{"report_id":"231c3c0a-6640-43d2-8218-0a7a8a4815ab","version":6,"status":"done","tags":[],"date":"2025-09-06T03:34:17Z","url":{"schema":"http","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"104.21.29.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"title":"سيما كلوب ـ مشاهدة الأفلام و المسلسلات أون لاين"},"submit":{"url":{"schema":"http","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"104.21.29.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-11T03:34:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"xy.cobaltsottawa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2025-09-01T11:29:36.094815Z","alert_count":0,"request_count":5,"received_data":1714159,"sent_data":2669,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xy.cobaltsottawa.com","ip":{"addr":"23.109.170.98","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-16","domain_rank":5683955,"first_seen":"2025-06-12T17:37:42.728792Z","last_seen":"2025-08-27T18:53:28.824587Z","alert_count":1,"request_count":1,"received_data":1449,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":1,"received_data":23899,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-09-04T19:47:25.0413Z","alert_count":0,"request_count":1,"received_data":837,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":2,"received_data":14095,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cimaclub.watch","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-27","domain_rank":740954,"first_seen":"2018-08-07T08:53:57Z","last_seen":"2025-06-11T21:33:43.171558Z","alert_count":0,"request_count":18,"received_data":1961119,"sent_data":9453,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2:9","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.159.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-03T15:27:27.695589Z","alert_count":0,"request_count":1,"received_data":68371,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-03T16:13:25.30858Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cimaclub.video","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-04","domain_rank":0,"first_seen":"2025-06-11T21:33:42.645341Z","last_seen":"2025-06-11T21:33:42.645341Z","alert_count":0,"request_count":1,"received_data":5249,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-03T15:12:59.606072Z","alert_count":0,"request_count":1,"received_data":418536,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amt3.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2004-03-18","domain_rank":8122,"first_seen":"2025-04-23T17:00:21.322227Z","last_seen":"2025-09-02T04:19:13.419105Z","alert_count":0,"request_count":2,"received_data":1658,"sent_data":1184,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-09-02T11:31:35.993012Z","alert_count":0,"request_count":2,"received_data":221726,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c960d71208c1d94eeba48b44ecb6c7b","sha1":"18734bb47635908c852b240f8826c575aa86291a","sha256":"c4075ecba81e67c3511e481586cd5f7f66de18ac2fea09580302637eb95c97ea","sha512":"33bc7a97494c18ee58a2f0f0af2bf07a9ca3ac73ba4044cc27f94f8e2083714b4d3cd59e7dab4b5e62ac521243269440739f62d451521cdaf0320ad108a14cfa","ssdeep":"768:PCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt3f:KITMFC4dbMVRSGcgRDx","tlshash":"10138246b3202d2a869b61e0663f160bb23a241de414507d7979a6de6d7dc8c213ffbc","size":44688,"data":"","first_seen":"2025-06-11T21:33:44.960396Z","last_seen":"2025-09-06T03:34:21.272521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67a8112197496c14785d210be96a2c3f","sha1":"b0d77bf8de8a3fb1bde5c7c11a59aac79d2548ec","sha256":"f45a7476d7bee3be2f0c92244e019355a6ea6d8f06ed550fd0c84e7d3e894b72","sha512":"37697170ff00cd70905a16ba1481350d6a31ed8d9e12438ec050059d40bf40194da7a92fd4e83ef8b51d6b1a4c50fba738724a473eb2e120424a25e83fc8ea34","ssdeep":"","tlshash":"0fe02b1d98e71a384cf67d445079da7934fc78a49aa3e02b555cc87cc939fd44c14aec","size":427,"data":"","first_seen":"2025-06-11T21:33:44.961723Z","last_seen":"2025-09-06T03:34:21.273535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72647d21adff42aec4a3f5cea93b437f","sha1":"cf58b493e5a02fcd6925c4dd2a8127e157a03879","sha256":"c1762d626e2393a8a27d12683e03e43e309afdc1629ed641cde2b1b54c7fb215","sha512":"fa58973a6c0ddadccb8366d1c1c2daa481a684b613658e5f7c0f1eadd670534555f45c46cfacae178897792e71efe2c023c3c57126dfdb42d929fd52f1ea34f1","ssdeep":"","tlshash":"7451035a77f7043008bb752ad3af7b847936550b4644ee143c9d07840fcaa60a5f6bf6","size":3117,"data":"","first_seen":"2025-06-11T21:33:44.962757Z","last_seen":"2025-09-06T03:34:21.274435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"944e420ff239071bf9c2b7f2ca7130fb","sha1":"c9724adfd7b17aa23deb6d5f5a629889390f54c3","sha256":"4116e9aadeedec1c942b37a0c4ceb1eaba202a095f4f22dea5a7641b46ded801","sha512":"bd970367fc33fa2ba18c99e2230698f4ccc2f68276dc4467bddc4007fa1564a3edb1743f062665fc9e4424f48f4c9ce41602eed0631a4865c0abfe09391c3985","ssdeep":"","tlshash":"5c31eef7f72c5eab813015a3880d2de9648c5c379e011c6ffce63100a4a2938ba6562e","size":1850,"data":"","first_seen":"2025-06-11T21:33:44.963845Z","last_seen":"2025-09-06T03:34:21.276643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MXGV0QDHM5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55865944b7518b7c18061c25761f159b","sha1":"eaa348c7be02ae81ce351338a635357814d61b86","sha256":"bc9b926a88265c50c2a1524db3fd4f316afba7de2134c1b272ba7f5798695c40","sha512":"71220a0c8f44a76c917eef82c606e1ec10a3dfa5564059f5c9a6668a0f7ebac3ded5abb14f07332c2a4bc4e34a6b274e7161606831acb7556772996098fb6362","ssdeep":"3072:TN+wFceVWD8CMF840h0W00/ZPmY8mT1EQgqlRAxtNuyGtlk8wqiuJ+OC4Pt9icsC:R5PF83nP/RAj8wNtOC419uD0jrzH","tlshash":"c49419ce73c670269396e474503f018ba57b29a2f45cc899f189cce42e74a9a4177f7c","size":417535,"data":"","first_seen":"2025-09-06T03:34:21.26466Z","last_seen":"2025-09-06T03:34:21.26466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe014464e088b9b1254b3c8bd183b0f","sha1":"10ae224dea3a980fcb9baf270ea915f23fa04832","sha256":"c67d4f23e9cd51410978dfa0f93c117f5f2ffbe