{"report_id":"25e70713-cc55-4d4b-a14e-7ab0b4a24d56","version":6,"status":"done","tags":[],"date":"2023-12-04T23:12:10Z","url":{"schema":"http","addr":"ds2play.com/d/","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"104.26.8.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ds2play.com/d/","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"title":"Video not found | DoodStream"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:06:33Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"d1f05vr3sjsuy7.cloudfront.net","ip":{"addr":"54.230.241.212","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2020-12-01 21:06:31","last_seen":"2023-12-02 22:53:46","alert_count":0,"request_count":4,"received_data":100172,"sent_data":2499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"papmeatidigbo.com","ip":{"addr":"172.255.6.58","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"domain_registered":"2023-10-22","domain_rank":0,"first_seen":"2023-10-22 13:37:00","last_seen":"2023-11-20 00:22:51","alert_count":0,"request_count":1,"received_data":1462,"sent_data":417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"forfeitsubscribe.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-05-31","domain_rank":0,"first_seen":"2023-05-31 21:31:25","last_seen":"2023-12-02 05:07:12","alert_count":2,"request_count":2,"received_data":31608,"sent_data":894,"comment":"","tags":null,"fingerprints":null},{"fqdn":"proftrafficcounter.com","ip":{"addr":"18.184.210.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-16","domain_rank":0,"first_seen":"2023-11-21 09:55:14","last_seen":"2023-12-04 18:39:56","alert_count":0,"request_count":2,"received_data":836,"sent_data":870,"comment":"","tags":null,"fingerprints":null},{"fqdn":"orgotitedu.info","ip":{"addr":"108.157.229.6","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2023-10-04","domain_rank":0,"first_seen":"2023-10-12 13:53:54","last_seen":"2023-12-01 10:49:42","alert_count":0,"request_count":2,"received_data":2573,"sent_data":1450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"friendshipmale.com","ip":{"addr":"172.64.172.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-10-21","domain_rank":0,"first_seen":"2022-10-21 14:15:25","last_seen":"2023-12-04 19:07:45","alert_count":0,"request_count":2,"received_data":172814,"sent_data":818,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.barscreative1.com","ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-09-08","domain_rank":25648,"first_seen":"2021-09-16 13:14:42","last_seen":"2023-12-04 11:41:21","alert_count":0,"request_count":1,"received_data":2163,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.doodcdn.co","ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-04-23","domain_rank":0,"first_seen":"2022-05-04 16:24:43","last_seen":"2023-12-02 22:53:46","alert_count":0,"request_count":5,"received_data":250956,"sent_data":2370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-12-04 06:26:24","alert_count":0,"request_count":1,"received_data":16579,"sent_data":528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-04 06:42:16","alert_count":0,"request_count":1,"received_data":7456,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banquetunarmedgrater.com","ip":{"addr":"104.21.86.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-04","domain_rank":0,"first_seen":"2022-08-04 17:12:50","last_seen":"2023-12-04 19:07:45","alert_count":0,"request_count":1,"received_data":835,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"worstideatum.com","ip":{"addr":"23.109.248.166","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"domain_registered":"2023-07-20","domain_rank":0,"first_seen":"2023-07-20 12:56:13","last_seen":"2023-11-30 01:08:14","alert_count":0,"request_count":1,"received_data":1427,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ds2play.com","ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-08-04","domain_rank":0,"first_seen":"2023-08-04 14:22:19","last_seen":"2023-12-03 05:32:02","alert_count":0,"request_count":5,"received_data":59747,"sent_data":2561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipmathematical.org","ip":{"addr":"172.67.146.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-11-07","domain_rank":0,"first_seen":"2023-11-29 08:06:05","last_seen":"2023-12-04 02:45:15","alert_count":0,"request_count":4,"received_data":2371,"sent_data":2162,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pogothere.xyz","ip":{"addr":"172.64.110.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-09-04 21:11:25","last_seen":"2023-12-04 14:42:38","alert_count":0,"request_count":3,"received_data":214395,"sent_data":1283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cloudimagesb.com","ip":{"addr":"45.133.44.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":23099,"first_seen":"2021-02-12 17:15:41","last_seen":"2023-12-04 08:10:55","alert_count":0,"request_count":1,"received_data":67490,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unseenreport.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-03-30","domain_rank":0,"first_seen":"2022-03-30 16:33:17","last_seen":"2023-12-04 10:42:27","alert_count":2,"request_count":2,"received_data":846,"sent_data":1522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-12-04 05:09:04","alert_count":0,"request_count":1,"received_data":28774,"sent_data":439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"interbasevideopregnant.com","ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-11-28","domain_rank":0,"first_seen":"2023-11-28 12:53:40","last_seen":"2023-12-03 18:55:42","alert_count":4,"request_count":4,"received_data":6988,"sent_data":4559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getbestpolojpob.org","ip":{"addr":"65.9.55.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-11-07","domain_rank":0,"first_seen":"2023-12-04 02:45:13","last_seen":"2023-12-04 14:46:02","alert_count":0,"request_count":4,"received_data":6729,"sent_data":3237,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.creative-bars1.com","ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-11-01","domain_rank":0,"first_seen":"2022-11-15 17:46:22","last_seen":"2023-12-04 23:03:56","alert_count":0,"request_count":7,"received_data":194066,"sent_data":3216,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2023-12-04 09:41:10","alert_count":0,"request_count":6,"received_data":27151,"sent_data":3744,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"forfeitsubscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"forfeitsubscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-20T06:05:36.021536Z","times_seen":130065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forfeitsubscribe.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js","fqdn":"forfeitsubscribe.com","domain":"forfeitsubscribe.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d622cf25483792c99cd3ada6a20caaa","sha1":"f9c350879a5ddd9a74889e762f652ed17f98652f","sha256":"96ff57070d4a6a48d7fcd102f3295907c2c43206c39fc4b5716ca37371d84564","sha512":"ec25b6cb828d0436ebe299c76495ee18d6a2e841ebd2aa07686c69ab7894fed02c636dfb8c971c2e8c13cad7d3bae894a42da1b6af39ca97da54c45d8f33a337","ssdeep":"768:w8gZN21KHXVn8jeeKcZDXDUMSkONMddtlU6LuaGPcNAFvcGtOkeSr:wvZN21SFn8jRZnUMSk5dNLuaGPW5U","tlshash":"a80372243f80645903938f7bb61fb4e4f16a286f3c44588fdb01bc546a51627fee1976","size":37803,"data":"","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/d/","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b6f7c36fbe699bc9f241e14f4f2dcde","sha1":"b10e684b725ba534f3e28356fd08cf880e7b05ed","sha256":"bb14f9b9530252ffe0dcd7eabd49ecf1dffcde7134aa1f4a17c322614d4acc9d","sha512":"54c5409d9d95b1151f403eb238fbbbb00f469126f4f04582673a83b3532a6162a9132696c6b3275db30436cc416b631befa4315d47d3635da10bf3006d0bec1d","ssdeep":"","tlshash":"20112c3921e8613ec3da609e21bed3ac3e7c50522a0b604081adcc5dac10e67c81fdbe","size":1076,"data":"","first_seen":"2024-08-20T16:45:44.350412Z","last_seen":"2024-08-20T16:45:44.350412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worstideatum.com/reA3n475k3U/70849","fqdn":"worstideatum.com","domain":"worstideatum.com","tld":"com"},"ip":{"addr":"23.109.248.166","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056","fqdn":"d1f05vr3sjsuy7.cloudfront.net","domain":"d1f05vr3sjsuy7.