\"http.query\":\"?userId=0082b2c14e92441dfda68175aa070f37\",\"http.response.status_code\":200,\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.153,\"http.request.domain_lookup_start\":1767312650.155,\"http.request.domain_lookup_end\":1767312650.175,\"http.request.connect_start\":1767312650.175,\"http.request.secure_connection_start\":1767312650.179,\"http.request.connection_end\":1767312650.194,\"http.request.request_start\":1767312650.195,\"http.request.response_start\":1767312650.232,\"http.request.response_end\":1767312650.232,\"http.request.time_to_first_byte\":2.087},\"description\":\"GET https://my.rtmark.net/gid.js\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"86f8a6950f553f2b\",\"start_timestamp\":1767312650.152,\"status\":\"ok\",\"timestamp\":1767312650.394,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/master.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/master.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"server.address\":\"fin-3dg-b1.i8yz83pn.com\",\"http.query\":\"?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"http.response.status_code\":200,\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.316,\"http.request.domain_lookup_start\":0,\"http.request.domain_lookup_end\":0,\"http.request.connect_start\":0,\"http.request.secure_connection_start\":0,\"http.request.connection_end\":0,\"http.request.request_start\":0,\"http.request.response_start\":0,\"http.request.response_end\":1767312650.642,\"http.request.time_to_first_byte\":0},\"description\":\"GET https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/master.m3u8\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"89230f231d818f06\",\"start_timestamp\":1767312650.315,\"status\":\"ok\",\"timestamp\":1767312650.962,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://e7cod.com/wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://e7cod.com/wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37\",\"server.address\":\"e7cod.com\",\"http.query\":\"?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37\",\"http.response.status_code\":204,\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.958,\"http.request.domain_lookup_start\":1767312650.958,\"http.request.domain_lookup_end\":1767312650.958,\"http.request.connect_start\":1767312650.958,\"http.request.secure_connection_start\":1767312650.958,\"http.request.connection_end\":1767312650.958,\"http.request.request_start\":1767312651.049,\"http.request.response_start\":1767312651.078,\"http.request.response_end\":1767312651.079,\"http.request.time_to_first_byte\":2.933},\"description\":\"POST https://e7cod.com/wrr\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b1857b0346c22969\",\"start_timestamp\":1767312650.957,\"status\":\"ok\",\"timestamp\":1767312651.081,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"server.address\":\"fin-3dg-b1.i8yz83pn.com\",\"http.query\":\"?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"http.response.status_code\":200,\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.967,\"http.request.domain_lookup_start\":0,\"http.request.domain_lookup_end\":0,\"http.request.connect_start\":0,\"http.request.secure_connection_start\":0,\"http.request.connection_end\":0,\"http.request.request_start\":0,\"http.request.response_start\":0,\"http.request.response_end\":1767312651.262,\"http.request.time_to_first_byte\":0},\"description\":\"GET https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b45ce8ba9df49b78\",\"start_timestamp\":1767312650.966,\"status\":\"ok\",\"timestamp\":1767312651.265,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/encryption.key?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/encryption.key?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"server.address\":\"fin-3dg-b1.i8yz83pn.com\",\"http.query\":\"?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"http.response.status_code\":200,\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312651.271,\"http.request.domain_lookup_start\":0,\"http.request.domain_lookup_end\":0,\"http.request.connect_start\":0,\"http.request.secure_connection_start\":0,\"http.request.connection_end\":0,\"http.request.request_start\":0,\"http.request.response_start\":0,\"http.request.response_end\":1767312651.293,\"http.request.time_to_first_byte\":0},\"description\":\"GET https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/encryption.key\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"baa46da99e7040b5\",\"start_timestamp\":1767312651.27,\"status\":\"ok\",\"timestamp\":1767312651.296,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"server.address\":\"fin-3dg-b1.i8yz83pn.com\",\"http.query\":\"?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"http.response.status_code\":200,\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312651.273,\"http.request.domain_lookup_start\":0,\"http.request.domain_lookup_end\":0,\"http.request.connect_start\":0,\"http.request.secure_connection_start\":0,\"http.request.connection_end\":0,\"http.request.request_start\":0,\"http.request.response_start\":0,\"http.request.response_end\":1767312651.638,\"http.request.time_to_first_byte\":0},\"description\":\"GET https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts\",\"op\":\"http.client\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"ac8624f1bc1352c5\",\"start_timestamp\":1767312651.272,\"status\":\"ok\",\"timestamp\":1767312651.639,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.ui.browser.metrics\",\"sentry.op\":\"browser.domContentLoadedEvent\"},\"description\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"op\":\"browser.domContentLoadedEvent\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"a619c7be0cef9728\",\"start_timestamp\":1767312649.022,\"timestamp\":1767312649.025,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.ui.