258fbd1633d75e463f287d0ce","sha512":"2929ab906046cd985c85680a29a1af8ed0a9be313688087e30173069eb4aa95700c1a2b1293f83ad8a3bd60f84566ebc59b51d7337ed569b3ea1a456b09864dd","ssdeep":"1536:F6KpKfzIHKJYl2MGRCYWNZ2ClqIZPgAz0Sjf654+DIVV2P6O2e:IK5KJe2GN2ncr0Sz6+3o6O2e","tlshash":"40b32aca226a241612bf80344457ed1db5aecd81048dcdb8e0e5b8762d78b16d3fbfd9","size":109669,"data":"","first_seen":"2025-09-04T15:16:46.265909Z","last_seen":"2025-09-06T03:34:21.240732Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T00:24:09.153801Z","times_seen":444653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xy.cobaltsottawa.com/rQowJ5LedyVFw/LrNQV","fqdn":"xy.cobaltsottawa.com","domain":"cobaltsottawa.com","tld":"com"},"ip":{"addr":"23.109.170.98","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-03T23:51:28.172598Z","times_seen":14773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e84d628cbf7b4f1bd148c963de021a6","sha1":"34b985a6d84ae43279940ac7cbb332754e9c85b0","sha256":"6b53e3405760cfd5a3522e1daf7d23bbbf0abcac13ec7557303ee100311dbb7a","sha512":"00f9a49ccde012035b881fd6ca8e3fd237fc8c45e5bce553ecd9cb2be08153b2b7c3a0147237e4263647a7503a21aeb287c57d1fcdf77a53da73c7587d36d3e8","ssdeep":"","tlshash":"2bc02bcd310a0c7081fb27408b3fba00f0033314a4d1b9318c0d33445d30e03eb44810","size":153,"data":"","first_seen":"2024-04-28T21:41:09Z","last_seen":"2025-09-06T03:34:21.278442Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff336211c4ce713c109721210bff9d40","sha1":"5d4d699f1908fb4b093fe5a6fc6bfba5c58429a8","sha256":"02bd767ccdeee4b0dd1cab9de1bc6d67f2ad25e043c68f27330631fa6fc6839f","sha512":"c3aafdffe851c77692fe8d886ea2a602642def79c9ce3b74f05adac0c2d3a87dbfeffb16f90258d778595773dac697d3961430b9cd251df37cfe34c0d08bc4d2","ssdeep":"","tlshash":"fbc080b565e5d530546400da3077d7e57c74311875537080c49dbd1c9574fd30d91c75","size":179,"data":"","first_seen":"2025-09-06T03:34:21.280178Z","last_seen":"2025-10-22T12:39:08.870652Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe014464e088b9b1254b3c8bd183b0f","sha1":"10ae224dea3a980fcb9baf270ea915f23fa04832","sha256":"c67d4f23e9cd51410978dfa0f93c117f5f2ffbe258fbd1633d75e463f287d0ce","sha512":"2929ab906046cd985c85680a29a1af8ed0a9be313688087e30173069eb4aa95700c1a2b1293f83ad8a3bd60f84566ebc59b51d7337ed569b3ea1a456b09864dd","ssdeep":"1536:F6KpKfzIHKJYl2MGRCYWNZ2ClqIZPgAz0Sjf654+DIVV2P6O2e:IK5KJe2GN2ncr0Sz6+3o6O2e","tlshash":"40b32aca226a241612bf80344457ed1db5aecd81048dcdb8e0e5b8762d78b16d3fbfd9","size":109669,"data":"","first_seen":"2025-09-04T15:16:46.265909Z","last_seen":"2025-09-06T03:34:21.240732Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"942c6f521e75fd2706c278432180a75b","sha1":"ef87e65d4e8b288a1569939938fef1f1b3c8986b","sha256":"c22c548a65b28c51924775ff4d638ac9a30ba71825ff258f9a82538d2a821681","sha512":"fd9e0a7eae7bad8ab8ccd29bd8a839c6ff90b12f1c9c73fb32556fd5e9a55a0336280c4e750a3c7a2d96de3e2eb3ce3fe3bf632d0ff8d15fd5f3bc56cf81a552","ssdeep":"","tlshash":"58c0c0b168e48830102400ca3076d7e43c30310875527080c49dbc1ca530fd30c91c70","size":179,"data":"","first_seen":"2025-09-06T03:34:21.281615Z","last_seen":"2025-10-22T12:39:08.872039Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@9","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c0de18caa00c8ea26099fb8cd50b05a","sha1":"b81e4affd6f879f32d6027e404cf477257663c39","sha256":"1cea8f5e200fcfc0e1d1b0797151f138faa548d850f9dde66a43424eb93f9450","sha512":"87f86a1120219010ce81cb71c7925fe5803abd4bfc9dcbdbbd39e0e9ec3a44ecd95ad8186bbfd823b0ae80d38ce5c7c13612dd1aa54de9ae9e0db11425e13f4e","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGc3BfwX:LaSBrL4K2NgdkdALdWaRFfsEX9wCO","tlshash":"f163f6857a403123a6ab417968ebe309b6b5a542fc330c54f129d0944ffbe8f1573bb9","size":67597,"data":"","first_seen":"2023-03-08T15:28:13Z","last_seen":"2026-04-03T01:19:26.453177Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b1c1842ce8f62e52e765b8a86580ba7","sha1":"3287568ee52fd998da16b73c3866fe7e72ee3ec6","sha256":"4e32fba6c37d99095ee281f69fbf77938c5ead14b9f099896d3822009e12eb7d","sha512":"4fd52b7e088d1a4191f3db39ccf6ab4b6e57315277a22c3af6574693a272cc2b631077acb255d6c0d54ba846285bae1ac9446f956d901316b2d3282bb34e76cd","ssdeep":"","tlshash":"51e02b19a8e71a384cf67d445079da7934fc78a49aa3e02b955cc86dca39fc44c14eec","size":427,"data":"","first_seen":"2025-06-11T21:33:44.96883Z","last_seen":"2025-09-06T03:34:21.282745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"amt3.com/5/9417984/?oo=1\u0026js_build=iclick-v1.1565.0\u0026userId=08023c4a632c44bdeb5362223281708f\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"amt3.com","domain":"amt3.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amt3.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 05:21:33 GMT","end":"Thu, 09 Oct 2025 05:21:32 GMT"},"fingerprint":{"sha1":"4F:52:B5:E1:62:6B:8E:6A:12:14:9C:87:72:1B:0C:49:B6:1B:B3:DD","sha256":"60:A1:B7:F3:D5:3A:87:F3:6A:F6:90:C5:70:D6:FD:50:C1:44:A8:9F:C9:62:EA:57:E1:E2:29:B4:19:91:E9:F5"}}},"request":{"raw":"POST /5/9417984/?oo=1\u0026js_build=iclick-v1.1565.0\u0026userId=08023c4a632c44bdeb5362223281708f\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: amt3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2567\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://cimaclub.watch\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Changa:wght@200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Changa:wght@200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Sep 2025 03:33:54 GMT\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11872,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"31a8311140f6f18bf4b5e0442f8a954f","sha1":"f600ae0226b91feacbbdbe5ce953df5b81551832","sha256":"70c2f9d3d8242ef805f2ebf363c777fd0a28a1b2fa20d1dae810cc109c7ebc7f","sha512":"baeb386269e6940fd4114c00b060c0151ba999b159e077faf4454f41a38843019013079d3a76d39066d8a7c554be1be482a4bdff0abac093aabb0a98829f4f67","ssdeep":"192:sNClEEBXNClrES+NClKEz9NCl5Es0NClAEVbNClnE2yNClmE37:nlmlFlwl/l6lRl5","tlshash":"69327de0482e4184bb875dc163cd6e37de1ea1a56484896c8bfe1b8f9cdbc26736174c","first_seen":"2025-06-11T21:33:44.94322Z","last_seen":"2025-09-06T03:34:21.239234Z","times_seen":23,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":119,"dns":2,"connect":8,"send":0,"wait":19,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b8306ee7787-419040.