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.212","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8af0553db4dd50a13664cebb8eab024","sha1":"4a005b43d6d87221e59e225bc2c358a1fd5b7926","sha256":"a47bf3ab4ce3d806e22350827b185ada9aa2179967788a8c1af6a415b8b7313f","sha512":"cd9974e4daee8d0a0b4b46f62b612ac1747eaf102706c0332a929019a9ffff74058dd1ea038ffd8a77633fa78442561a80536f296cd26c3a0a8c00817f68f6ab","ssdeep":"3072:eS9XPLAya82hrZ5LxjFYiUUFvVI4Gmvz1HU3NZkUMs6qDIOmO0o1CnvbOC4QJO9h:eShLAyB2hrfVh103N+w/p0oeDOtQJu9","tlshash":"b8544b89ba923529836374b550bf234eb23e4669fc0849d4b09ad4d07db4d4943bffac","size":298578,"data":"","first_seen":"2023-12-04T23:30:52Z","last_seen":"2023-12-05T00:12:11Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9da5b36215c86c55e6311e6a3e28eb3d","sha1":"13004fa36d6534c5142c1c91a3e27fa62855b931","sha256":"45d80a4be9a4d981e6e8d602f37c886a75bdcf12d0d00b5828b95bee742335b3","sha512":"39a2027b53f412de67728ca055bb988f7b5cdc39e58db55e409db1667da2589b9cc038c3bb43305f0323622de0ec1db171ef880389dcd8f1ded7b2e406f5228b","ssdeep":"","tlshash":"54211428294c7762877be4bff177a6cc5d360060400be9a9f21c10474f9077a04fe658","size":1206,"data":"","first_seen":"2023-12-03T14:49:31Z","last_seen":"2024-10-06T09:21:21.737047Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"172.64.172.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"924e967bca1d599992556a8d139b1c5a","sha1":"222b09dbf164ddc03d39100fd0524a22018d28b2","sha256":"ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95","sha512":"d1ae4c494d3ac70e636a75bcccfecf5cc6d98aa22c652f7be5fa95e6b62c5790a07cef6d490aa063a0573c996cbc689b4d788458b7ac38bafb68ac50b791e04f","ssdeep":"768:MpmI29BfeWZssERU8jnQY8vhqdNUHHiVAWnNniZtyrXGQA3STN+hnnNYJ/dLbO/x:o+ffZBh8jT/0uLp5OpSoTjAdJxyxua","tlshash":"f383b7807fe0648ad3979f77b71bb4c9f8aa385a7dc4048bc601fd80796662ad9f1530","size":85468,"data":"","first_seen":"2023-11-23T18:35:39Z","last_seen":"2024-08-20T18:08:31.906083Z","times_seen":6307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/jquery.min.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-05-19T02:48:26.765604Z","times_seen":6675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forfeitsubscribe.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js","fqdn":"forfeitsubscribe.com","domain":"forfeitsubscribe.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"045a8eef68bbaa8e82c555e6f4c63529","sha1":"70f313d262cb1ecc74c27dbe4409a80cf67be47a","sha256":"32061f0d64bd2de1c15075738a7a002470bcf7f605a55a4aaaa57e5dded5ca83","sha512":"1eb71f6934e778b500599af227b77be234f9e8b38a39047b9800c916ff59d5fe72fdc4de42bf84f828fb14818f84bd1903ebce1b52e27b6ec34a8b4d9a236cb7","ssdeep":"768:Wrvtws0pVllAMJPq+0thwUEMATrKqfy5Z2sGP:OtT0pVllHP7UuUEMMrKqfy5Z2HP","tlshash":"0e0307cc7f1072a657b56077732ee514f5ba0c5cae88c44cd32b7944b9a8335ea363a8","size":40884,"data":"","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papmeatidigbo.com/gHzOaAdOhbZ/71405","fqdn":"papmeatidigbo.com","domain":"papmeatidigbo.com","tld":"com"},"ip":{"addr":"172.255.6.58","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-20T05:36:29.247026Z","times_seen":10701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"57e0b7161cf9c33c10d7bce6cb0a237f","sha1":"94102710ba794d473b0edff27773ab947338d0fd","sha256":"13c05aa0578e777a8d5f06372eae8b958151f0ffbd6e6965b25ef8d3cc1bd0c9","sha512":"7c8e4dc8971de7bb7e21441634758b5df88fb0659f90c75fc0113aee357dfa8a8414c14794709354069b80e626ae0fa299d2e8a9f1f2fca1471fc83dc5437e92","ssdeep":"","tlshash":"31d097a24dba883122fc005f70bbc2acba1015c42b23790046cecc1eda20ea3c592d68","size":247,"data":"","first_seen":"2024-08-20T16:45:44.353477Z","last_seen":"2024-08-20T16:45:44.353477Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6483b908cb544686cf08488574021ece","sha1":"76cfdfa1e129bf6a5ac64c8e72e8a7bfc3d8e41b","sha256":"3f2a1e2bb234af1dc5f6c40a840ccef01ad8d6338eed58d8ea6d0ab1e699c738","sha512":"7e9634d375c369b90db666947f54f4b46a8eb18fa4a89e64dc319d78de32afe081a83172142a916ba423c3626f93c45d8f659c9aed6cbc15ff65ac8dea63cd73","ssdeep":"96:he85Or1JHlfMLi5boTaJ7StEMtlb7OrRGv1Z5Y5osX4WYyX6samXhcUHPX0Tq+Fp:dOrjSBRly8uKgcVXey5HV7chX6","tlshash":"6ce1a7cb7d857063027139b9011fa5a6a11e9f9b24c86c46c734d0e9bb3b3444aeff96","size":7422,"data":"","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a5e14d5858dc14d2d7a33657e833db1b","sha1":"0a72f04558de81df1bdc50c90ba1c78651ef53f1","sha256":"1d83c189931376966fef08127f8b487591a039d48bd8a2c96f2221b0b1f2b501","sha512":"091df464b1ca1cebdd89c06b0b447d025e8dcc70fda618d56ee548142e30c4f279c2098eac642b3dbad2eaef9b2bcc20a35387751d8c17da2117d4022ce220e1","ssdeep":"48:MX6clUAZWCRcGYqY9pC/Z/KJlStAR4b7eMrxpqYhUKOahgrXMSxJJseKzwSAVvfV:MX6cKAwR+9KJlSPTU7r8SLuHAVW4j","tlshash":"2d9195a39170320665238d44b7c8ab9d232e856362228feff7513144cf87b55278d27f","size":4361,"data":"","first_seen":"2024-08-20T16:45:44.354416Z","last_seen":"2024-08-20T16:45:44.354416Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.342Z","timestamp":1701731517342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 660372\r\nexpires: Sat, 23 Nov 2024 23:11:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=O7KqgIw7FIMO7nxzpyKyB9Iop%2FpHp%2B83qD63VUSVt%2BX%2B0qeVHmZqGGJFQAegra6x6yNBqzJoRuH3dDiOHUScj%2BN4ZKlL5qEHw23OFEM42CJCsh4h4Lg%2FIAu2%2FV0sxQ%2FgA6LrMZ0B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8307bb1bcbbfb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-20T06:05:36.021536Z","times_seen":130065,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":14,"dns":3,"connect":1,"send":0,"wait":7,"receive":3,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/img/no_video_3.svg","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.366Z","timestamp":1701731517366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 12 Feb 2023 00:00:00 GMT","end":"Sun, 11 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3","sha256":"87:B4:CF:85:01:9A:AD:66:0E:D3:7A:68:BC:81:A5:00:B9:5F:C8:26:97:F2:E5:D4:A5:26:74:B2:92:EE:AF:FB"}}},"request":{"raw":"GET /img/no_video_3.svg HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2812\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-afc\"\r\nexpires: Wed, 03 Jan 2024 00:18:47 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 63334\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=K2KRizfuP%2FzLMLSsb8dpEbjN7m6ADNu17lt5f9ImyVALjtySgg7ContngCtgxOfVbbO88xCXXBj5J8tYaqKGMVsSbD3Hs6ADby82e2xfXlGU55%2B7fYEvFYLC%2BNDILw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb1ccd08b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document, ASCII text, with very long lines (2789)","md5":"077bfdaa49ae4877a42611b739ec4752","sha1":"a2f9e1222b7af9abc05122411ab8902efcc08ead","sha256":"70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c","sha512":"9eac1eaf362f200f037ae6c0c9d5c257bb57708de9955816c69d67689293430bdf39cdcd91522a993c48b823971cb984956e1ebe44516a323da03ebcd2cbefe3","ssdeep":"","tlshash":"c95164dcb81c45bd890aa7f85a687e61366f91cd40734c8d78bd0ee223d0eadb114a9c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-05-19T21:57:18.514705Z","times_seen":2755,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1f05vr3sjsuy7.cloudfront.net/?srvfd=908056","fqdn":"d1f05vr3sjsuy7.cloudfront.net","domain":"d1f05vr3sjsuy7.