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.ui.browser.metrics\",\"sentry.op\":\"browser.loadEvent\"},\"description\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"op\":\"browser.loadEvent\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"8201e05c547bf967\",\"start_timestamp\":1767312649.158,\"timestamp\":1767312649.159,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.ui.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.ui.browser.metrics\",\"sentry.op\":\"browser.request\"},\"description\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"op\":\"browser.request\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"a6f7c578fc58643d\",\"start_timestamp\":1767312648.145,\"timestamp\":1767312648.566,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.ui.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.ui.browser.metrics\",\"sentry.op\":\"browser.response\"},\"description\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"op\":\"browser.response\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"86aeed237124278a\",\"start_timestamp\":1767312648.145,\"timestamp\":1767312648.566,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.ui.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":68656,\"http.response_content_length\":67927,\"http.decoded_response_content_length\":352154,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312648.668,\"http.request.domain_lookup_start\":1767312648.668,\"http.request.domain_lookup_end\":1767312648.668,\"http.request.connect_start\":1767312648.668,\"http.request.secure_connection_start\":1767312648.668,\"http.request.connection_end\":1767312648.668,\"http.request.request_start\":1767312648.676,\"http.request.response_start\":1767312648.68,\"http.request.response_end\":1767312648.69,\"http.request.time_to_first_byte\":0.535},\"description\":\"/assets/index-Bgynxpuq.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"9f22e3b4e1151994\",\"start_timestamp\":1767312648.668,\"timestamp\":1767312648.69,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":48763,\"http.response_content_length\":48013,\"http.decoded_response_content_length\":117332,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312648.668,\"http.request.domain_lookup_start\":1767312648.668,\"http.request.domain_lookup_end\":1767312648.668,\"http.request.connect_start\":1767312648.668,\"http.request.secure_connection_start\":1767312648.668,\"http.request.connection_end\":1767312648.668,\"http.request.request_start\":1767312648.674,\"http.request.response_start\":1767312648.68,\"http.request.response_end\":1767312648.691,\"http.request.time_to_first_byte\":0.535},\"description\":\"/assets/polyfills-BfMHPzsK.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"ba059f59715e2614\",\"start_timestamp\":1767312648.668,\"timestamp\":1767312648.691,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":157129,\"http.response_content_length\":156382,\"http.decoded_response_content_length\":476417,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312648.668,\"http.request.domain_lookup_start\":1767312648.668,\"http.request.domain_lookup_end\":1767312648.668,\"http.request.connect_start\":1767312648.668,\"http.request.secure_connection_start\":1767312648.668,\"http.request.connection_end\":1767312648.668,\"http.request.request_start\":1767312648.675,\"http.request.response_start\":1767312648.682,\"http.request.response_end\":1767312648.701,\"http.request.time_to_first_byte\":0.537},\"description\":\"/assets/index-CrTzQ-WO.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"80024e1c59daf3a0\",\"start_timestamp\":1767312648.668,\"timestamp\":1767312648.701,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"sentry-tracing-init\",\"op\":\"mark\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b9a49d8331260589\",\"start_timestamp\":1767312648.81,\"timestamp\":1767312648.81,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":4934,\"http.response_content_length\":4204,\"http.decoded_response_content_length\":18966,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312648.991,\"http.request.domain_lookup_start\":1767312648.991,\"http.request.domain_lookup_end\":1767312648.991,\"http.request.connect_start\":1767312648.991,\"http.request.secure_connection_start\":1767312648.991,\"http.request.connection_end\":1767312648.991,\"http.request.request_start\":1767312648.995,\"http.request.response_start\":1767312649.003,\"http.request.response_end\":1767312649.004,\"http.request.time_to_first_byte\":0.858},\"description\":\"/assets/videoPagesBundle-CVR9WjYW.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"84613ef33fef57c3\",\"start_timestamp\":1767312648.991,\"timestamp\":1767312649.004,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":5916,\"http.response_content_length\":5186,\"http.decoded_response_content_length\":26419,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312648.991,\"http.request.domain_lookup_start\":1767312648.991,\"http.request.domain_lookup_end\":1767312648.991,\"http.request.connect_start\":1767312648.991,\"http.request.secure_connection_start\":1767312648.991,\"http.request.connection_end\":1767312648.991,\"http.request.request_start\":1767312648.995,\"http.request.response_start\":1767312649.003,\"http.request.response_end\":1767312649.003,\"http.request.time_to_first_byte\":0.858},\"description\":\"/assets/LegacyLayout-DYKwlHYt.