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b8306ee7787-419040.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:45 GMT\r\nlast-modified: Wed, 03 Sep 2025 12:11:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31210\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYEJrtM%2Bl%2F7rkaD85avBl%2FXp%2FeSdbDC%2FELZNYP8p6zB%2BlJofgtwMg%2FCODHjwij0e3ndqOjIy78%2F4mJ0aLVhFU7bCOYAnY8LyChuhpspk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8642c180731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 13:23:26 GMT","end":"Fri, 10 Oct 2025 14:20:28 GMT"},"fingerprint":{"sha1":"DF:7D:EC:90:65:7B:61:05:0F:26:73:61:2A:67:56:6C:02:BE:E6:37","sha256":"EE:7C:E3:AA:6A:07:F1:9C:E0:54:C5:14:46:57:0B:D6:3D:99:AF:49:70:A6:62:E4:7A:22:26:DC:8F:F8:74:AD"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: bb21fc373bbfd789ae6851c892a2819c\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 271\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 06 Sep 2025 03:29:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVRB%2F6AD6siVJgw5%2FgfPNJdUSxPEuKa79j4m9ZkDJe5M309p5fOuTxyr2hJ5EDtliamoevNGIDs1%2BgkETelOx0GuGCgJnw%2BZwQ%3D%3D\"}]}\r\ncf-ray: 97aae85cdfcedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cbe014464e088b9b1254b3c8bd183b0f","sha1":"10ae224dea3a980fcb9baf270ea915f23fa04832","sha256":"c67d4f23e9cd51410978dfa0f93c117f5f2ffbe258fbd1633d75e463f287d0ce","sha512":"2929ab906046cd985c85680a29a1af8ed0a9be313688087e30173069eb4aa95700c1a2b1293f83ad8a3bd60f84566ebc59b51d7337ed569b3ea1a456b09864dd","ssdeep":"1536:F6KpKfzIHKJYl2MGRCYWNZ2ClqIZPgAz0Sjf654+DIVV2P6O2e:IK5KJe2GN2ncr0Sz6+3o6O2e","tlshash":"40b32aca226a241612bf80344457ed1db5aecd81048dcdb8e0e5b8762d78b16d3fbfd9","first_seen":"2025-09-04T15:16:46.265909Z","last_seen":"2025-09-06T03:34:21.240732Z","times_seen":20,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":99,"dns":32,"connect":5,"send":0,"wait":8,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/webfonts/fa-solid-900.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 21:04:01 GMT","end":"Fri, 21 Nov 2025 22:03:57 GMT"},"fingerprint":{"sha1":"CC:FF:C9:AB:7D:4F:0E:BD:2F:0D:51:59:D6:60:F9:CD:7D:68:E5:4B","sha256":"EF:79:B2:3F:26:48:FD:84:D5:42:BF:1E:35:73:D2:4A:8A:DB:54:C5:37:B0:F6:75:31:FE:6A:BC:D5:8A:F4:C2"}}},"request":{"raw":"GET /releases/v6.1.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 329204\r\ncf-ray: 97aae85cd9f65ebd-OSL\r\nx-amz-id-2: QrjPpzWPG/VH0ERHdtOcGhhSzqfMcB/BZpBakFlXySI9+/veyI0xDQJXao/gOgdcuBaBx7hn5jeCPUbgBxrhGMFnWwADoQWAKYEx54oERsY=\r\nx-amz-request-id: 8PJXFRCGKBD7XVDY\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 22 Mar 2022 15:42:55 GMT\r\netag: \"6ebcf9f18ded9c54f71ec1198c32aa52\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 392293\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 329204, version 769.768","md5":"6ebcf9f18ded9c54f71ec1198c32aa52","sha1":"06695b645047b29c333edac0c78a97922a135ad9","sha256":"f350c708b5e7748a452b4b98600fa49127166d995686e260ccafb58d51a4ea62","sha512":"3e1d714cb85f332718496fb050df282f71a0979ea71884bde441e229682070bfc66cc3633dd89bd47ade6f50f808e94cc5d8860a4938de7b29427a43b938e042","ssdeep":"6144:mBnb+K2f2sr8Yf7thk3sZ9Md1Mr+4nifNKrGMGG/64fTioUkqRaEwB:mp+Qsr1fw3n4rBifNKrnR/64fuoUveB","tlshash":"8a6423e105a419496eb5b1b9103f2162e20464bf69f29c7fb2b8f33931eb35e5052f27","first_seen":"2023-04-06T19:37:17Z","last_seen":"2026-04-03T19:20:48.28419Z","times_seen":6668,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":77,"dns":1,"connect":1,"send":0,"wait":35,"receive":15,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-06T03:33:54.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siPdaGMVkRXhNWFLab%2BBiYmqpCQ%2BIul%2FGg1FSlCR0o3uf49Y6Tbztvcs7oU2R9ckdnNye%2BjPNwxBWSV536Wn%2FKS1Tb1TPsOrISwercd%2F\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 97aae855380821fe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2:9","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.159.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":303211,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63210)","md5":"a4eab40b8e376c5bff847285fbb5d104","sha1":"10972a012609e64e6dd64a654b6d93c16c433d3b","sha256":"16352fbe0ef2f0cbf57dab2db5f584babe26ee495e39aeefff245e0638880b43","sha512":"e7a2af9f27e72a9ab95d06ad43651d79a183d08e640d09fc5d66242d15f8cc367fc18379c6602626b42e0ca8462d2477c3039c8c4e4297da8dc37f3343af9c98","ssdeep":"3072:JrUztiRtAM1fgxoSZHRdkku6TXgJ3Vc8iK9aHGWTM3/sCEczvpGl5UOw2pYEJA6D:JrMtdJCwJmwO0","tlshash":"d6540912931c48265037d2c1ae501648f27deb3ef6052aabf3ee0569fb97cd5612b36c","first_seen":"2025-09-06T03:34:21.243041Z","last_seen":"2025-09-06T03:34:21.243041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":30,"dns":8,"connect":1,"send":0,"wait":131,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 21:04:01 GMT","end":"Fri, 21 Nov 2025 22:03:57 GMT"},"fingerprint":{"sha1":"CC:FF:C9:AB:7D:4F:0E:BD:2F:0D:51:59:D6:60:F9:CD:7D:68:E5:4B","sha256":"EF:79:B2:3F:26:48:FD:84:D5:42:BF:1E:35:73:D2:4A:8A:DB:54:C5:37:B0:F6:75:31:FE:6A:BC:D5:8A:F4:C2"}}},"request":{"raw":"GET /releases/v6.1.1/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: XHvR60/n7Gv2b37Xzye9Hpk0yQ44tmHqE7nLyWZR91VYFWeDzaMoMmzjfZ782QBNjGUW6Ydo+ZQ=\r\nx-amz-request-id: BRV2FFB17V36BDJ9\r\nlast-modified: Tue, 22 Mar 2022 15:39:41 GMT\r\netag: W/\"325672b036bab9b57f6873aed5eccc43\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 847749\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97aae858d87d56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65360)","md5":"325672b036bab9b57f6873aed5eccc43","sha1":"264f5db348311950380ad1bca79754ff593d87e2","sha256":"a35f901d01118e5649091bd03ac5784a7db52e111fb3806524c412f3d1dcfc5d","sha512":"50a041c49e4ddff318892b184e512c011b29e2f10b295448925103e0c6fac29b9514e832e4196dfac5d4773d530d17aa5ac9bae31c41036428049442c48d31e5","ssdeep":"3072:/r3CYP5vO+mDFwFyiFCIUMZ+sEx06eJls0ugtMHxx3/to4hQQ/:jCYVhmDeFyzPG6eJl9tMHD/toU","tlshash":"65b4e8a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2023-04-05T03:57:11Z","last_seen":"2026-04-02T03:17:13.541275Z","times_seen":6065,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":62,"dns":77,"connect":1,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b8652201692-419044.