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.212","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.370Z","timestamp":1701731517370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /?srvfd=908056 HTTP/1.1\r\nHost: d1f05vr3sjsuy7.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 97249\r\ndate: Mon, 04 Dec 2023 22:30:27 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0oJYrTvBUUDKrXXgLjZzGaGjAete7G1Ghxg-w7H0SbBAT2BWZj0SPg==\r\nage: 2484\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97249,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (15945)","md5":"b8af0553db4dd50a13664cebb8eab024","sha1":"4a005b43d6d87221e59e225bc2c358a1fd5b7926","sha256":"a47bf3ab4ce3d806e22350827b185ada9aa2179967788a8c1af6a415b8b7313f","sha512":"cd9974e4daee8d0a0b4b46f62b612ac1747eaf102706c0332a929019a9ffff74058dd1ea038ffd8a77633fa78442561a80536f296cd26c3a0a8c00817f68f6ab","ssdeep":"3072:eS9XPLAya82hrZ5LxjFYiUUFvVI4Gmvz1HU3NZkUMs6qDIOmO0o1CnvbOC4QJO9h:eShLAyB2hrfVh103N+w/p0oeDOtQJu9","tlshash":"b8544b89ba923529836374b550bf234eb23e4669fc0849d4b09ad4d07db4d4943bffac","first_seen":"2023-12-04T23:30:52Z","last_seen":"2023-12-05T00:12:11Z","times_seen":2,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":160,"dns":35,"connect":1,"send":0,"wait":34,"receive":3,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papmeatidigbo.com/gHzOaAdOhbZ/71405","fqdn":"papmeatidigbo.com","domain":"papmeatidigbo.com","tld":"com"},"ip":{"addr":"172.255.6.58","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.384Z","timestamp":1701731517384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"papmeatidigbo.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Oct 2023 10:35:36 GMT","end":"Sat, 20 Jan 2024 10:35:35 GMT"},"fingerprint":{"sha1":"9F:26:AD:B7:6D:9C:CB:94:FC:07:D1:33:2D:1D:BA:1B:27:E9:4F:D1","sha256":"E0:4F:46:08:2F:9F:63:CD:A4:B8:9C:90:62:F3:B6:66:1E:A9:FB:E8:19:70:12:82:4F:65:A2:FA:03:24:EB:C5"}}},"request":{"raw":"GET /gHzOaAdOhbZ/71405 HTTP/1.1\r\nHost: papmeatidigbo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 04 Dec 2023 23:11:51 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://ds2play.com\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Tue, 05-Dec-2023 23:11:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Tue, 05-Dec-2023 23:11:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-20T05:36:29.247026Z","times_seen":10701,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":8,"connect":26,"send":0,"wait":32,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worstideatum.com/reA3n475k3U/70849","fqdn":"worstideatum.com","domain":"worstideatum.com","tld":"com"},"ip":{"addr":"23.109.248.166","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.389Z","timestamp":1701731517389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"worstideatum.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Sep 2023 23:17:51 GMT","end":"Tue, 26 Dec 2023 23:17:50 GMT"},"fingerprint":{"sha1":"56:54:A5:6C:79:64:02:44:9A:17:E2:08:6E:8F:36:A8:14:F4:83:BE","sha256":"B7:4D:DE:28:39:C5:FF:E2:24:1A:39:AB:8B:25:C4:3A:93:1A:8A:86:E6:66:FF:33:2F:CC:86:A9:2A:58:66:F8"}}},"request":{"raw":"GET /reA3n475k3U/70849 HTTP/1.1\r\nHost: worstideatum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 04 Dec 2023 23:11:51 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://ds2play.com\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Tue, 05-Dec-2023 23:11:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Tue, 05-Dec-2023 23:11:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix\\012- data","md5":"7029066c27ac6f5ef18d660d5741979a","sha1":"46c6643f07aa7f6bfe7118de926b86defc5087c4","sha256":"59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2","sha512":"7e8e93f4a89ce7fae011403e14a1d53544c6e6f6b6010d61129dc27937806d2b03802610d7999eab33a4c36b0f9e001d9d76001b8354087634c1aa9c740c536f","ssdeep":"","tlshash":"de70000000c03c30cc00003000000000000c30000000c00300000c3000030c000c003c","first_seen":"2023-04-09T15:32:38Z","last_seen":"2025-03-02T06:10:10.559841Z","times_seen":229342,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":155,"connect":39,"send":0,"wait":40,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/fonts/avertastd-black-webfont.woff2","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.848Z","timestamp":1701731517848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 12 Feb 2023 00:00:00 GMT","end":"Sun, 11 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3","sha256":"87:B4:CF:85:01:9A:AD:66:0E:D3:7A:68:BC:81:A5:00:B9:5F:C8:26:97:F2:E5:D4:A5:26:74:B2:92:EE:AF:FB"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-black-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22820\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 02 Jan 2024 05:26:48 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 64819\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=m%2F0vIiLx%2BZcfcGL6HFM1PNWLOk0MZiB%2FoSMiHIBtCJ93bCkl72TWervqI9Q9i4XL9noXtug2o%2B0BCncxpVrX3K51HuryCoC5x9a1TagUAGj3nz62%2B1QXdMdsW67tfw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb1efe23569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22820, version 1.0\\012- data","md5":"1e976387cb594982692bdbdffde86f91","sha1":"9546836a7d80c17d85cdd37a9553852f00af031b","sha256":"4dc982a61a00481f4c9545f9f2da64098428b4aec96838de3c194fa82373ce1d","sha512":"f63f58e1dfe0c08f3c262ef14bd4567c8604873486b50ce31d4d1db8976926f0bb65ffd792181144da049f74a362d52114277bedd5fd75f5b067aa2269c95155","ssdeep":"384:Dmtr9L0ILBYhzpVK87bfeTGzgdLN0vdCmyfA+IUF9/LgLnq/g4J6:DO9L/BYhdQSDea0/Dm9NUTMbqIm6","tlshash":"dfa2d0eef042f863db1207a4857f222187b7a8ec41021d13fe2f6259d4a1d456db2db7","first_seen":"2023-04-08T19:13:00Z","last_seen":"2026-05-20T04:19:46.405443Z","times_seen":1576,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/d/","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T23:11:56.759Z","timestamp":1701731516759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ds2play.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 11:08:38 GMT","end":"Wed, 28 Feb 2024 11:08:37 GMT"},"fingerprint":{"sha1":"01:70:30:C0:4B:E8:2F:96:93:F4:0F:7C:31:5C:D0:AE:09:D6:0F:AC","sha256":"BA:1B:E8:96:CA:12:EB:01:9C:60:D3:DC:A6:0F:12:8D:E9:0E:4F:36:0F:07:68:4E:3E:CD:76:8C:78:76:6C:03"}}},"request":{"raw":"GET /d/ HTTP/1.1\r\nHost: ds2play.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Sun, 03 Dec 2023 23:11:51 GMT\r\nset-cookie: lang=1; domain=.ds2play.com; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QyzqWU04zNSmUltar%2FrLZcO1u21AZnidfUK7Mt%2FVZ%2BOvkpU2sQujwHhYzOJN7DvrNS1YJRBVAQskceMLE%2FJg6BgzWnOl%2B2ehYujb5T3mpTn9L2rPj6oDdmLqaQ6x\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb181971b518-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24939,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (2772), with no line terminators","md5":"5516902f310305064c7b2aaa099d9d61","sha1":"ea7a5f53cfb40187ce4ba91d85da1f524e3c55ab","sha256":"848e9bd7f22ebde1ff08dd059692ecdbf9b23c5ca2d43d946369b841be75cc20","sha512":"792bd60ab0373238db42b89327670aefe485b2974f76a3eca5f02a7d247ed8adea8c4f5451c4139f0dd1569145154b2fb12057350312bf9b918a884270d07b47","ssdeep":"","tlshash":"4951825a3d81832ec542109cb5f2d6bdb92ca1050e0799d082edcaadd940f9adc66eb4","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":160,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/css/style.css","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.362Z","timestamp":1701731517362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 12 Feb 2023 00:00:00 GMT","end":"Sun, 11 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3","sha256":"87:B4:CF:85:01:9A:AD:66:0E:D3:7A:68:BC:81:A5:00:B9:5F:C8:26:97:F2:E5:D4:A5:26:74:B2:92:EE:AF:FB"}}},"request":{"raw":"GET /theme_2/css/style.css HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:51 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\ncf-bgj: minify\r\ncf-polished: origSize=249272\r\nexpires: Mon, 02 Dec 2024 05:00:39 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncf-cache-status: HIT\r\nage: 58813\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=tKhWEarT%2B8Dh4Hy1%2BNT7KE09rtvi%2BcYvyusC%2FbE1Z58qMO9w3wtOQpBCpZYMOa6x%2FAsD39IvCXtQTk9md%2FVLbj0FLlC22%2Bkn3PlamW%2FWEADU6tHFxvyX8Kxm%2Fwl8zQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb1cdd10b4ee-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65465)","md5":"6ff549c82309fe93cb6f38f8fcf60e49","sha1":"c5621629b2a258c7fb572ab9d03517c7d60896fd","sha256":"668326f298c9701a6422f5b7f229966fd87ae68940381a9c0c898197667a8c4c","sha512":"29a81a811ea914f233a9d961884df93f916b5a544b1af721739c287bfff9404e83ad091d98b1732d8693955f36734c7ea4a3a936cd567186750c241687a9ff24","ssdeep":"1536:XL41aqIk+QY4H50DOUbt3I/vtXVdWGFIib2Qu8IEiy6BfAXnwo1OvMFO3kAmFZa0:s1bIkbYeCOUJ3i5GUIAXT1","tlshash":"ba1402b4d41e01da7726c60fab41b27b98f6f338d5410e4ae08b5c5e5de2b9801c9bed","first_seen":"2023-04-06T07:36:07Z","last_seen":"2025-02-04T16:54:18.888073Z","times_seen":743,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":165,"dns":29,"connect":3,"send":0,"wait":18,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forfeitsubscribe.com/06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js","fqdn":"forfeitsubscribe.com","domain":"forfeitsubscribe.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.367Z","timestamp":1701731517367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"forfeitsubscribe.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 06:52:30 GMT","end":"Mon, 26 Feb 2024 06:52:29 GMT"},"fingerprint":{"sha1":"82:B2:D8:34:F6:E3:2B:C7:7B:42:8E:0F:C8:FB:E1:E9:FC:49:04:1B","sha256":"6C:08:25:92:AB:81:CE:5C:FD:0F:FE:91:4D:C9:7E:64:93:08:2E:6A:0F:38:65:F9:EB:10:0A:C5:AB:B1:29:4F"}}},"request":{"raw":"GET /06/e2/ee/06e2eefbde702208a7324b7b8f526df8.js HTTP/1.1\r\nHost: forfeitsubscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 04 Dec 2023 23:11:52 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 406baac00510415ad36ba18630af5133\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16613,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (40884), with no line terminators","md5":"045a8eef68bbaa8e82c555e6f4c63529","sha1":"70f313d262cb1ecc74c27dbe4409a80cf67be47a","sha256":"32061f0d64bd2de1c15075738a7a002470bcf7f605a55a4aaaa57e5dded5ca83","sha512":"1eb71f6934e778b500599af227b77be234f9e8b38a39047b9800c916ff59d5fe72fdc4de42bf84f828fb14818f84bd1903ebce1b52e27b6ec34a8b4d9a236cb7","ssdeep":"768:Wrvtws0pVllAMJPq+0thwUEMATrKqfy5Z2sGP:OtT0pVllHP7UuUEMMrKqfy5Z2HP","tlshash":"0e0307cc7f1072a657b56077732ee514f5ba0c5cae88c44cd32b7944b9a8335ea363a8","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1586,"timings":{"blocked":669,"dns":323,"connect":125,"send":0,"wait":119,"receive":115,"ssl":233},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"forfeitsubscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"forfeitsubscribe.com/2c/03/60/2c0360ed33b0b4736859081c701f9a91.js","fqdn":"forfeitsubscribe.com","domain":"forfeitsubscribe.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.369Z","timestamp":1701731517369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"forfeitsubscribe.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 06:52:30 GMT","end":"Mon, 26 Feb 2024 06:52:29 GMT"},"fingerprint":{"sha1":"82:B2:D8:34:F6:E3:2B:C7:7B:42:8E:0F:C8:FB:E1:E9:FC:49:04:1B","sha256":"6C:08:25:92:AB:81:CE:5C:FD:0F:FE:91:4D:C9:7E:64:93:08:2E:6A:0F:38:65:F9:EB:10:0A:C5:AB:B1:29:4F"}}},"request":{"raw":"GET /2c/03/60/2c0360ed33b0b4736859081c701f9a91.js HTTP/1.1\r\nHost: forfeitsubscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 04 Dec 2023 23:11:52 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: f702db40ee6c5d2cbb48710a22a3d7e2\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13575,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (37803), with no line terminators","md5":"0d622cf25483792c99cd3ada6a20caaa","sha1":"f9c350879a5ddd9a74889e762f652ed17f98652f","sha256":"96ff57070d4a6a48d7fcd102f3295907c2c43206c39fc4b5716ca37371d84564","sha512":"ec25b6cb828d0436ebe299c76495ee18d6a2e841ebd2aa07686c69ab7894fed02c636dfb8c971c2e8c13cad7d3bae894a42da1b6af39ca97da54c45d8f33a337","ssdeep":"768:w8gZN21KHXVn8jeeKcZDXDUMSkONMddtlU6LuaGPcNAFvcGtOkeSr:wvZN21SFn8jRZnUMSk5dNLuaGPW5U","tlshash":"a80372243f80645903938f7bb61fb4e4f16a286f3c44588fdb01bc546a51627fee1976","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1619,"timings":{"blocked":667,"dns":339,"connect":114,"send":0,"wait":135,"receive":114,"ssl":234},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"forfeitsubscribe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proftrafficcounter.com/stats","fqdn":"proftrafficcounter.com","domain":"proftrafficcounter.com","tld":"com"},"ip":{"addr":"18.184.210.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.316Z","timestamp":1701731518316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"proftrafficcounter.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 21 Nov 2023 00:00:00 GMT","end":"Thu, 19 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6","sha256":"66:22:F4:5A:8A:F6:B0:E3:CF:BA:D2:3D:3C:B7:D4:0B:FE:00:4D:DE:4E:A2:B5:68:D3:ED:C6:E6:D9:5B:06:12"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: proftrafficcounter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://ds2play.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=0577b262-217f-4cd6-8ac2-9c22fa90980c:2:1; expires=Thu, 01 Dec 2033 23:11:52 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"35908cde64936e0a51641e3f15e02b60","sha1":"a25c2455efe1ba98c39b909b456606442afc11f1","sha256":"e3093e030774485642820b939a4d9e548a72095cb705180951026b7b491122fd","sha512":"ec9cc2f72a65545aa41b166007b5eeee5a32f6bd8ab6ea3eecd6fc68f0ace3eb5ca736ef03ef62716c54e0618441d1f38f92c5383ee4529d3b5a3a69a596c3a0","ssdeep":"","tlshash":"e790040071f001f410f54d4d0cd055fd00c00d3554f400d50f70d4f513f7411c400413","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":159,"dns":53,"connect":26,"send":0,"wait":26,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proftrafficcounter.com/stats","fqdn":"proftrafficcounter.com","domain":"proftrafficcounter.com","tld":"com"},"ip":{"addr":"18.184.210.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.316Z","timestamp":1701731518316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"proftrafficcounter.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 21 Nov 2023 00:00:00 GMT","end":"Thu, 19 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"E3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6","sha256":"66:22:F4:5A:8A:F6:B0:E3:CF:BA:D2:3D:3C:B7:D4:0B:FE:00:4D:DE:4E:A2:B5:68:D3:ED:C6:E6:D9:5B:06:12"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: proftrafficcounter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://ds2play.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=5ff712f9-bcc7-4efb-90d9-8ee068ff9fa4:2:1; expires=Thu, 01 Dec 2033 23:11:52 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"285008692cba47b9f2867c898e22b44c","sha1":"fd1dc4d2151d2451c6b38ed1ea0a974417772e2e","sha256":"405e8ee8be5a04faafbf56e4098fafbcdf7640f02196f48a7908b7b11ce360e8","sha512":"004b7593bc8ade70baefcdb91bb1c7c5ac30ca7b25f74362cac303dcdeb1e5186ee13f4c66af6e6cdf5119bece5b4ac17c20b17662ca1a9ef074579ab1c5aa82","ssdeep":"","tlshash":"cd9002958299965046198514151800910a164046142622504baaa2916104405a811487","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":159,"dns":53,"connect":26,"send":0,"wait":26,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipmathematical.org/Q3VWSkRsSjU5eSEhNTAncRkPDiMFOQEMLwQ3AwQmGyQDDBUFNHA+LSdIb3p8c0BgbDQqEWt7YjABNz4xMEhnbC0tEzl3YjVIZ2R3d1tlfmpzUyN3dWUBJisjfkRwOjA3GWt7c3NEYXl1dkRueXF2","fqdn":"ipmathematical.org","domain":"ipmathematical.org","tld":"org"},"ip":{"addr":"172.67.146.