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"a4808194b846f885\",\"start_timestamp\":1767312648.991,\"timestamp\":1767312649.003,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":98484,\"http.response_content_length\":97741,\"http.decoded_response_content_length\":273070,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.044,\"http.request.domain_lookup_start\":1767312649.044,\"http.request.domain_lookup_end\":1767312649.044,\"http.request.connect_start\":1767312649.044,\"http.request.secure_connection_start\":1767312649.044,\"http.request.connection_end\":1767312649.044,\"http.request.request_start\":1767312649.052,\"http.request.response_start\":1767312649.066,\"http.request.response_end\":1767312649.069,\"http.request.time_to_first_byte\":0.921},\"description\":\"/assets/videoPagesBundle-BJU5jZ29.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"947429ce0b5a4754\",\"start_timestamp\":1767312649.044,\"timestamp\":1767312649.069,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"paint\"},\"description\":\"first-contentful-paint\",\"op\":\"paint\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"8cd407a3b5399dbf\",\"start_timestamp\":1767312649.101,\"timestamp\":1767312649.101,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":5177,\"http.response_content_length\":4431,\"http.decoded_response_content_length\":12228,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.119,\"http.request.domain_lookup_start\":1767312649.119,\"http.request.domain_lookup_end\":1767312649.119,\"http.request.connect_start\":1767312649.119,\"http.request.secure_connection_start\":1767312649.119,\"http.request.connection_end\":1767312649.119,\"http.request.request_start\":1767312649.123,\"http.request.response_start\":1767312649.13,\"http.request.response_end\":1767312649.13,\"http.request.time_to_first_byte\":0.985},\"description\":\"/assets/index-BzHJPym2.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"af2af6eb073cd1bd\",\"start_timestamp\":1767312649.119,\"timestamp\":1767312649.1299999,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":13420,\"http.response_content_length\":12678,\"http.decoded_response_content_length\":42987,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.12,\"http.request.domain_lookup_start\":1767312649.12,\"http.request.domain_lookup_end\":1767312649.12,\"http.request.connect_start\":1767312649.12,\"http.request.secure_connection_start\":1767312649.12,\"http.request.connection_end\":1767312649.12,\"http.request.request_start\":1767312649.124,\"http.request.response_start\":1767312649.129,\"http.request.response_end\":1767312649.131,\"http.request.time_to_first_byte\":0.984},\"description\":\"/assets/LegacyLayout-DpyCdONU.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"a2b0b4a7c941e8c9\",\"start_timestamp\":1767312649.12,\"timestamp\":1767312649.1309998,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":32743,\"http.response_content_length\":31994,\"http.decoded_response_content_length\":89501,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.177,\"http.request.domain_lookup_start\":1767312649.177,\"http.request.domain_lookup_end\":1767312649.177,\"http.request.connect_start\":1767312649.177,\"http.request.secure_connection_start\":1767312649.177,\"http.request.connection_end\":1767312649.177,\"http.request.request_start\":1767312649.189,\"http.request.response_start\":1767312649.201,\"http.request.response_end\":1767312649.202,\"http.request.time_to_first_byte\":1.056},\"description\":\"/js/jquery.min.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"ba5990a8a7fdb0c6\",\"start_timestamp\":1767312649.177,\"timestamp\":1767312649.2020001,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":4231,\"http.response_content_length\":3551,\"http.decoded_response_content_length\":13706,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.294,\"http.request.domain_lookup_start\":1767312649.294,\"http.request.domain_lookup_end\":1767312649.294,\"http.request.connect_start\":1767312649.294,\"http.request.secure_connection_start\":1767312649.294,\"http.request.connection_end\":1767312649.294,\"http.request.request_start\":1767312649.299,\"http.request.response_start\":1767312649.306,\"http.request.response_end\":1767312649.306,\"http.request.time_to_first_byte\":1.161},\"description\":\"/player/jw8_26/bafsd.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"824ad501e383c0af\",\"start_timestamp\":1767312649.294,\"timestamp\":1767312649.306,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":43000,\"http.response_content_length\":42317,\"http.decoded_response_content_length\":111441,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.463,\"http.request.domain_lookup_start\":1767312649.463,\"http.request.domain_lookup_end\":1767312649.463,\"http.request.connect_start\":1767312649.463,\"http.request.secure_connection_start\":1767312649.463,\"http.request.connection_end\":1767312649.463,\"http.request.request_start\":1767312649.466,\"http.request.response_start\":1767312649.478,\"http.request.response_end\":1767312649.479,\"http.request.time_to_first_byte\":1.333},\"description\":\"/player/jw8_26/jwplayer.