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b8652201692-419044.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:45 GMT\r\nlast-modified: Wed, 03 Sep 2025 15:56:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31211\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7LXX7o%2B2HoU94T7m3mM1bqpy3Pd0EFmxXkL0g4Qwew45zM7Qj%2BLAI3l2lNrblc9WCmiywVjedOwW%2B5u8G2RSAvKSySwCvV4GGI6ym8j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8641c120731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b8651fd9432-419042.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b8651fd9432-419042.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:45 GMT\r\nlast-modified: Wed, 03 Sep 2025 15:56:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31211\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijxxlRZDDvh4%2F5w8QDebamEy0fnBtq7wTm92mk9HrOiFsK1KNFKw59fsRqMNNiaQOorKGaunq1zVrusTRJTTB2%2BbLl7l1sZjbDDsv%2FCb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8642c170731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b83069efbed-419036.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b83069efbed-419036.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:57 GMT\r\nlast-modified: Wed, 03 Sep 2025 12:11:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31198\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tn1QONZMZlQ9yYpoxEzXRE71fR1%2BXYp0IV87MooRiwuq%2ByenzT%2FLeI0dGQt1OGtZ9iBAo6unARdDil4Me%2F62LI33cNGFc8OeZxl3tn4j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8642c1a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/webfonts/fa-regular-400.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 21:04:01 GMT","end":"Fri, 21 Nov 2025 22:03:57 GMT"},"fingerprint":{"sha1":"CC:FF:C9:AB:7D:4F:0E:BD:2F:0D:51:59:D6:60:F9:CD:7D:68:E5:4B","sha256":"EF:79:B2:3F:26:48:FD:84:D5:42:BF:1E:35:73:D2:4A:8A:DB:54:C5:37:B0:F6:75:31:FE:6A:BC:D5:8A:F4:C2"}}},"request":{"raw":"GET /releases/v6.1.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 388900\r\ncf-ray: 97aae85cd9f85ebd-OSL\r\nx-amz-id-2: 9jOmmnKWsc6MDJNG0pQCXvY1+G6aiXRVedjyVlbHOxu1RVQwHZrbNP9HXBAYovBbFY1ktvkAuQePuhTQtHe82MNo5y0en20i\r\nx-amz-request-id: Q8PH6ASCYG031X7Y\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 22 Mar 2022 15:42:55 GMT\r\netag: \"a927362a975051e5d7361d860d8ffba7\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 371929\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 388900, version 769.768","md5":"a927362a975051e5d7361d860d8ffba7","sha1":"6b97f2ea63d6e7e04006d0366b87697fb4a594d0","sha256":"121b176974226dbc9b1ab227becb657d40b88d2bb7010a746c2360c31d7c373e","sha512":"aa2a13e377d7079ab805ba67f2c3d013d38864b8ca0f47349559a99ba2a64fc937e0b33a82445c38e322d413a5da5a21146ffba7db7329f4cfe46e7adc142ad6","ssdeep":"6144:RYYFamiEXWy7gNtlIg/TWPJDg9+u5+BKhDnlKwLhsiXqU1af8vl1zMelmm5uBJ3F:PFamBXWxlIgaPJk9h+BKlKYhsiXpaf86","tlshash":"7d8423a830e3b528f886f6e7d26bfcc246577766a7348071b10f534ab312b56911ed0e","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-04-03T19:20:48.19473Z","times_seen":5886,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xy.cobaltsottawa.com/rQowJ5LedyVFw/LrNQV","fqdn":"xy.cobaltsottawa.com","domain":"cobaltsottawa.com","tld":"com"},"ip":{"addr":"23.109.170.98","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xy.cobaltsottawa.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 07:42:59 GMT","end":"Sun, 19 Oct 2025 07:42:58 GMT"},"fingerprint":{"sha1":"D2:EE:3A:1F:7B:F8:00:22:D0:99:57:BA:E0:F0:65:C2:00:A4:6B:BA","sha256":"FD:E3:A6:74:DA:7C:B9:83:19:A2:D0:7D:41:4D:B8:6C:BC:0F:99:2A:BC:7A:DD:58:9E:24:F8:E8:4D:8B:8D:92"}}},"request":{"raw":"GET /rQowJ5LedyVFw/LrNQV HTTP/1.1\r\nHost: xy.cobaltsottawa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Sep 2025 03:33:54 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://cimaclub.watch\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sun, 07-Sep-2025 03:33:54 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sun, 07-Sep-2025 03:33:54 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-03T23:51:28.172598Z","times_seen":14773,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":129,"connect":17,"send":0,"wait":24,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-06","alert":"Sinkholed","trigger":"xy.cobaltsottawa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/themes/CimaClubV3/UI/Assets/fonts/Bahij_TheSansArabic-Bold.ttf","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/themes/CimaClubV3/UI/Assets/fonts/Bahij_TheSansArabic-Bold.ttf HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 86053\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 13:39:22 GMT\r\nlast-modified: Mon, 10 Feb 2025 17:01:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 50072\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffoQYGqzS9ZIWWOlDzUuRFMcucCLS%2FZwlyxukOb9alG6YxJxIgAUvii4JENpRjA75lC7wSQUQFVH2Y%2Bb40Av7XHLo%2BDcS8%2FmyuHUXcyI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae85b0e6e0731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":305580,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"BASE\", 34 names, Macintosh, �  2013 Bahij Virtual Academy. All rights reserved.RegularBahij TheSansArabic Bold:Version 