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.373Z","timestamp":1701731518373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipmathematical.org","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 29 Nov 2023 06:02:08 GMT","end":"Tue, 27 Feb 2024 06:02:07 GMT"},"fingerprint":{"sha1":"D2:34:74:D1:16:55:F8:EF:87:87:38:64:00:6A:AA:9B:4C:F4:F1:CF","sha256":"45:CB:E1:76:49:E0:D3:8A:44:25:05:31:93:02:8A:68:3B:A0:28:32:18:30:11:9B:3C:B6:EB:41:AB:94:0F:50"}}},"request":{"raw":"GET /Q3VWSkRsSjU5eSEhNTAncRkPDiMFOQEMLwQ3AwQmGyQDDBUFNHA+LSdIb3p8c0BgbDQqEWt7YjABNz4xMEhnbC0tEzl3YjVIZ2R3d1tlfmpzUyN3dWUBJisjfkRwOjA3GWt7c3NEYXl1dkRueXF2 HTTP/1.1\r\nHost: ipmathematical.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=aM0%2B1VoXCK46a8wY8w1ex3cwNpgWqOrWwMii%2FRjOrgl3KieC4adzNtW%2B4ftW4JNDSfCa2TUFLytIyCTXOdsl0L9jwDNfcF8MnanlJva7d3CyuoRyi1JSk0kSwLHEArm%2FsvEiRHQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb22be7eb524-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":87,"dns":32,"connect":1,"send":0,"wait":114,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orgotitedu.info/ZmQ3YVMHBlQMbAdZVUcmFAgKRGEgQQUnN1cCB1QlFFdECyATHQBPMAoLQgU1FAtZFX0IAUNEYSA1VlMdVwVdLBoiJkQsFyRcfCQFBS9gUCcgPEA3HSU1bicLNBBSKRA8IHsYPDwpchIWKx5xAgsjVG8lJFIrYFEGPCcGUR4+CHoxCzcMUjMWHjdzFhUvPF80NSMcWCMXASF7JCQsI3UwBiEhW1QdIAxlOQsBNW0pEjwCdAoJLih2OxUzVXU4ElYpYikSNDx1IwIhMEAnMSI1cTESMBBkMwY3IGMNElUwQCcxICZAJBEwXXAzOgEzYDceKDx2BRwzIBoFAycyRDMSVlx2Kj8sIm8ZYgQ3WyMKJxNAJhUBIlQ1PyMeYCAdBzEHNzEnVUcmAVcUYSA7IzVzJyQyNlwCICcIQzYEVwthKT9TIRELIAkKR1w6KhRzKD88HFgxF1AL","fqdn":"orgotitedu.info","domain":"orgotitedu.info","tld":"info"},"ip":{"addr":"108.157.229.6","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.400Z","timestamp":1701731518400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orgotitedu.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 12 Oct 2023 00:00:00 GMT","end":"Sun, 10 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5","sha256":"B1:B7:32:9C:AC:A4:71:1E:5B:83:D0:30:76:C3:CA:4E:67:6E:E7:A8:E5:DF:51:43:14:07:46:F9:85:C2:34:23"}}},"request":{"raw":"GET /ZmQ3YVMHBlQMbAdZVUcmFAgKRGEgQQUnN1cCB1QlFFdECyATHQBPMAoLQgU1FAtZFX0IAUNEYSA1VlMdVwVdLBoiJkQsFyRcfCQFBS9gUCcgPEA3HSU1bicLNBBSKRA8IHsYPDwpchIWKx5xAgsjVG8lJFIrYFEGPCcGUR4+CHoxCzcMUjMWHjdzFhUvPF80NSMcWCMXASF7JCQsI3UwBiEhW1QdIAxlOQsBNW0pEjwCdAoJLih2OxUzVXU4ElYpYikSNDx1IwIhMEAnMSI1cTESMBBkMwY3IGMNElUwQCcxICZAJBEwXXAzOgEzYDceKDx2BRwzIBoFAycyRDMSVlx2Kj8sIm8ZYgQ3WyMKJxNAJhUBIlQ1PyMeYCAdBzEHNzEnVUcmAVcUYSA7IzVzJyQyNlwCICcIQzYEVwthKT9TIRELIAkKR1w6KhRzKD88HFgxF1AL HTTP/1.1\r\nHost: orgotitedu.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1193\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: RVRAVG6uIPIg4FbuaVkxFAGBijMIPjWdxVjCUUVliHC4Kt0V1QBsHQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1193,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3044), with no line terminators","md5":"0030f993926557f0eaad83d1f2f8f3cd","sha1":"58d3b53e472e75118f08982ea876ba0ed560bb54","sha256":"63cdc3d47120091adfd61a450eed474ff2d7c42c95654153f9fe6c4b81cf0e32","sha512":"edcd37f0fbb0671ef0634d629cec68dcfc67c5dba75efce1e3011ef5e678454d46b0f0693e2c88a87af966b7313ea21b50e82aa519e03ba13da2ef0f19d25c17","ssdeep":"","tlshash":"7451128d34f3a0c282f2a025443bb899fa284a95834cdb14863d96bcbc715ed6357f4c","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":85,"dns":28,"connect":24,"send":0,"wait":128,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipmathematical.org/VGdNVld7WC4lajYLJi4CP1YrDxYWACs6YjslIBhvDDAIHDY6DGsiPjBadGZmZlJ1cCc9A3BkbnIUOTcjIRRwZ3E9CSs5anIRcGd5ZEl7ZnlnQThrZnITPTcwaVZrJiMgC3BnYGRWemVmYVZ1ZW5k","fqdn":"ipmathematical.org","domain":"ipmathematical.org","tld":"org"},"ip":{"addr":"172.67.146.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.436Z","timestamp":1701731518436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipmathematical.org","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 29 Nov 2023 06:02:08 GMT","end":"Tue, 27 Feb 2024 06:02:07 GMT"},"fingerprint":{"sha1":"D2:34:74:D1:16:55:F8:EF:87:87:38:64:00:6A:AA:9B:4C:F4:F1:CF","sha256":"45:CB:E1:76:49:E0:D3:8A:44:25:05:31:93:02:8A:68:3B:A0:28:32:18:30:11:9B:3C:B6:EB:41:AB:94:0F:50"}}},"request":{"raw":"GET /VGdNVld7WC4lajYLJi4CP1YrDxYWACs6YjslIBhvDDAIHDY6DGsiPjBadGZmZlJ1cCc9A3BkbnIUOTcjIRRwZ3E9CSs5anIRcGd5ZEl7ZnlnQThrZnITPTcwaVZrJiMgC3BnYGRWemVmYVZ1ZW5k HTTP/1.1\r\nHost: ipmathematical.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=U05di8L%2BTkS2JJTsrtQEG0Jq4Zf9tm3iihmatKCUajaUtAkhqOdqXDXm6RaszD%2B%2FXcZji3F8LD0KSjuHV%2F7ukHQQazczSH7odhrN9AjWhiUtsvyBx39qv%2Bdm%2BQrZP3maIJIfKVw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb22be80b524-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbestpolojpob.org/M0N1NnZSIRZbSVJ+FxADQS9IE0R1ZkdwEgIlRQMAQXAGXAVGOkIYFV8sAFIQQSwbQlhdJgETRHUaJAY/RBJEWRF/FUFaLGcgB2A+BikWBTtwJxh8GngGOEU4dw1QBDBiKRFEPWIrEnQiQBczWiN8CBhjRGAqEVgVAREWfxxiKBNOL14NNnRTAQU0YSMECQx3OFdwAgU7X3sabA9YMiNfBUUPJmQyfDkRWjgCBVAENH06AgIhYHtHfxtQADdhT0cgHWAOUi4GByFgc1AENH8HI3IsXisPejNhLhR+OEkCMgcHaS0zTyxeKw94IFg3F34SXQICcFMBBRZuPHonIgMbUBtYfBtSCzhBJF4ZBXcYfgIRWCRJIg1gDlIqJFgjSiREbBhxcRZhBkogEnQPUi0/WDddDk19HHEVP2IjBBkCfzBScDsFPl0NTXgYCwFTXAVcLQULBEdyH3wmdSIlYhN+Mw","fqdn":"getbestpolojpob.org","domain":"getbestpolojpob.org","tld":"org"},"ip":{"addr":"65.9.55.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.432Z","timestamp":1701731518432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbestpolojpob.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 29 Nov 2023 00:00:00 GMT","end":"Fri, 27 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BD:F6:95:89:F9:7E:C8:03:91:9C:73:E7:C5:4C:5B:31:83:EF:77:ED","sha256":"BC:E9:2E:AA:A6:29:52:4C:0B:D3:34:89:98:7D:7A:6B:AD:B9:AD:4C:A9:E0:68:5A:4D:1D:88:1F:1F:50:FC:27"}}},"request":{"raw":"GET /M0N1NnZSIRZbSVJ+FxADQS9IE0R1ZkdwEgIlRQMAQXAGXAVGOkIYFV8sAFIQQSwbQlhdJgETRHUaJAY/RBJEWRF/FUFaLGcgB2A+BikWBTtwJxh8GngGOEU4dw1QBDBiKRFEPWIrEnQiQBczWiN8CBhjRGAqEVgVAREWfxxiKBNOL14NNnRTAQU0YSMECQx3OFdwAgU7X3sabA9YMiNfBUUPJmQyfDkRWjgCBVAENH06AgIhYHtHfxtQADdhT0cgHWAOUi4GByFgc1AENH8HI3IsXisPejNhLhR+OEkCMgcHaS0zTyxeKw94IFg3F34SXQICcFMBBRZuPHonIgMbUBtYfBtSCzhBJF4ZBXcYfgIRWCRJIg1gDlIqJFgjSiREbBhxcRZhBkogEnQPUi0/WDddDk19HHEVP2IjBBkCfzBScDsFPl0NTXgYCwFTXAVcLQULBEdyH3wmdSIlYhN+Mw HTTP/1.1\r\nHost: getbestpolojpob.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1193\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dbf67e262a6295e9e8f6570f9aae7e0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: nLNIL-J6BTd9S0wmuBKcdXuUwxADbdm5BbZMhg3zHggOlGSGYQq8Vw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1193,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3044), with no line terminators","md5":"db0222cb0ef4b0bdb5467a62ea651c20","sha1":"3297629d6fb5eb3fa8808cbe536127a1dd668af3","sha256":"94eccedda997c96bcb2fba81937bcba540a2c52abb76ffac2e92a59c7e04a8db","sha512":"fb32a12c862d6acad9452aadc2647f1e12162945b9f7cf7ad31edb04db5d0541edfc2c2ad19643190032c44f7d0e85a9c17f9f5c6751482b558dbd8c7784f6de","ssdeep":"","tlshash":"5251028d34f3a0c2c2b66028447bb59afa285aa5834ccb14867d93bcbd715ed6317f4c","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":67,"dns":24,"connect":12,"send":0,"wait":124,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipmathematical.org/WDY1eGd3CVYLWg5+XTwzDV5SKy8WAVM/MRFSW0lCanRsSF4hUFsPQSxfUUVebwIHTFR+RlwcWmkOEwsTOUJAC1ppEFwWATcLEw5aaRgFVlV2AhMNWmkQQQgGPwsEXhcsQllFVm8GBE9UaQMEQFRvBg","fqdn":"ipmathematical.org","domain":"ipmathematical.org","tld":"org"},"ip":{"addr":"172.67.146.