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"9fc71efe45f1425c\",\"start_timestamp\":1767312649.463,\"timestamp\":1767312649.479,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":87643,\"http.response_content_length\":86919,\"http.decoded_response_content_length\":326903,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.558,\"http.request.domain_lookup_start\":1767312649.558,\"http.request.domain_lookup_end\":1767312649.558,\"http.request.connect_start\":1767312649.558,\"http.request.secure_connection_start\":1767312649.558,\"http.request.connection_end\":1767312649.558,\"http.request.request_start\":1767312649.592,\"http.request.response_start\":1767312649.599,\"http.request.response_end\":1767312649.613,\"http.request.time_to_first_byte\":1.454},\"description\":\"/player/jw8_26/jwplayer.core.controls.js?v=2\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"8f03a7cb62458064\",\"start_timestamp\":1767312649.558,\"timestamp\":1767312649.6130002,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":11771,\"http.response_content_length\":11117,\"http.decoded_response_content_length\":52190,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.559,\"http.request.domain_lookup_start\":1767312649.559,\"http.request.domain_lookup_end\":1767312649.559,\"http.request.connect_start\":1767312649.559,\"http.request.secure_connection_start\":1767312649.559,\"http.request.connection_end\":1767312649.559,\"http.request.request_start\":1767312649.592,\"http.request.response_start\":1767312649.792,\"http.request.response_end\":1767312650.048,\"http.request.time_to_first_byte\":1.647},\"description\":\"/player/jw8_26/red-theme.css?v=hkd2aow2\",\"op\":\"resource.link\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"871aa95def9c9fb2\",\"start_timestamp\":1767312649.559,\"timestamp\":1767312650.048,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"g9r6.com\",\"url.same_origin\":true,\"http.response_transfer_size\":128397,\"http.response_content_length\":127716,\"http.decoded_response_content_length\":422959,\"network.protocol.version\":\"3\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.561,\"http.request.domain_lookup_start\":1767312649.561,\"http.request.domain_lookup_end\":1767312649.561,\"http.request.connect_start\":1767312649.561,\"http.request.secure_connection_start\":1767312649.561,\"http.request.connection_end\":1767312649.561,\"http.request.request_start\":1767312649.593,\"http.request.response_start\":1767312649.641,\"http.request.response_end\":1767312649.656,\"http.request.time_to_first_byte\":1.496},\"description\":\"/player/jw8_26/provider.hlsjs.js?v=2\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b19fe7e15f26cb42\",\"start_timestamp\":1767312649.5609999,\"timestamp\":1767312649.656,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\",\"url.scheme\":\"https\",\"server.address\":\"e7cod.com\",\"url.same_origin\":false,\"http.response_transfer_size\":50648,\"http.response_content_length\":49361,\"http.decoded_response_content_length\":117663,\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312649.912,\"http.request.domain_lookup_start\":1767312649.913,\"http.request.domain_lookup_end\":1767312649.928,\"http.request.connect_start\":1767312649.928,\"http.request.secure_connection_start\":1767312649.957,\"http.request.connection_end\":1767312649.987,\"http.request.request_start\":1767312649.987,\"http.request.response_start\":1767312650.04,\"http.request.response_end\":1767312650.067,\"http.request.time_to_first_byte\":1.895},\"description\":\"https://e7cod.com/5/9809950\",\"op\":\"resource.script\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"84081ee5fc554e47\",\"start_timestamp\":1767312649.912,\"timestamp\":1767312650.067,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.css\",\"url.scheme\":\"https\",\"server.address\":\"fonts.googleapis.com\",\"url.same_origin\":false,\"http.response_transfer_size\":2282,\"http.response_content_length\":1599,\"http.decoded_response_content_length\":11170,\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.058,\"http.request.domain_lookup_start\":1767312650.063,\"http.request.domain_lookup_end\":1767312650.064,\"http.request.connect_start\":1767312650.064,\"http.request.secure_connection_start\":1767312650.073,\"http.request.connection_end\":1767312650.151,\"http.request.request_start\":1767312650.151,\"http.request.response_start\":1767312650.172,\"http.request.response_end\":1767312650.172,\"http.request.time_to_first_byte\":2.027},\"description\":\"https://fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026display=swap\",\"op\":\"resource.css\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"944907216d3b4908\",\"start_timestamp\":1767312650.058,\"timestamp\":1767312650.1720002,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\",\"url.scheme\":\"https\",\"server.address\":\"img-place.com\",\"url.same_origin\":false,\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.305,\"http.request.domain_lookup_start\":0,\"http.request.domain_lookup_end\":0,\"http.request.connect_start\":0,\"http.request.secure_connection_start\":0,\"http.request.connection_end\":0,\"http.request.request_start\":0,\"http.request.response_start\":0,\"http.request.response_end\":1767312650.354,\"http.request.time_to_first_byte\":0},\"description\":\"https://img-place.com/1qe1g7mr305g.jpg\",\"op\":\"resource.img\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"ae29d99151dc6a26\",\"start_timestamp\":1767312650.305,\"timestamp\":1767312650.354,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\",\"url.scheme\":\"https\",\"server.address\":\"fonts.gstatic.com\",\"url.same_origin\":false,\"http.response_transfer_size\":40960,\"http.response_content_length\":40128,\"http.decoded_response_content_length\":40128,\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":0,\"http.request.redirect_end\":0,\"http.request.worker_start\":0,\"http.request.fetch_start\":1767312650.351,\"http.request.domain_lookup_start\":1767312650.376,\"http.request.domain_lookup_end\":1767312650.376,\"http.request.connect_start\":1767312650.376,\"http.request.secure_connection_start\":1767312650.399,\"http.request.connection_end\":1767312650.469,\"http.request.request_start\":1767312650.469,\"http.request.response_start\":1767312650.49,\"http.request.response_end\":1767312650.518,\"http.request.time_to_first_byte\":2.345},\"description\":\"https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"8c2faf8602144f2e\",\"span_id\":\"b