1.10B","md5":"7c587dafe989d542263d86ce681883bd","sha1":"f54f028ef5e8b1bd8125be2b50fcb25fa83fc454","sha256":"4ebe3fc6c3842b134af2a8be389f87e92b048ff1ef7d7d96c9a18d2a1b1baaad","sha512":"a481880c64b3d6c677f0d5ec9486cf3d08602065d89de3bd93d2a220b742cc1bdf47edeb54d8fdd5110ebae3593524451ba48bb2269fa89c48d5fb2d3d4318e7","ssdeep":"6144:JLNyS5XlodxYJpl4WYcUj9sYLH1k4h7hsamxhzeVoQ3py6B5jvvlX6bUDL+grgdE:69sYLH1kOrB5jvv6UrrJXt","tlshash":"67540b50eb658b1ed02d83388b57d3130afab101ff42b31b6983669d0f872e5e16f566","first_seen":"2023-04-10T10:45:22Z","last_seen":"2026-04-02T02:05:43.333728Z","times_seen":370,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/themes/CimaClubV3/UI/Assets/img/bg.webp","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/themes/CimaClubV3/UI/Assets/img/bg.webp HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cimaclub.watch/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cimaclub.watch\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-litespeed-cache: hit\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Sqoc5U%2B%2FZKJy2%2BwulOSrPCCT8LxYgC0u1UHXkZBvO%2FpmSrirjBO%2B2vfFEq96dO7JTRHgbMoUWWzgm4RZD25XkX7UU%2FDCE3sou2mEY1i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae85c2f1e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303211,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/themes/CimaClubV3/UI/Assets/img/icon.svg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/themes/CimaClubV3/UI/Assets/img/icon.svg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 41958\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 08 Sep 2025 20:15:04 GMT\r\nlast-modified: Mon, 10 Feb 2025 17:01:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 371930\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BmtRyqv4i633IG8xSxOZoojth4mbF%2B00BhjZ4y5EHvje6SvqbLIz66siiFcJAwYAExe%2F5F2kRxOrtQUOMGgK%2BdlYvQs8uwZOceUhLLTM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8582cb90731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":115877,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2440c822d391cced9fab49416237b4f3","sha1":"e2b0b78b57890068d6fbcef60848e0e1a0a80513","sha256":"550c46ff3b71a4a6d35cfa27aca0ea4aa21b2a43110fb9ab9f1ae5a46cd51a04","sha512":"0e3f53d5f4665ad72afad994616a3055f9f5aa3d3dfc9a4d463053af4e2b472b5af637ee619fb120ccb60e3510a1f83f789d4d850a6f2ba4e9fb541896235b81","ssdeep":"3072:rA0mZA0mgXPbtQ8or5XCWXwP1QjnnXPbtQ8or5XCWXwP1Qjn1:It1orlrXwPgzt1orlrXwPg1","tlshash":"8fb301341ba04c6ea056b10f2667c9694df0a66f934df22262c13e73d50f7ba61f5ce8","first_seen":"2025-06-11T21:33:44.945135Z","last_seen":"2025-09-13T15:58:38.368624Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@9","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@9 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.17.4\r\nx-jsd-version-type: version\r\netag: W/\"1080d-uB5K/9b4efMtYCfkBM9HcldmPDk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\nage: 9914\r\nx-served-by: cache-fra-eddf8230094-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 18790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42473)","md5":"0c0de18caa00c8ea26099fb8cd50b05a","sha1":"b81e4affd6f879f32d6027e404cf477257663c39","sha256":"1cea8f5e200fcfc0e1d1b0797151f138faa548d850f9dde66a43424eb93f9450","sha512":"87f86a1120219010ce81cb71c7925fe5803abd4bfc9dcbdbbd39e0e9ec3a44ecd95ad8186bbfd823b0ae80d38ce5c7c13612dd1aa54de9ae9e0db11425e13f4e","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGc3BfwX:LaSBrL4K2NgdkdALdWaRFfsEX9wCO","tlshash":"f163f6857a403123a6ab417968ebe309b6b5a542fc330c54f129d0944ffbe8f1573bb9","first_seen":"2023-03-08T15:28:13Z","last_seen":"2026-04-03T01:19:26.453177Z","times_seen":2286,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":95,"dns":71,"connect":27,"send":0,"wait":27,"receive":5,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amt3.com/5/9417975/?oo=1\u0026js_build=iclick-v1.1565.0\u0026userId=08023c4a632c44bdeb5362223281708f\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"amt3.com","domain":"amt3.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amt3.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Jul 2025 05:21:33 GMT","end":"Thu, 09 Oct 2025 05:21:32 GMT"},"fingerprint":{"sha1":"4F:52:B5:E1:62:6B:8E:6A:12:14:9C:87:72:1B:0C:49:B6:1B:B3:DD","sha256":"60:A1:B7:F3:D5:3A:87:F3:6A:F6:90:C5:70:D6:FD:50:C1:44:A8:9F:C9:62:EA:57:E1:E2:29:B4:19:91:E9:F5"}}},"request":{"raw":"POST /5/9417975/?oo=1\u0026js_build=iclick-v1.1565.0\u0026userId=08023c4a632c44bdeb5362223281708f\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: amt3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2567\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://cimaclub.watch\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":114,"dns":28,"connect":26,"send":0,"wait":29,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\nage: 1522675\r\nx-served-by: cache-lga21931-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 576315\r\nx-timer: S1757129635.687906,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T00:24:09.153801Z","times_seen":444653,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":54,"dns":1,"connect":27,"send":0,"wait":26,"receive":9,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cimaclub.watch/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOYWpnDNrvBozLlWHfh%2BNS1DRiFHwVStEhKjz8P2Sf%2FFhC8%2BCH%2B9HEi0z8sqFvz7U9Dw1OzttkoBlUyKr%2BvZY%2FTpOFioftZ11fy5tyn5\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97aae85e28620731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":303211,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63210)","md5":"a4eab40b8e376c5bff847285fbb5d104","sha1":"10972a012609e64e6dd64a654b6d93c16c433d3b","sha256":"16352fbe0ef2f0cbf57dab2db5f584babe26ee495e39aeefff245e0638880b43","sha512":"e7a2af9f27e72a9ab95d06ad43651d79a183d08e640d09fc5d66242d15f8cc367fc18379c6602626b42e0ca8462d2477c3039c8c4e4297da8dc37f3343af9c98","ssdeep":"3072:JrUztiRtAM1fgxoSZHRdkku6TXgJ3Vc8iK9aHGWTM3/sCEczvpGl5UOw2pYEJA6D:JrMtdJCwJmwO0","tlshash":"d6540912931c48265037d2c1ae501648f27deb3ef6052aabf3ee0569fb97cd5612b36c","first_seen":"2025-09-06T03:34:21.243041Z","last_seen":"2025-09-06T03:34:21.243041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/webfonts/fa-brands-400.