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.422Z","timestamp":1701731518422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipmathematical.org","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 29 Nov 2023 06:02:08 GMT","end":"Tue, 27 Feb 2024 06:02:07 GMT"},"fingerprint":{"sha1":"D2:34:74:D1:16:55:F8:EF:87:87:38:64:00:6A:AA:9B:4C:F4:F1:CF","sha256":"45:CB:E1:76:49:E0:D3:8A:44:25:05:31:93:02:8A:68:3B:A0:28:32:18:30:11:9B:3C:B6:EB:41:AB:94:0F:50"}}},"request":{"raw":"GET /WDY1eGd3CVYLWg5+XTwzDV5SKy8WAVM/MRFSW0lCanRsSF4hUFsPQSxfUUVebwIHTFR+RlwcWmkOEwsTOUJAC1ppEFwWATcLEw5aaRgFVlV2AhMNWmkQQQgGPwsEXhcsQllFVm8GBE9UaQMEQFRvBg HTTP/1.1\r\nHost: ipmathematical.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qyF1TraEJdh0A8Sjp5u0KtdQ%2B5oHjwrf74mZXgxujV0gDCezQj4kyty7WTFjAyXv81Igzmsnb7xkAyR4EO9sBCiTxIQ364SESg3xIeNT9MLRJ1WDHZfhqLqqWWdXSBWhYcEkkjo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb22de8cb524-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":61,"dns":1,"connect":1,"send":0,"wait":140,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbestpolojpob.org/UzVvQmIyVwwvXTIIDWQXIVlSZ1AVEF0EBmJTX3cUIQYcKBEmTFhsAT9aGiYEIVoBNkw9UBtnUBVGCylTOlA3LTQaUhgkMAJ8BAAJAXE+Gg4CYTouMxlNKhUkEm8YDyFrTC41EWFhPC1WGAQudToSfFwACQF+OgEnF3MXcy4yQgwaJQZBVxAgNFApCiAEbRh6OjB0VxUjEQ0HBgo7Uz0DFgtjXzI2NQQlECYBDQUACgp7LRUKAmY9EyEycy0IMWNvBRcOK38hBQoCZj5yBBoEPQw6Y2A/EFInfissFgRtKilSMnMtCCESdwAXNjt5PSwKHmY5DDY1BEILBxtNOi8mBU0mDypqZjwHEhRTKQgrCwU9eyARdCYHGyB7LhRbFnZeDCgHBAd7MBJNJxAVdV8cLQwjCD0UKiZzO3YyHVNdAA","fqdn":"getbestpolojpob.org","domain":"getbestpolojpob.org","tld":"org"},"ip":{"addr":"65.9.55.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.420Z","timestamp":1701731518420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbestpolojpob.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 29 Nov 2023 00:00:00 GMT","end":"Fri, 27 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BD:F6:95:89:F9:7E:C8:03:91:9C:73:E7:C5:4C:5B:31:83:EF:77:ED","sha256":"BC:E9:2E:AA:A6:29:52:4C:0B:D3:34:89:98:7D:7A:6B:AD:B9:AD:4C:A9:E0:68:5A:4D:1D:88:1F:1F:50:FC:27"}}},"request":{"raw":"GET /UzVvQmIyVwwvXTIIDWQXIVlSZ1AVEF0EBmJTX3cUIQYcKBEmTFhsAT9aGiYEIVoBNkw9UBtnUBVGCylTOlA3LTQaUhgkMAJ8BAAJAXE+Gg4CYTouMxlNKhUkEm8YDyFrTC41EWFhPC1WGAQudToSfFwACQF+OgEnF3MXcy4yQgwaJQZBVxAgNFApCiAEbRh6OjB0VxUjEQ0HBgo7Uz0DFgtjXzI2NQQlECYBDQUACgp7LRUKAmY9EyEycy0IMWNvBRcOK38hBQoCZj5yBBoEPQw6Y2A/EFInfissFgRtKilSMnMtCCESdwAXNjt5PSwKHmY5DDY1BEILBxtNOi8mBU0mDypqZjwHEhRTKQgrCwU9eyARdCYHGyB7LhRbFnZeDCgHBAd7MBJNJxAVdV8cLQwjCD0UKiZzO3YyHVNdAA HTTP/1.1\r\nHost: getbestpolojpob.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1173\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dbf67e262a6295e9e8f6570f9aae7e0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: rDcPOWjIyhlV8NrVgfOTaEy23cFguVP1r7Bqgp1zHh73UVU_uVetbg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1173,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3021), with no line terminators","md5":"78c957e59d4ccae713dddc6b2c21d2f1","sha1":"b5337fc9b67b7b642b9f45ddb5f82150534a52fe","sha256":"92256da014c6b1b52236cdd6011e8629ffd7ef9d8a1fd690fdfd16e72fb8e68d","sha512":"78b698c3ca4c57f267bf9d98623365d1719ce0f3b79030a2530414e8cf47133d86b5cff6b6a405806ce1df309383a2ce49cb354f7601f80a937bf79d56f586b9","ssdeep":"","tlshash":"3c51e18d34f360c2c2f26025017bb59afa285a95834ccb18863d96bdbd715d97357f4c","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":83,"dns":44,"connect":13,"send":0,"wait":168,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/favicon.ico","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.945Z","timestamp":1701731518945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ds2play.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 11:08:38 GMT","end":"Wed, 28 Feb 2024 11:08:37 GMT"},"fingerprint":{"sha1":"01:70:30:C0:4B:E8:2F:96:93:F4:0F:7C:31:5C:D0:AE:09:D6:0F:AC","sha256":"BA:1B:E8:96:CA:12:EB:01:9C:60:D3:DC:A6:0F:12:8D:E9:0E:4F:36:0F:07:68:4E:3E:CD:76:8C:78:76:6C:03"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ds2play.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/d/\r\nCookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-3c2e\"\r\nexpires: Mon, 25 Dec 2023 03:32:55 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 848338\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vmB8u7%2FgFmFokIwx7rgtdd9RFF1WB14zGMYgxgQqDWBaSac2CHnix1iLuYfyy79HDyirqmMr8jnRhtEoiYGlHm6xT7M1U5EOpIJsIrL%2B4OzQC4gSHeKFcO25xW3J\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb259cadb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\\012- data","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-05-20T04:19:46.403192Z","times_seen":3683,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.922Z","timestamp":1701731518922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:25:04 GMT","end":"Mon, 15 Jan 2024 11:25:03 GMT"},"fingerprint":{"sha1":"1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B","sha256":"18:DD:28:CE:04:BA:29:BB:BF:0C:6D:03:D5:97:E2:19:EF:D0:5D:FA:ED:A7:70:06:66:A8:74:2A:D6:60:0D:2F"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:8l7deD8syF4WMZfKCK-F6Gl3LeMkEA:eeap61IlSnn5RWH8; Expires=Wed, 03-Dec-2025 23:11:53 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ASKXGp2BDzrVTG6GklebODYOrOYKJkjGgzTeOvthb6b004LRPWH-uAQs0UL-BWuqCsr9nY6dTBHo\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-L1FhNos90a2XmQK4aWkYhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":33,"dns":2,"connect":15,"send":0,"wait":27,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.926Z","timestamp":1701731518926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:25:04 GMT","end":"Mon, 15 Jan 2024 11:25:03 GMT"},"fingerprint":{"sha1":"1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B","sha256":"18:DD:28:CE:04:BA:29:BB:BF:0C:6D:03:D5:97:E2:19:EF:D0:5D:FA:ED:A7:70:06:66:A8:74:2A:D6:60:0D:2F"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:z_1xMrAEgnnRyf0g5vd-dtmR4VzbEQ:9C8FazL5KNDa66vu; Expires=Wed, 03-Dec-2025 23:11:53 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1j0pVI0y-ATHV1XcLF_CnJtKFJqJzUiZd2tY79Ju1tA-jMNRnlqyC59RJLBvi9VK-uUH1nyg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Oq0YjlmiAZbI8A9pr0EPew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":37,"dns":1,"connect":16,"send":0,"wait":26,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbestpolojpob.org/utx?cb=fXjOdIHFKbzH\u0026top=ds2play.com\u0026tid=901258","fqdn":"getbestpolojpob.org","domain":"getbestpolojpob.org","tld":"org"},"ip":{"addr":"65.9.55.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.963Z","timestamp":1701731518963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbestpolojpob.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 29 Nov 2023 00:00:00 GMT","end":"Fri, 27 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BD:F6:95:89:F9:7E:C8:03:91:9C:73:E7:C5:4C:5B:31:83:EF:77:ED","sha256":"BC:E9:2E:AA:A6:29:52:4C:0B:D3:34:89:98:7D:7A:6B:AD:B9:AD:4C:A9:E0:68:5A:4D:1D:88:1F:1F:50:FC:27"}}},"request":{"raw":"GET /utx?cb=fXjOdIHFKbzH\u0026top=ds2play.com\u0026tid=901258 HTTP/1.1\r\nHost: getbestpolojpob.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ds2play.com\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Mon, 04 Dec 2023 23:12:53 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dbf67e262a6295e9e8f6570f9aae7e0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: cu4lGmb0dgRwBfqTcZFuUSG5CwnlUv_ElmQvF7gwbPuRNI7GRMxM3A==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orgotitedu.info/utx?cb=pn80KA1iIVNH\u0026top=ds2play.com\u0026tid=908056","fqdn":"orgotitedu.info","domain":"orgotitedu.info","tld":"info"},"ip":{"addr":"108.157.229.6","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.951Z","timestamp":1701731518951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orgotitedu.