4a49acf3ad94d0a\",\"start_timestamp\":1767312650.351,\"timestamp\":1767312650.5180001,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"origin\":\"auto.resource.browser.metrics\"}],\"start_timestamp\":1767312648.145,\"timestamp\":1767312651.639,\"transaction\":\"/eur4q/1qe1g7mr305g\",\"type\":\"transaction\",\"request\":{\"url\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"headers\":{\"Referer\":\"https://bysezejataos.com/\",\"User-Agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"transaction_info\":{\"source\":\"url\"},\"measurements\":{\"fcp\":{\"value\":956,\"unit\":\"millisecond\"},\"ttfb.requestTime\":{\"value\":0,\"unit\":\"millisecond\"}},\"platform\":\"javascript\",\"event_id\":\"b8eff66c080b42f0b8915f480a88df23\",\"environment\":\"production\",\"release\":\"0.1.17+7b8d37d4\",\"sdk\":{\"integrations\":[\"InboundFilters\",\"FunctionToString\",\"BrowserApiErrors\",\"Breadcrumbs\",\"GlobalHandlers\",\"LinkedErrors\",\"Dedupe\",\"HttpContext\",\"BrowserSession\",\"BrowserTracing\",\"Replay\"],\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\",\"packages\":[{\"name\":\"npm:@sentry/react\",\"version\":\"10.27.0\"}],\"settings\":{\"infer_ip\":\"never\"}},\"tags\":{\"build_id\":\"0.1.17+7b8d37d4\"},\"breadcrumbs\":[{\"timestamp\":1767312649.075,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\",\"__span\":\"9967f3e3e0d9fa16\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.079,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://g9r6.com/assets/index-BzHJPym2.js\",\"__span\":\"906c0c7c331fdd70\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.079,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://g9r6.com/assets/LegacyLayout-DpyCdONU.js\",\"__span\":\"a9c5b8cc650454cd\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.338,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/playback\",\"__span\":\"93f93875e82e4809\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.437,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://g9r6.com/api/videos/1qe1g7mr305g/embed/settings\",\"__span\":\"932d444067ae2384\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.504,\"category\":\"ui.click\",\"message\":\"html.video-embed-mode \u003e body.video-embed-mode \u003e script[type=\\\"text/javascript\\\"]\"},{\"timestamp\":1767312649.61,\"category\":\"xhr\",\"data\":{\"method\":\"HEAD\",\"url\":\"https://g9r6.com/eur4q/1qe1g7mr305g\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312649.848,\"category\":\"xhr\",\"data\":{\"method\":\"HEAD\",\"url\":\"https://twdqlmthkayqht.com\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1767312650.393,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://my.rtmark.net/gid.js?userId=0082b2c14e92441dfda68175aa070f37\",\"status_code\":200,\"response_body_size\":65},\"type\":\"http\"},{\"timestamp\":1767312650.96,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/master.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"status_code\":200,\"response_body_size\":328},\"type\":\"http\"},{\"timestamp\":1767312651.08,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://e7cod.com/wrr?z=9809950\u0026p_rid=77ea90e1-0efc-4b00-a603-c5a5b041ac0a\u0026rb=R2Mt5AfwihYba0vaRl7enBVcVqHkFgsa4VOCmSfXGNpq3SFl482uFAJ17pZS7uL5cM02dCy1TJR3Ck7rA77cpdXEBRs80ZYdtLuEJ3PedM47GpPMei9MWzmQRGoPyjXpuTD75KpqDvoDqSlBobf2SxjfQgHacXKAZoPJa1YHx_Q3UiRDLj-IJiWz0ZxbsxdaniYkEWgFzNxnyoalHPoe04qIqppq9-bGImovcN_dgcFCR4XOAN7uL6aG8HdpJsCHK0X7hkk7pIL4kO_j5hX3qJytr22ahvx3mZlRAw==\u0026dmn=e7cod.com\u0026userId=0082b2c14e92441dfda68175aa070f37\",\"__span\":\"b1857b0346c22969\",\"status_code\":204,\"request_body_size\":3459},\"type\":\"http\"},{\"timestamp\":1767312651.264,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/index-v1-a1.m3u8?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"status_code\":200,\"response_body_size\":26887},\"type\":\"http\"},{\"timestamp\":1767312651.295,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/encryption.key?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"status_code\":200,\"response_body_size\":16},\"type\":\"http\"},{\"timestamp\":1767312651.638,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/seg-1-v1-a1.ts?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0\",\"status_code\":200,\"response_body_size\":1699904},\"type\":\"http\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=n3jrHYLqLjGjfcsf; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg10_=1767312652; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg9_=91.90.42.154; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:52 GMT\n__ddg1_=zDmwuWhX2BL4oBaTIzfw; Domain=.byse.sx; HttpOnly; Path=/; Expires=Sat, 02-Jan-2027 00:10:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 02 Jan 2026 00:10:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5fa5f19c82ee69babd7048353465cf37","sha1":"010f22275f2c2876459fdb8a15fd30cdd35c462b","sha256":"44526ed007d3eed1468708b234f02b3baa0544606a5103bf2c4bee74e01c5c8d","sha512":"e5798b4c1be5481130894761c66bfe053b8a313a76294c837d270ec27e969945dc8cad7866c12602a1564c07c579761f6b1ca1bb4496089c679388cff8884278","ssdeep":"","tlshash":"2e90043451dc571f5d31747fd75c07147c004511c505d505303550501515d11540d50d","first_seen":"2026-01-02T00:11:24.872492Z","last_seen":"2026-01-02T00:11:24.872492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/images/logo.svg","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69568cee-d4d\"\r\nexpires: Sun, 01 Feb 2026 00:10:48 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYu%2Fy5UF3h%2FJvbzirZJiOGoTOrX1dznnIG2xCUKN4ibD0OoPiEuKWs90BkORjLK8f%2Fk5em9MlhPSg1aOpGWwsyFnbbvyJws6GD0SkHdCvYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b760911bdc12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67a4d3aa9ebfb892e9911ca32dee276b","sha1":"7f66411bb3a1764312660ba202a48698d4a78aa7","sha256":"7526f8ecfb57bf1dbfd6611dbc72aef3865d4c9039723bb30734c19b37011b64","sha512":"25098754325c1e2b562297cc242f89857a39a121804489eedac72ad133a8b14b95d489b07af4fe64beb191019c49b8bbb6b5bb714e7850a7fa7b18c4f8bd4b11","ssdeep":"","tlshash":"cd611074a2b4e43ef518467cdb4168643b1c51d7a300960df42e57398f29887afaf7e8","first_seen":"2025-11-07T19:01:05.645293Z","last_seen":"2026-05-24T12:04:48.467211Z","times_seen":147,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysezejataos.com/assets/index-Bgynxpuq.css","fqdn":"bysezejataos.com","domain":"bysezejataos.