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 21:04:01 GMT","end":"Fri, 21 Nov 2025 22:03:57 GMT"},"fingerprint":{"sha1":"CC:FF:C9:AB:7D:4F:0E:BD:2F:0D:51:59:D6:60:F9:CD:7D:68:E5:4B","sha256":"EF:79:B2:3F:26:48:FD:84:D5:42:BF:1E:35:73:D2:4A:8A:DB:54:C5:37:B0:F6:75:31:FE:6A:BC:D5:8A:F4:C2"}}},"request":{"raw":"GET /releases/v6.1.1/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105768\r\ncf-ray: 97aae85cd9fc5ebd-OSL\r\nx-amz-id-2: vXYc/giUfSqFzi3SGEt4z21kS+1xsoQIQDRJa0O0LhgvVQozZT7iDPKMUkqO06c3s3CqvlHI7+8=\r\nx-amz-request-id: FZRYMK1ENA6PGHEM\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 22 Mar 2022 15:42:55 GMT\r\netag: \"ea24446014ea86d85129883a9511629f\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 392309\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":105768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105768, version 769.768","md5":"ea24446014ea86d85129883a9511629f","sha1":"90fe0513c6a0ff1d8f564ec782fa54b559e7d3f8","sha256":"3701cbff3acccd80b1f2eede4311050514f7a64c2039eb77a77368fcd6e3de28","sha512":"e74fb5c9695d374de27fa93fe23ca771f499c93e387afdb443b8e6206122286eefdaa781d6704e71517d1c3d268d2bc0c66a52dfe443ce83dfa9b07819f0a426","ssdeep":"3072:brZ7WPxReYz0qE/GnTLcS86PNo5gL47hSHRZM:bRWPxRDziQkSrNugL4sbM","tlshash":"f8a3128905fe04fdd817d63c6f4d6d40b230ee325c5fc0668c3b429a225b78a6a1bb39","first_seen":"2023-04-07T16:36:25Z","last_seen":"2026-04-03T03:08:02.41264Z","times_seen":4398,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":80,"dns":1,"connect":1,"send":0,"wait":29,"receive":4,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/favicon.ico","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qsy%2B9T4H9TY6jyNBu2tpEXpXS1iyzpfhZQOpHrHUcZZktJr%2B1ASN0r2TbZaHMATfErutcci0O6VxPR1I3SprC0Yk8HhDSOWJEeqHeRii\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97aae85f28e90731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-04T00:29:17.304171Z","times_seen":115508,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b86d18140ec-419047.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b86d18140ec-419047.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:38 GMT\r\nlast-modified: Wed, 03 Sep 2025 16:30:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31218\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpoQcDFuu%2B4xjYtpzMbQRNGWVlJ%2BvkOf6UfXiqG2PJ%2FjTuvDHvlAQ9loO6eOy0K%2BxgK2ywHglALkCYNB1Ix3SngVx%2BojFsO0Y1tYK9aK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8641c090731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b8306c68f13-419038.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b8306c68f13-419038.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:57 GMT\r\nlast-modified: Wed, 03 Sep 2025 12:11:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31198\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JN7MM2TCNVJ95YYeIdr%2B3u0hBJzTr99kGYoP1GJQSzlV1Zk6UzbRdNn2Vgm1uECnbkNhTxJVy7Vp%2FB1ExclLuCW%2B0uHA5poz63YAp8eB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8642c190731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.video/wp-content/uploads/2025/02/CClub.png","fqdn":"cimaclub.video","domain":"cimaclub.video","tld":"video"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.video","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Jul 2025 18:52:00 GMT","end":"Fri, 24 Oct 2025 19:50:26 GMT"},"fingerprint":{"sha1":"5B:41:9C:7F:11:71:BE:74:D7:83:E4:39:F3:59:33:D7:D6:8C:E8:8A","sha256":"A6:0E:23:F0:CB:55:47:86:9E:13:60:42:8C:0C:7D:05:D9:2E:03:62:3B:0A:E3:01:36:59:A3:B6:FA:4D:9C:9D"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/CClub.png HTTP/1.1\r\nHost: cimaclub.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncontent-type: text/html\r\nlocation: http://cimaclub.watch/wp-content/uploads/2025/02/CClub.png\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jmz9N2%2FGGw2WcXyYyUIEiDL%2BLflqGyOBhWbkAWHPhxL7XBT6XBBdREFiPcdEo07dWDzljz1rOF6lnbwfLc7VkCkfO%2B3wnrpdIpK6CyCB\"}]}\r\ncf-ray: 97aae858aeb3b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4582,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":44,"dns":40,"connect":1,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/themes/CimaClubV3/UI//Assets/img/bg.webp","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/themes/CimaClubV3/UI//Assets/img/bg.webp HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cimaclub.watch/wp-content/themes/CimaClubV3/UI/Assets/img/bg.webp\r\nx-litespeed-tag: f99_HTTP.404\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nx-redirect-by: WordPress\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLIsVgUdfLuNWpZzObfnNsAxVlpqWXKnM3YhjLJyrY8jTVqh9bWXwy2zfbhMtsg29hmkP%2B2KlRWsxE9aey7gYZfwNoVvjIyd4L6fLcXF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8585cd20731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":303211,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/webfonts/fa-regular-400.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 21:04:01 GMT","end":"Fri, 21 Nov 2025 22:03:57 GMT"},"fingerprint":{"sha1":"CC:FF:C9:AB:7D:4F:0E:BD:2F:0D:51:59:D6:60:F9:CD:7D:68:E5:4B","sha256":"EF:79:B2:3F:26:48:FD:84:D5:42:BF:1E:35:73:D2:4A:8A:DB:54:C5:37:B0:F6:75:31:FE:6A:BC:D5:8A:F4:C2"}}},"request":{"raw":"GET /releases/v6.1.