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 12 Oct 2023 00:00:00 GMT","end":"Sun, 10 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"79:CC:FF:0E:F4:F4:8A:D7:72:F6:75:7A:06:B2:F5:7A:84:55:95:F5","sha256":"B1:B7:32:9C:AC:A4:71:1E:5B:83:D0:30:76:C3:CA:4E:67:6E:E7:A8:E5:DF:51:43:14:07:46:F9:85:C2:34:23"}}},"request":{"raw":"GET /utx?cb=pn80KA1iIVNH\u0026top=ds2play.com\u0026tid=908056 HTTP/1.1\r\nHost: orgotitedu.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ds2play.com\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Mon, 04 Dec 2023 23:12:53 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: zotQnAwLjiSa963_c2dbtp7XNcwQ2C0FnWDRKShhjfkp8ABGNv9lCw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ASKXGp2BDzrVTG6GklebODYOrOYKJkjGgzTeOvthb6b004LRPWH-uAQs0UL-BWuqCsr9nY6dTBHo","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.039Z","timestamp":1701731519039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:25:04 GMT","end":"Mon, 15 Jan 2024 11:25:03 GMT"},"fingerprint":{"sha1":"1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B","sha256":"18:DD:28:CE:04:BA:29:BB:BF:0C:6D:03:D5:97:E2:19:EF:D0:5D:FA:ED:A7:70:06:66:A8:74:2A:D6:60:0D:2F"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ASKXGp2BDzrVTG6GklebODYOrOYKJkjGgzTeOvthb6b004LRPWH-uAQs0UL-BWuqCsr9nY6dTBHo HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:mLHlR63qH-vVMMsehzv0mpWFq08RuA:m2oedlVYSp2gKZjo;Path=/;Expires=Wed, 03-Dec-2025 23:11:53 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1KnTJmGjoiXOULI8wG_j3lWOV9tQdcXlcdFri9v4cuiEjtHHyyY6QXbYIxuJONRuKyI04J0g\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-519995528%3A1701731513368123\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: script-src 'nonce-F02I-h0J5jdJpcsZ5YsiUA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 403\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":403,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (395)","md5":"acc5b468c0533a6a161cb8c803688193","sha1":"38be3964b1251d9b8fc2496e85656935ff62fac5","sha256":"fb3e7738ec4ae20808bfbbcd42edde1dd3407491ad013d87aaf651da3998e67e","sha512":"180d002bd1b40e8d3108e28a996d5b4d94f6e8dac0f71479b6af76090524e164c4500dd5fef551212e64e79de9ff04f14b009bb4852161d9e26a58d8a9abb35a","ssdeep":"","tlshash":"17f005af0c8600ec044339f6a414b08c8674646c3edff4da71f267044594c27222e3f7","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1j0pVI0y-ATHV1XcLF_CnJtKFJqJzUiZd2tY79Ju1tA-jMNRnlqyC59RJLBvi9VK-uUH1nyg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.045Z","timestamp":1701731519045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:25:04 GMT","end":"Mon, 15 Jan 2024 11:25:03 GMT"},"fingerprint":{"sha1":"1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B","sha256":"18:DD:28:CE:04:BA:29:BB:BF:0C:6D:03:D5:97:E2:19:EF:D0:5D:FA:ED:A7:70:06:66:A8:74:2A:D6:60:0D:2F"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1j0pVI0y-ATHV1XcLF_CnJtKFJqJzUiZd2tY79Ju1tA-jMNRnlqyC59RJLBvi9VK-uUH1nyg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:wLMn0MeygVRFPqLtdgs1m-ip3e2THQ:lasndi8HBwNvQxLX;Path=/;Expires=Wed, 03-Dec-2025 23:11:53 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp2OzE0s-rpmd2Ev3AvPYklThnxjrdH0hxBqWV2WwNRpOhC50mPfXqhadbi0DOqEK4gW5AOynw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-838037988%3A1701731513374880\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-iSrHIoC2JI8Olzkr-Db7jg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 403\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":403,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (399)","md5":"ed25905c687e267d3ce905ffa0136ae5","sha1":"eb1ae36ac167dcfc0c933d6b2c8b195eb9ace2d0","sha256":"2a8fff5d1560b3a44d23c0094c41cbe9b52081f7de4b011987ba495fddde4643","sha512":"2abb891d5ea922623896dc945a6ac3c4dd41bd3bc6c924edde8627e4bd7e07a1f93c0964cdf7ed9d17101e25b0a09668b0903836ece60ea4936d946c7aa5bef8","ssdeep":"","tlshash":"aef0c09a185614ed486339f65428b04c683474683ac2b579b1e7630545f9e2b11163b3","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":67,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1f05vr3sjsuy7.cloudfront.net/sdk1ieXoVIgwfRQIkBkRDQXlQTUlQJxEWFAZwMC8yAws2TSo4K1A7XAI3BkRKUCEDFx1LawcXGUt8RBgeFHBWXw8XcA8WAB8hDhhfRAtXV0pTf1JRDR8jBhYNBWhQSRQCaFBJS0ZjUlxJNGhQSQ0fI1RNX0UPR0tKDntWXEk0aFBJCABoUThLRnhMSVNTf1-IeHxUmDVxIMH9SSEpGfFJIX0R9BBAIEysNAV9EC1NJT1h9RAxHRw","fqdn":"d1f05vr3sjsuy7.cloudfront.net","domain":"d1f05vr3sjsuy7.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.212","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T23:11:59.277030805Z","timestamp":1701731519277,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /sdk1ieXoVIgwfRQIkBkRDQXlQTUlQJxEWFAZwMC8yAws2TSo4K1A7XAI3BkRKUCEDFx1LawcXGUt8RBgeFHBWXw8XcA8WAB8hDhhfRAtXV0pTf1JRDR8jBhYNBWhQSRQCaFBJS0ZjUlxJNGhQSQ0fI1RNX0UPR0tKDntWXEk0aFBJCABoUThLRnhMSVNTf1-IeHxUmDVxIMH9SSEpGfFJIX0R9BBAIEysNAV9EC1NJT1h9RAxHRw HTTP/1.1\r\nHost: d1f05vr3sjsuy7.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getbestpolojpob.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 258\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: iRztv4izQUqNPdjLv15UU9lniV-xVCIX2yAqT6q1AM-WEscFo9TVKQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":258,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"3f2d5f2b7ee0764499871f028b45c4df","sha1":"e80a81851fbc08e113d7b7ebaa2303a434865f0b","sha256":"65e63479d27306cc910158306538fdc7e491e1c1c5979e358185814eaab490a7","sha512":"bf560b74d74588955d2ea4431bdefda00c59931ddb8ad7cdb3d7ca69cc8429bcafa582daca88d23647df96630ae0b838037fb6015ae60fb4b67266195189372f","ssdeep":"","tlshash":"abe07d505788e8002091a27f41f420d0138503e5439c037c951d3323966c54bd7e10de","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1f05vr3sjsuy7.cloudfront.net/YQ0IwQ1ogLV4lZTcrVH5jc3MCdmJlKEMsNDN/QjdrKQhgBTsTFlUOKmU2Sidnc2RcIjQkfxYmNCB/AWU7JyANd3w3Ml8oZykqVisvLSRDOzdlN1F+Nyw4WS82ImcCBW9tchVxams1WS0+LDVDZmhzLERmaHNzAG1qZnFyZmhzNVktbHdnAwF/cXJIdW5mcX-JmaHMwRmZpAnMAdnRzaxVxaiQnUyg1ZnB2cWpycgByanJnAnM8KjBVJTU7ZwIFa3N3HnN8Nn8B","fqdn":"d1f05vr3sjsuy7.cloudfront.net","domain":"d1f05vr3sjsuy7.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.212","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T23:11:59.290822821Z","timestamp":1701731519290,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /YQ0IwQ1ogLV4lZTcrVH5jc3MCdmJlKEMsNDN/QjdrKQhgBTsTFlUOKmU2Sidnc2RcIjQkfxYmNCB/AWU7JyANd3w3Ml8oZykqVisvLSRDOzdlN1F+Nyw4WS82ImcCBW9tchVxams1WS0+LDVDZmhzLERmaHNzAG1qZnFyZmhzNVktbHdnAwF/cXJIdW5mcX-JmaHMwRmZpAnMAdnRzaxVxaiQnUyg1ZnB2cWpycgByanJnAnM8KjBVJTU7ZwIFa3N3HnN8Nn8B HTTP/1.1\r\nHost: d1f05vr3sjsuy7.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getbestpolojpob.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 447\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: R4GtBhylhLedM0TeIA4ctLmaedkkuB5BQn3btyRAuQIX2tqaaWh5mg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":447,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (597), with no line terminators","md5":"d82d51f366c8a556bde9e7ecb7cd3236","sha1":"6b48e87b293e37845579916f7e8caca6b132d03e","sha256":"252edebbc89415690904be2f12c5ed8a944dba073bfffba65e76ead5a4f7737c","sha512":"174cd88f32f0d00e3008929942d843040dcdafec0f89fbaf857f702a3aa1cbe5cbe54e6795dbc3f1bfab00888bcf6801722a33817383ae4530b0fd225878dbb3","ssdeep":"","tlshash":"0bf041793819b8166a253f9f40f4e0311b79b0cd206b1f213cab1367622a2b90a24854","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1f05vr3sjsuy7.cloudfront.net/Qa2N1ajMIDBsMDB8KEVcKW1tFXwVNCQYFXRteHCZDLyoZMEsEMzFcXE0XDw4OW0UZC10MXlMPXQheRExSDwFIXhUfExoBDgELEwJGBQUGEl5NFhRXXgQZHAZfCkZHLAZFU1BYA0MUHARXBBQGTwFbDQFPAVtSRUQDTlA3TwFbFBwEBV9GRigWWVMNXAdOUD-dPAVsRA08AKlJFXx1bSlBYAwwGFgFcTlEzWANaU0VbA1pGR1pVAhEQDFwTRkcsAltWW1oVHl5E","fqdn":"d1f05vr3sjsuy7.cloudfront.net","domain":"d1f05vr3sjsuy7.