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysezejataos.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:53:59 GMT","end":"Thu, 05 Feb 2026 10:52:41 GMT"},"fingerprint":{"sha1":"69:9D:B5:29:7D:2E:72:33:DF:53:80:62:E3:5F:D0:64:64:29:4A:CF","sha256":"AC:98:86:A9:9B:F3:6D:EC:3A:AB:1F:41:5D:F3:9B:74:9B:C7:B8:3F:96:91:3C:88:5D:42:65:36:DC:74:08:06"}}},"request":{"raw":"GET /assets/index-Bgynxpuq.css HTTP/1.1\r\nHost: bysezejataos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysezejataos.com/e/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 66313\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Jan 2026 08:18:14 GMT\r\nvary: Accept-Encoding\r\netag: \"69562dc6-10309\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 31 Jan 2026 10:24:49 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 49558\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsOIpdbHcZZvWWaemeziEIZne9PMunE%2B34UAMEEBHF4AnmViSsq6gp1DXPlJDJpHs2MAmY8J2lnFyV3KY3HZgjdYHCPpw8RETJhkItMdOCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b76090f4bc92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352154,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"63e65bac2951fca3fa97a64335221a3a","sha1":"0f54ae20f61f0d3c96aafe7204a5b1adeae30c06","sha256":"7e09402b0bc41cce8a96bb7ddadfebeb162cee20395106d04a3a07f601fb91d2","sha512":"d6dddfbfa12aab82c86fac3834e0393c0405404c472b5f2b642e4446f21a5f0fae5e055613a62f2da074182a46dadd3a739384afa12e7b5dce55a74c380f7f4b","ssdeep":"6144:gIgn/S3SYigENM6HN26QTnLRlz1ya/iy6:PTLRlz1ya/iy6","tlshash":"3274e976f651352ef063c65a54d0fb9ea42a8102d6130bedf92777644f8a2cb0a73e4c","first_seen":"2025-12-31T23:09:26.662826Z","last_seen":"2026-01-06T08:52:12.475469Z","times_seen":30,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"bysezejataos.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sentry.byse.sx/api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0","fqdn":"sentry.byse.sx","domain":"byse.sx","tld":"sx"},"ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysezejataos.com/e/1qe1g7mr305g","date":"2026-01-02T00:10:47.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.byse.sx","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 13:03:45 GMT","end":"Wed, 01 Apr 2026 13:03:44 GMT"},"fingerprint":{"sha1":"22:AE:E1:F7:30:10:68:48:A6:C3:6A:7D:3C:59:46:6A:A9:B2:BC:59","sha256":"58:CD:DE:E8:E4:2C:26:AA:4F:9E:DC:E8:2A:CA:16:B0:0B:03:90:CF:B5:E1:27:B0:E0:7F:DC:4D:45:5F:5C:89"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0 HTTP/1.1\r\nHost: sentry.byse.sx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysezejataos.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 435\r\nOrigin: https://bysezejataos.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":435,"data":"{\"sent_at\":\"2026-01-02T00:10:47.692Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"ea4d190ba90e4f3087b7082541d8837e\",\"init\":true,\"started\":\"2026-01-02T00:10:47.691Z\",\"timestamp\":\"2026-01-02T00:10:47.691Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"0.1.17+7b8d37d4\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iDrWCqKl8YSei5Zs; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:47 GMT\n__ddg10_=1767312647; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:47 GMT\n__ddg9_=91.90.42.154; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:47 GMT\n__ddg1_=Lfe3jtHvBKRD3oDiwpeK; Domain=.byse.sx; HttpOnly; Path=/; Expires=Sat, 02-Jan-2027 00:10:47 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 02 Jan 2026 00:10:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-02T18:05:30.125322Z","times_seen":695718,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":81,"dns":1,"connect":20,"send":0,"wait":120,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-Bgynxpuq.css","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/index-Bgynxpuq.css HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Jan 2026 04:21:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 04:24:14 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 71194\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxjx7t%2Bmuv2AG2egrYoSdpD3Ayeo5crkDi%2FEOUjFBvMlVwtIjonfHoGBLsqaUjeUSALj8t3rlCy5TdRkbUJ6l1Klfl0KMQ%3D%3D\"}]}\r\netag: W/\"6955f633-55f9a\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609163905b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352154,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"63e65bac2951fca3fa97a64335221a3a","sha1":"0f54ae20f61f0d3c96aafe7204a5b1adeae30c06","sha256":"7e09402b0bc41cce8a96bb7ddadfebeb162cee20395106d04a3a07f601fb91d2","sha512":"d6dddfbfa12aab82c86fac3834e0393c0405404c472b5f2b642e4446f21a5f0fae5e055613a62f2da074182a46dadd3a739384afa12e7b5dce55a74c380f7f4b","ssdeep":"6144:gIgn/S3SYigENM6HN26QTnLRlz1ya/iy6:PTLRlz1ya/iy6","tlshash":"3274e976f651352ef063c65a54d0fb9ea42a8102d6130bedf92777644f8a2cb0a73e4c","first_seen":"2025-12-31T23:09:26.662826Z","last_seen":"2026-01-06T08:52:12.475469Z","times_seen":30,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/LegacyLayout-DpyCdONU.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/LegacyLayout-DpyCdONU.