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 388900\r\ncf-ray: 97aae85cea095ebd-OSL\r\nx-amz-id-2: 9jOmmnKWsc6MDJNG0pQCXvY1+G6aiXRVedjyVlbHOxu1RVQwHZrbNP9HXBAYovBbFY1ktvkAuQePuhTQtHe82MNo5y0en20i\r\nx-amz-request-id: Q8PH6ASCYG031X7Y\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 22 Mar 2022 15:42:55 GMT\r\netag: \"a927362a975051e5d7361d860d8ffba7\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 371929\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 388900, version 769.768","md5":"a927362a975051e5d7361d860d8ffba7","sha1":"6b97f2ea63d6e7e04006d0366b87697fb4a594d0","sha256":"121b176974226dbc9b1ab227becb657d40b88d2bb7010a746c2360c31d7c373e","sha512":"aa2a13e377d7079ab805ba67f2c3d013d38864b8ca0f47349559a99ba2a64fc937e0b33a82445c38e322d413a5da5a21146ffba7db7329f4cfe46e7adc142ad6","ssdeep":"6144:RYYFamiEXWy7gNtlIg/TWPJDg9+u5+BKhDnlKwLhsiXqU1af8vl1zMelmm5uBJ3F:PFamBXWxlIgaPJk9h+BKlKYhsiXpaf86","tlshash":"7d8423a830e3b528f886f6e7d26bfcc246577766a7348071b10f534ab312b56911ed0e","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-04-03T19:20:48.19473Z","times_seen":5886,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":86,"dns":7,"connect":1,"send":0,"wait":36,"receive":11,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/02/CClub.png","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/CClub.png HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 4582\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:32 GMT\r\nlast-modified: Mon, 10 Feb 2025 23:24:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31223\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHnQF1saajgvys9l4dPe%2FTJhanAgcmjAuKvwU1xfxAHy1FRlWri2M8MnLTEwZpaGSjVhufHXuJVKSBgkfN3H2gcI8Hu%2FkuBM8M7SZYhu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae85d8fe60731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 284 x 430, 8-bit/color RGB, non-interlaced","md5":"2c314ec1f11581dcc1a4b73301ace6e0","sha1":"a118270ecfe98af7ce338a561c1e86380f47626b","sha256":"6da4e3a9f19f9f9c141c88c0fed32bdf261803c23672e6ded9534cf4570bed95","sha512":"f08d17167ab9942f9166d8d4fe584c808c6d05239d36b4c5adc96d37bced0f76d6810e0848c96687283455d064cd7df7520dbc649a0e889387012d3685ba2fd3","ssdeep":"96:lyb666666666666666666666666666666666666666666ksR0gTojfhrKK9aU43o:lyb6666666666666666666666666666m","tlshash":"3491c3b0f44a3f29275327a8b21e661bd3097f4321b6c429f284062ffd94a357e6a095","first_seen":"2025-06-11T21:33:44.950302Z","last_seen":"2025-09-06T03:34:21.257376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b88f55f0797-419049.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b88f55f0797-419049.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:38 GMT\r\nlast-modified: Wed, 03 Sep 2025 18:56:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31218\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtMqkoqFQ%2FnmRIWmJ8xQCbYvhLlE%2FAWZDdoeE4zb8L2vqeHZ5TiR1%2BEzyPBLwgNkq%2B%2B%2FBdysCu%2B5kCZGkLowQX2i5XPy7oMDVWiQIzMk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8641c070731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b82f325e10f-419034.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b82f325e10f-419034.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 12 Sep 2025 18:53:57 GMT\r\nlast-modified: Wed, 03 Sep 2025 12:06:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31198\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0BL5S%2FWSh4QdUYYijiB2it0NRYYWuC0riGweSZU4U5o44UxvK0C3DBWET%2BfnmMXOIvft5tkfpfzkmn9EB56qcsNNGhDptPlLcPYON54\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8643c1e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Righteous\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Righteous\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Sep 2025 03:33:54 GMT\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":851,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"86d554f1a8fd02c121416c2535dbe844","sha1":"cbc3d18bb4d6f7238561f047584dfae4afd3c830","sha256":"93c76d30d5249ab23d9d6d7f4e824160e4248d9d7446d1f2f96bc9dd03bfd008","sha512":"da06a66be286aa79b77e292af0910d9486d241132692e0b5d6becca468adf79db111f1a8d61a1837e83c98ee5de215b2ea5dd9c7eb55036b916bb2f4d7fa1219","ssdeep":"","tlshash":"0c011ec1086b9240dbd74cca12cebe36ee0e72502481e834affd1488fcdac664312b1e","first_seen":"2025-06-11T21:33:44.954996Z","last_seen":"2026-04-01T23:33:59.233269Z","times_seen":389,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":155,"dns":3,"connect":20,"send":0,"wait":17,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/changa/v28/2-cm9JNi2YuVOUckZpy-.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/changa/v28/2-cm9JNi2YuVOUckZpy-.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23064\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 10:04:43 GMT\r\nexpires: Fri, 04 Sep 2026 10:04:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 22:46:44 GMT\r\ncontent-type: font/woff2\r\nage: 149352\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23064,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23064, version 1.0","md5":"8a057d93216ab98a73152cd3af884c60","sha1":"6a5f105487fa6e672c235a06e4dcbf5438993b99","sha256":"94ad0d2ec52cffbf72d65868475d87c68e4362c2e5b96c7a5304acf113c5709f","sha512":"601c879269bdeadaa4b288fc48e9bb117711e3ee287588b208bd43488e189162931a26c1f156ad25a6ccaa789105f2ff6f8bbe74bcee5ece653901bdbc626584","ssdeep":"384:3Nrj8WPvAnlgHq9CUUNqD6dlAyhAdoelulqtKel3ZZoJDO9wPPqMzscdiy41YXIk:3N/tAl9fUa6Ayqiel6qp3cUYzscdiPY7","tlshash":"eda2f295d30b03b1a774f352e3cca0e9c4a00379921c46e42b73e0a159a156a9bee3a7","first_seen":"2025-06-02T23:36:42.237776Z","last_seen":"2026-04-03T13:40:17.113656Z","times_seen":225,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":8,"receive":3,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 13:23:26 GMT","end":"Fri, 10 Oct 2025 14:20:28 GMT"},"fingerprint":{"sha1":"DF:7D:EC:90:65:7B:61:05:0F:26:73:61:2A:67:56:6C:02:BE:E6:37","sha256":"EE:7C:E3:AA:6A:07:F1:9C:E0:54:C5:14:46:57:0B:D6:3D:99:AF:49:70:A6:62:E4:7A:22:26:DC:8F:F8:74:AD"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: bb21fc373bbfd789ae6851c892a2819c\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 271\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 06 Sep 2025 03:29:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6lly%2ByIrioKIGXh8d8ETyaeRzOtU8NHOD9pA1TXNbIRutbhWnlWFOdvu2yMFdNH8S2%2FHJ9d3ldJ1aMEmHifluecrsOXEqUucg%3D%3D\"}]}\r\ncf-ray: 97aae85cdfcfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cbe014464e088b9b1254b3c8bd183b0f","sha1":"10ae224dea3a980fcb9baf270ea915f23fa04832","sha256":"c67d4f23e9cd51410978dfa0f93c117f5f2ffbe258fbd1633d75e463f287d0ce","sha512":"2929ab906046cd985c85680a29a1af8ed0a9be313688087e30173069eb4aa95700c1a2b1293f83ad8a3bd60f84566ebc59b51d7337ed569b3ea1a456b09864dd","ssdeep":"1536:F6KpKfzIHKJYl2MGRCYWNZ2ClqIZPgAz0Sjf654+DIVV2P6O2e:IK5KJe2GN2ncr0Sz6+3o6O2e","tlshash":"40b32aca226a241612bf80344457ed1db5aecd81048dcdb8e0e5b8762d78b16d3fbfd9","first_seen":"2025-09-04T15:16:46.265909Z","last_seen":"2025-09-06T03:34:21.240732Z","times_seen":20,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":101,"dns":31,"connect":4,"send":0,"wait":6,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cimaclub.watch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cimaclub.watch\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08023c4a632c44bdeb5362223281708f; expires=Sun, 06 Sep 2026 03:33:55 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 97aae85e680a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"777438e7279c1d591f9f273bc9f5f1d4","sha1":"78aa8c46498a657422be2e60b3f4480792022497","sha256":"ab7107375b201b5c7ec6d869364ada5b44ebafda0459f441a20140181bd456c9","sha512":"a45b7734f0908baea1d7678d711d34bf5ed3d87db8857054f9355989f19cee0661652f30cb6b8c56818dc74b86587e60409f25fead9bd08bb345e47f7b98d75d","ssdeep":"","tlshash":"f9a02200003e2ae8a2c000080a038b0302000202000c3208c2e08023aaa3a8e800230c","first_seen":"2025-09-06T03:34:21.262233Z","last_seen":"2025-09-06T03:34:21.262233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":34,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/uploads/2025/09/68b82ce222098-419032.jpg","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:56.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/68b82ce222098-419032.jpg HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nCookie: _ga_MXGV0QDHM5=GS2.1.s1757129635$o1$g0$t1757129635$j60$l0$h0; _ga=GA1.1.919457601.1757129636\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 11 Sep 2025 20:26:29 GMT\r\nlast-modified: Wed, 03 Sep 2025 11:56:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 112047\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eISvAm4EzVHZUD2ecxtCqqb2%2FW0syp%2FdjbisvIi00yOb5kNSyJP3lRU%2Fd1tH%2FBkUVOw%2Fr3UngFDcT9ppfy3tTsiy7eivkqEXeszDpiz1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae8643c1f0731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T00:31:03.876566Z","times_seen":13308907,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MXGV0QDHM5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:54.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"79:B8:10:4F:C4:95:E3:66:3C:DD:AC:2E:39:EF:9E:E6:F3:F9:ED:EC","sha256":"8E:CE:0A:16:CF:6E:E1:89:55:05:76:86:E1:EF:98:4E:A0:AD:29:9C:BB:91:E6:AA:2D:27:5D:C2:B0:00:47:59"}}},"request":{"raw":"GET /gtag/js?id=G-MXGV0QDHM5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Sep 2025 03:33:54 GMT\r\nexpires: Sat, 06 Sep 2025 03:33:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 138665\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417535,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"55865944b7518b7c18061c25761f159b","sha1":"eaa348c7be02ae81ce351338a635357814d61b86","sha256":"bc9b926a88265c50c2a1524db3fd4f316afba7de2134c1b272ba7f5798695c40","sha512":"71220a0c8f44a76c917eef82c606e1ec10a3dfa5564059f5c9a6668a0f7ebac3ded5abb14f07332c2a4bc4e34a6b274e7161606831acb7556772996098fb6362","ssdeep":"3072:TN+wFceVWD8CMF840h0W00/ZPmY8mT1EQgqlRAxtNuyGtlk8wqiuJ+OC4Pt9icsC:R5PF83nP/RAj8wNtOC419uD0jrzH","tlshash":"c49419ce73c670269396e474503f018ba57b29a2f45cc899f189cce42e74a9a4177f7c","first_seen":"2025-09-06T03:34:21.26466Z","last_seen":"2025-09-06T03:34:21.26466Z","times_seen":1,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":8,"connect":23,"send":0,"wait":50,"receive":69,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cimaclub.watch/wp-content/themes/CimaClubV3/UI/Assets/fonts/Bahij_TheSansArabic-Black.ttf","fqdn":"cimaclub.watch","domain":"cimaclub.watch","tld":"watch"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cimaclub.watch/","date":"2025-09-06T03:33:55.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cimaclub.watch","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 09:15:21 GMT","end":"Mon, 10 Nov 2025 10:13:36 GMT"},"fingerprint":{"sha1":"47:50:77:24:AF:81:42:38:CC:0D:84:1B:16:30:79:04:CB:B2:C7:83","sha256":"33:BA:6B:24:D8:7F:00:38:A7:1B:EB:0F:19:3D:FE:F9:DD:1C:B8:D8:4A:E2:E2:63:B0:F4:AF:79:CE:26:A8:31"}}},"request":{"raw":"GET /wp-content/themes/CimaClubV3/UI/Assets/fonts/Bahij_TheSansArabic-Black.ttf HTTP/1.1\r\nHost: cimaclub.watch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cimaclub.watch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Sep 2025 03:33:55 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 84961\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 08 Sep 2025 20:15:05 GMT\r\nlast-modified: Mon, 10 Feb 2025 17:01:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 371929\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6W5FUB%2BY70JHMy043ZUEabTtqx2FJbzpKJOuH01dwihAGQFA5DoKfl2sVia1vrYvkpDCwfwMrWK2onhcHxTH49HH63jSrfO0gxAJYKr6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97aae85b0e6f0731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307476,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 15 tables, 1st \"BASE\", 34 names, Macintosh, �  2013 Bahij Virtual Academy. All rights reserved.RegularBahij TheSansArabic Black:Version 1.10","md5":"c6072c9e5cd851e297abd7e7b2a26909","sha1":"3834bfbe53734bd21ac0b0d29135afdf45898d6a","sha256":"79b549f8a455765299f258649302e195044da82d1556fd45f0218309748156c1","sha512":"187f647c75d00752ae06173b0bf63833ef02e3473dedda12495934b9c50538621cafb0e348eaa0bc48b80f8e10d4d83530eccac9b034db64572da58e5ebe9be9","ssdeep":"3072:5ilRh473odaw86XGgJ+5+PSRZWJkBjCsXYZU5wciXn9c:O473odB8IT8ZEkBjCBz9c","tlshash":"7d641918ef266f1dc01ed338ca87c3126eb8ba01ff5e97161ac336ed4ec5255964e486","first_seen":"2023-04-10T10:45:22Z","last_seen":"2026-04-01T23:33:59.044469Z","times_seen":275,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}