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/assets/videoPagesBundle-BJU5jZ29.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW5QEZtTIRMSQ0g0eP0%2FN0tFlpXP4kAxwD5Sjl%2FjHoWa2t2luiUdS22VsRvdv9zpxda45L8LHisbDQgKLpAMQ0OOjLHEyA%3D%3D\"}]}\r\netag: W/\"69568d08-a7eb\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609190abfb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42919)","md5":"4c8bad26acd6d578d44459f497c9e391","sha1":"49216a51d03195fba114852737be53e2fe21e556","sha256":"d11e25224784ed7567f4782a6e8582dfa7116c7009af7e7cd31ef89bca9f7ddb","sha512":"24f12a1cc5e5cbe44a88ae29cc94607a219d336ed2834d4dee7782a43c30e8417ed1e3457f955ef747f63486c2b9d1fcb85fb5d8dd266b4d3920eead1ceb7e3b","ssdeep":"768:LowhmFf6+VYU1iBTvCJQSntOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0ZHk6EucVA:EYZZ+v2tNQ6KJEoh1xt5ehD","tlshash":"ab13e948e1589ebefda708c5f5af5014b15f0a58fe0e48e0e2bf58280275949f75bbc8","first_seen":"2026-01-01T23:29:06.290288Z","last_seen":"2026-01-02T00:11:24.825073Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/eur4q/1qe1g7mr305g","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"HEAD /eur4q/1qe1g7mr305g HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-b1d8bf9120aa7615-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ0a0h2tUnnOvdkd%2BLsVnESZ%2BjTg%2FTiVC6gC51d%2BB%2FqCZ5kORKIjODbE9DQhtSNWZuh5qxfwKQMch7fd88%2B735LEgA3anA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b76091b6c84b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fin-3dg-b1.i8yz83pn.com/hls2/03/10583/1qe1g7mr305g_x/encryption.key?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0","fqdn":"fin-3dg-b1.i8yz83pn.com","domain":"i8yz83pn.com","tld":"com"},"ip":{"addr":"185.237.105.49","port":443,"asn":203973,"as":"Eurolir OU","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:51.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fin-3dg-b1.i8yz83pn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:48:53 GMT","end":"Mon, 05 Jan 2026 14:48:52 GMT"},"fingerprint":{"sha1":"67:BF:D4:F7:DC:11:B8:FE:A2:5C:16:B7:ED:20:98:6C:53:29:26:DE","sha256":"97:A3:AE:91:7A:44:20:A3:AA:9C:D0:15:01:B5:20:4F:32:CF:8D:47:3E:45:F5:65:7C:72:82:00:45:AC:6A:F5"}}},"request":{"raw":"GET /hls2/03/10583/1qe1g7mr305g_x/encryption.key?t=qVv8PNiIj6GonofZD4FEWaFArdXdh41TZfg7Cy4_fwg\u0026s=1767312649\u0026e=10800\u0026f=52916729\u0026srv=30\u0026asn=50304\u0026sp=5500\u0026p=0 HTTP/1.1\r\nHost: fin-3dg-b1.i8yz83pn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 00:10:51 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 16\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Nov 2000 08:52:00 GMT\r\nExpires: Sun, 04 Jan 2026 10:54:56 GMT\r\nETag: \"5f693e80-10\"\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=259200, no-store, no-cache\r\nSprint-Cache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"cb8332953ea34874e8f28643965b0b24","sha1":"445bb5beaf0a5d48f2893b9c9e10142126b1eed1","sha256":"295599261e6359a31fa24413c708e2b46928c8bbec67e23cb89d7e0f1e689997","sha512":"6c75a2a7f33b3ead4a292deca8200dbae23f4eff12a8c38a514feb370feaa3b5e035ae2db1bcadcb27ac3f81b5b58d70b093ead7e7ca867d4123b21b1362df68","ssdeep":"","tlshash":"ad6000300300c0000cc30c30c00000c0000f000cc00fc03000f3c00330033000030000","first_seen":"2026-01-02T00:11:24.878662Z","last_seen":"2026-01-02T00:11:24.878662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sentry.byse.sx/api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0","fqdn":"sentry.byse.sx","domain":"byse.sx","tld":"sx"},"ip":{"addr":"190.115.16.4","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:54.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.byse.sx","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 13:03:45 GMT","end":"Wed, 01 Apr 2026 13:03:44 GMT"},"fingerprint":{"sha1":"22:AE:E1:F7:30:10:68:48:A6:C3:6A:7D:3C:59:46:6A:A9:B2:BC:59","sha256":"58:CD:DE:E8:E4:2C:26:AA:4F:9E:DC:E8:2A:CA:16:B0:0B:03:90:CF:B5:E1:27:B0:E0:7F:DC:4D:45:5F:5C:89"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=0cd7ea3076805f8201eee7a39f2e520e\u0026sentry_client=sentry.javascript.react%2F10.27.0 HTTP/1.1\r\nHost: sentry.byse.sx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1561\r\nOrigin: https://g9r6.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1561,"data":"{\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.27.0\"}}\n{\"type\":\"trace_metric\",\"item_count\":2,\"content_type\":\"application/vnd.sentry.items.trace-metric+json\"}\n{\"items\":[{\"timestamp\":1767312649.104,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"span_id\":\"8c2faf8602144f2e\",\"name\":\"frontend.route.view\",\"type\":\"counter\",\"value\":1,\"attributes\":{\"path\":{\"value\":\"/eur4q/1qe1g7mr305g\",\"type\":\"string\"},\"embed_route\":{\"value\":\"true\",\"type\":\"string\"},\"sentry.release\":{\"value\":\"0.1.17+7b8d37d4\",\"type\":\"string\"},\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"sentry.sdk.name\":{\"value\":\"sentry.javascript.react\",\"type\":\"string\"},\"sentry.sdk.version\":{\"value\":\"10.27.0\",\"type\":\"string\"},\"sentry.replay_id\":{\"value\":\"344d7bb5e80c4b7eb1e2b93afbbf2fd5\",\"type\":\"string\"},\"sentry._internal.replay_is_buffering\":{\"value\":true,\"type\":\"boolean\"}}},{\"timestamp\":1767312649.106,\"trace_id\":\"7621de4ab0bb419ca66f2ef46db033b7\",\"span_id\":\"8c2faf8602144f2e\",\"name\":\"frontend.route.render_ms\",\"type\":\"distribution\",\"unit\":\"millisecond\",\"value\":73,\"attributes\":{\"path\":{\"value\":\"/eur4q/1qe1g7mr305g\",\"type\":\"string\"},\"embed_route\":{\"value\":\"true\",\"type\":\"string\"},\"sentry.release\":{\"value\":\"0.1.17+7b8d37d4\",\"type\":\"string\"},\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"sentry.sdk.name\":{\"value\":\"sentry.javascript.react\",\"type\":\"string\"},\"sentry.sdk.version\":{\"value\":\"10.27.0\",\"type\":\"string\"},\"sentry.replay_id\":{\"value\":\"344d7bb5e80c4b7eb1e2b93afbbf2fd5\",\"type\":\"string\"},\"sentry._internal.replay_is_buffering\":{\"value\":true,\"type\":\"boolean\"}}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XJkomGLUeBqpabKA; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:54 GMT\n__ddg10_=1767312654; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:54 GMT\n__ddg9_=91.90.42.154; Domain=.byse.sx; Path=/; Expires=Fri, 02-Jan-2026 00:30:54 GMT\n__ddg1_=QR8XrWMXto8T4Vcb0EiJ; Domain=.byse.sx; HttpOnly; Path=/; Expires=Sat, 02-Jan-2027 00:10:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 02 Jan 2026 00:10:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-02T18:05:30.125322Z","times_seen":695718,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"sentry.byse.sx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-CrTzQ-WO.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/index-CrTzQ-WO.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:51 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32756\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqTNHXDf99ClPwIjQHbZxkchi62neXa0L%2FeoL0TtgDJg%2FBNQgVlNIfcA%2FJjkbtKN5Rtf%2FjaPbYFYovRmvuEaOJW7nBYmKw%3D%3D\"}]}\r\netag: W/\"69568d08-74501\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609163904b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49911)","md5":"832693c16b88d0f73d7eb155361703e4","sha1":"9ffab11322b41d91c39e7b82a2c6666cd2962e0f","sha256":"c0d41b4198a23699a84316fad28db930eec26303f41bf6b1d8d8c23fec707f8e","sha512":"92344119b0b200b67ef9a390f773bbf1bb0ee4de24ccbc034a55154d43254ed9cab42913ececd661b2cccf14d632006febc1a6c6df45da78d07146ed2d2b9ecd","ssdeep":"6144:nPZO+bScD3YJbQfO+N7Cn9b1AiUN/x4/k9nkwS96+aNk+bkDZya7:nZDrNY9xAiUN/x4c9r26+aNk+bkDF7","tlshash":"02a43cdc71a6717267e706a5507b0203b3391912384d84a0f12dddef7ab9806a2b7fbd","first_seen":"2026-01-01T23:29:06.337979Z","last_seen":"2026-01-02T00:11:24.816767Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/videoPagesBundle-CVR9WjYW.css","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:48.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/videoPagesBundle-CVR9WjYW.css HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 05 Dec 2025 22:29:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Jan 2026 22:49:43 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 2337665\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufkq4KD4JDL3g4pD%2BDwfcP0ePlMa1qCAwRipRoItbmlt8wdqDHUynckEMz1C%2BaVMPDn8XhlZfdFUdIebTTWCcqUWaxVNvA%3D%3D\"}]}\r\netag: W/\"69335cc8-4a16\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609183a43b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18965)","md5":"79e53f4dcc9656ac16dd05aa6087e79c","sha1":"3e7e99d5d9fbb597e58e330ff43bdaf528c5283e","sha256":"1fb218d07c797ed9af02cf070fbaaafe1cef61a05aeb835e3b85cdbc9516dc68","sha512":"05a4b89eebf9aeaa018dff2a909077ddb4feac8ebc1cf2e0b7780568c64158ae630a859e89c3e7ac359a4b58c75cc367a4003d19329ef02de53c5bc670794fe8","ssdeep":"192:AebfIKjwoShGQ89hzf/Xx3tJ3foTuLkbL86YplGBfIs90NZtt2fwaJotQSHqB2:Ae7NFfzHFtDQ6zH/3","tlshash":"f6822421d625de1db52bc09a7cd0468ef8654205f22343f9c9a3a3664f8a1cf9b732cd","first_seen":"2025-12-07T05:24:19.704632Z","last_seen":"2026-01-13T06:55:59.834035Z","times_seen":131,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g9r6.com/assets/index-BzHJPym2.js","fqdn":"g9r6.com","domain":"g9r6.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://g9r6.com/eur4q/1qe1g7mr305g","date":"2026-01-02T00:10:49.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9r6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 15:29:03 GMT","end":"Thu, 05 Feb 2026 16:26:38 GMT"},"fingerprint":{"sha1":"1B:A7:70:8F:78:99:D4:3D:59:77:44:16:7D:FB:D8:83:FD:7F:1E:A3","sha256":"4F:AB:99:7F:D7:D6:30:F9:4E:18:15:5F:DA:EE:6D:1F:CC:2B:D3:56:5D:B6:36:D1:43:74:14:3C:09:4D:D0:39"}}},"request":{"raw":"GET /assets/index-BzHJPym2.js HTTP/1.1\r\nHost: g9r6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g9r6.com/eur4q/1qe1g7mr305g\r\nsentry-trace: 7621de4ab0bb419ca66f2ef46db033b7-906c0c7c331fdd70-1\r\nbaggage: sentry-environment=production,sentry-release=0.1.17%2B7b8d37d4,sentry-public_key=0cd7ea3076805f8201eee7a39f2e520e,sentry-trace_id=7621de4ab0bb419ca66f2ef46db033b7,sentry-sampled=true,sentry-sample_rand=0.02159728565639596,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 00:10:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 15:04:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 31 Jan 2026 15:04:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 32755\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0IEyx0rMcxWSadp%2BvmNc7AeNZnCevmH%2FxPnmb5G3cHAu7GtD0wSmyhmatwpwW2RhYZzXioNx3G42aGqm6HjrEKFecd70Q%3D%3D\"}]}\r\netag: W/\"69568d08-2fc4\"\r\ncontent-encoding: br\r\ncf-ray: 9b7609186a60b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12184)","md5":"e1d8e62519ded5234b793abac296b2a7","sha1":"4347c0e7b7b0de0c25d83c9984b85a4601339034","sha256":"5894df84bce3142f7de7cc265ce454fbcb64ce81355a5a2beaf6732d3c9291c5","sha512":"6292b42abf5f800c8a22fa816456a268766d3fd7eec52efa4ffb7f040e52c20f2647e9e0e5f68da5396ccb0bf93e8e3f14ed86934ddee6ae80dcc4f3c54a47ad","ssdeep":"192:H/MjQ7cQL9fgeoVlWDN2qH1qL3gl1Ij/5uiadlkFE2rkodGlSkGJPXtC4/EOYTzm:fMjQgo9fXoON2+1eQw1aoVrkqGlmPXtD","tlshash":"bb42eb50eab6743103722095907d6213a227881d7cbd95d0f36a4f3f27d984a6a3efbc","first_seen":"2026-01-01T23:29:06.322617Z","last_seen":"2026-01-02T00:11:24.815062Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"g9r6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