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.212","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T23:11:59.540300483Z","timestamp":1701731519540,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Thu, 19 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52","sha256":"E9:59:5B:FB:7B:3B:3F:96:AE:46:70:B0:A0:33:9A:0E:15:23:16:45:47:E4:D7:05:52:4B:6B:08:84:7B:BA:1D"}}},"request":{"raw":"GET /Qa2N1ajMIDBsMDB8KEVcKW1tFXwVNCQYFXRteHCZDLyoZMEsEMzFcXE0XDw4OW0UZC10MXlMPXQheRExSDwFIXhUfExoBDgELEwJGBQUGEl5NFhRXXgQZHAZfCkZHLAZFU1BYA0MUHARXBBQGTwFbDQFPAVtSRUQDTlA3TwFbFBwEBV9GRigWWVMNXAdOUD-dPAVsRA08AKlJFXx1bSlBYAwwGFgFcTlEzWANaU0VbA1pGR1pVAhEQDFwTRkcsAltWW1oVHl5E HTTP/1.1\r\nHost: d1f05vr3sjsuy7.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://orgotitedu.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 612\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: UyBiSRjH5MJkpqB3J204Mqv307cv-0e1hfpMIy4hvPxBRvN8_tx5VA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":612,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (853), with no line terminators","md5":"db10688df6effbb1419ecb0f81eca60e","sha1":"d7f2c8d98fa7fb216545a1ac4daf9cc87fe64371","sha256":"a7af8ba59ebde3f4a694f122f6d4d8cc8397e130a6807488c19bdbf38f369629","sha512":"de9f8b86ee4bee6f9820f8b5ed65e665ab42fdd946c64c4a31ce0b8b8ffbaa75bde4865951c038fa51d217eb559060b18f13445aa968fbf546e3fbba30806d6e","ssdeep":"","tlshash":"6401567ebc80c67318fa5a1ff67c310583cc81fdd0b52a3d99510b846b5ca5b9d02745","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.110.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.950Z","timestamp":1701731518950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=1962401213087510@1@1701731513; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://ds2play.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kIJ2ijaD%2BvWQELrbDDldGYhSw2J2Fwsdsf%2BU7FK0qafkpwX51RQun8d%2FYqO1xNu3KSEYWTba8c81oWRjOnnEagUkOhg9DxeWNg5GsXrSIoe7Hb1pYLJ%2FRCcmBxRSfkuM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb26a98c52e2-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"fac1a677a3561ff1d97f63ca4cd2edfe","sha1":"2f4331a04399913d6f4231ac4233f75d550e569c","sha256":"938284e2da32d1e89466dea9a8ca5054b3756a46b77d1e612274bb98aff76e65","sha512":"9df33aed71bb5be8c7b79753dc1d3c2304147995bbf44a826e330cc11939446560e03f1744804c5b584009196f9d3e24f12109bc608609179381c0b7b2d5690c","ssdeep":"","tlshash":"658000028a2200000a82c380002022022b2b0bccbe0ea20b8202c2888800b080a00838","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":133,"dns":29,"connect":38,"send":0,"wait":132,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"interbasevideopregnant.com/sbar.json?key=2c0360ed33b0b4736859081c701f9a91","fqdn":"interbasevideopregnant.com","domain":"interbasevideopregnant.com","tld":"com"},"ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.369Z","timestamp":1701731519369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"interbasevideopregnant.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 10:51:51 GMT","end":"Mon, 26 Feb 2024 10:51:50 GMT"},"fingerprint":{"sha1":"05:CE:54:0F:E3:69:0F:FA:81:8B:E1:49:7E:A8:C7:B9:AD:FA:67:8F","sha256":"52:6A:08:FF:50:E2:93:D6:20:55:74:FF:D4:94:48:F3:73:9F:A9:B8:B6:81:75:CC:07:AA:9A:16:A3:91:00:7C"}}},"request":{"raw":"GET /sbar.json?key=2c0360ed33b0b4736859081c701f9a91 HTTP/1.1\r\nHost: interbasevideopregnant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 23:11:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://ds2play.com\r\nAccess-Control-Allow-Origin: https://ds2play.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: u_pl=19079684; expires=Tue, 05 Dec 2023 23:11:54 GMT; secure; SameSite=None\npdhtkv=true; expires=Tue, 05 Dec 2023 23:11:54 GMT; secure; SameSite=None\nuncs=1; expires=Tue, 05 Dec 2023 23:11:54 GMT; secure; SameSite=None\npdhtkv29=true; expires=Tue, 05 Dec 2023 23:11:54 GMT; secure; SameSite=None\nuncs29=1; expires=Tue, 05 Dec 2023 23:11:54 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 75ff9e8f7c2b1c19e1c48d18c7f5cafa\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4056,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON data\\012- , Unicode text, UTF-8 text, with very long lines (5716), with no line terminators","md5":"dad878a3822383806b23c1d86fb37970","sha1":"ac3c4e1ff18d2dee7cb033797dfdebfc26ef1681","sha256":"a5f9f5ec164b32ff5a7968f53a256c0a14e6fd080f82558ab8f99cca8c4d3734","sha512":"0852d483185d4cfcd524c1474f33099c22715624664ac08b39a8b256f45f622cf781f5ed1d1773113456c48e1140d1da283448a9f4b36e854e376287b27e3df5","ssdeep":"96:9wNDtSWfnq2wNnx80Qv2VoSwdDu6EtPIOYOjvQ6C9Tnpybh/DBwWTxRuRigS9i:9wNO2C8nIgdDu6EJICQF9zsbEWTxR6HX","tlshash":"7dc17e7f6342b6a30e420c84b69e245caa987767e9a53d91dc0c3b8c5c71b3d09f2c6c","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":348,"dns":18,"connect":109,"send":0,"wait":320,"receive":1,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"interbasevideopregnant.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3s3v9BNh1YsHYVAWVpBJ9fzJzLjIsnGNBGMSd1dy8VJdVT0pU13VVnVPT3IKLsieZMSLeup8k2xQF3WvgiATLyEgOB4kB3P3LOxZZjIw%2BqDqva%2B%2Bd%2Fi%2B9%2BqTg%2FyChMjZ%2Bea7dk9pzRabVVq5saWMsIWvrN%2BvhLRKb1a2lFlq3Kz0J5frvR7SZpW%2BWnlb8h27WKMhpSENKyvKydj2F6csVPq4E1Y7tNqoVcNmA333X%2BzzAJ4FEL0L8hyUGP9v%2B%2FQJFB%2FBJD%2FckX4ns%2BlrbyW5Zpl16Inj982OsYVBMi9jFyA2x7NuWD8m5IsrsOZ45gC2dzhxgEiNSfBHiMgcz2Qi6h1dKo00pEEk%2Fo%2BiN4LUIyg2ArcPoMRvBOAC6xswyaN16wq2e8myCTsmC0%2F%2FhirGZOHPF2CS75a16lfuWZ1nyhqPflxC9UdQ3RHS%2FATZXgBVnIBnH0OJX8ni0zWY5HDDawslyql7pUZQ8QhaDsB8gHxyVIA8DpCnARJxXmHNTkxpK47ier3d4JzX65w320uiKeqNdkyR84m8AbJ0AK4H4G4fqdvHjhrA5T%2FDb5fwIoDPxiR4bx89UaKQBIUnKBhBoQiKjKDolUdC%2B5ovHwnt8yic5dos18uhzboH7MhmXWkImBscpBfk2mQ2wSsvL2BHnldqnNaXqBT1ekSjRqu%2B1G52aDvkLRrGHdYJ4VUJ5a9M7e6pMbn%2B0S2kakyeOb2GiJ3A6xNwdR0sfwmsGLZqFGx72GhT7JnvQ2Gt8JmTLKlym0DYEmm2gGw3ONAX5MXpmlarb0Dys1unX07iK3BXInUlPlS%2FEHT1w%2BFdW5DDu7bw5MlGmqlE7bHJCu9lLJNXv3lH7hbWidU7fvD1bT4hJuXj%2B9Jna8wIZbqefLushJBuxTouyU%2BrfktGm7nfXs6dydO1zTdXVpPUSe%2BVNSMwNSbk07%2FA1Zg8%2B%2Fzn0%2B954%2Bg2lBvB5SWS%2FIzMAsqOwNN9%2BHSu31sCp%2Bc9URqgyMuhq0XzR60ItJxjFpXw%2F8LRvD7wD9F1AVj2ACYp0XMleroE0wP4%2FOowS93Zrd%2Fr00Ckg2GkXXAYaac%2FuxyuV%2BcV2YxpLGlNRnEniluMik7c6ESsE8pW1GQhMj%2BW5oMf%2FwEAAP%2F%2FAQAA%2F%2F8hVsK5dgQAAA%3D%3D","fqdn":"interbasevideopregnant.com","domain":"interbasevideopregnant.com","tld":"com"},"ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.085Z","timestamp":1701731520085,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"interbasevideopregnant.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 10:51:51 GMT","end":"Mon, 26 Feb 2024 10:51:50 GMT"},"fingerprint":{"sha1":"05:CE:54:0F:E3:69:0F:FA:81:8B:E1:49:7E:A8:C7:B9:AD:FA:67:8F","sha256":"52:6A:08:FF:50:E2:93:D6:20:55:74:FF:D4:94:48:F3:73:9F:A9:B8:B6:81:75:CC:07:AA:9A:16:A3:91:00:7C"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3s3v9BNh1YsHYVAWVpBJ9fzJzLjIsnGNBGMSd1dy8VJdVT0pU13VVnVPT3IKLsieZMSLeup8k2xQF3WvgiATLyEgOB4kB3P3LOxZZjIw%2BqDqva%2B%2Bd%2Fi%2B9%2BqTg%2FyChMjZ%2Bea7dk9pzRabVVq5saWMsIWvrN%2BvhLRKb1a2lFlq3Kz0J5frvR7SZpW%2BWnlb8h27WKMhpSENKyvKydj2F6csVPq4E1Y7tNqoVcNmA333X%2BzzAJ4FEL0L8hyUGP9v%2B%2FQJFB%2FBJD%2FckX4ns%2BlrbyW5Zpl16Inj982OsYVBMi9jFyA2x7NuWD8m5IsrsOZ45gC2dzhxgEiNSfBHiMgcz2Qi6h1dKo00pEEk%2Fo%2BiN4LUIyg2ArcPoMRvBOAC6xswyaN16wq2e8myCTsmC0%2F%2FhirGZOHPF2CS75a16lfuWZ1nyhqPflxC9UdQ3RHS%2FATZXgBVnIBnH0OJX8ni0zWY5HDDawslyql7pUZQ8QhaDsB8gHxyVIA8DpCnARJxXmHNTkxpK47ier3d4JzX65w320uiKeqNdkyR84m8AbJ0AK4H4G4fqdvHjhrA5T%2FDb5fwIoDPxiR4bx89UaKQBIUnKBhBoQiKjKDolUdC%2B5ovHwnt8yic5dos18uhzboH7MhmXWkImBscpBfk2mQ2wSsvL2BHnldqnNaXqBT1ekSjRqu%2B1G52aDvkLRrGHdYJ4VUJ5a9M7e6pMbn%2B0S2kakyeOb2GiJ3A6xNwdR0sfwmsGLZqFGx72GhT7JnvQ2Gt8JmTLKlym0DYEmm2gGw3ONAX5MXpmlarb0Dys1unX07iK3BXInUlPlS%2FEHT1w%2BFdW5DDu7bw5MlGmqlE7bHJCu9lLJNXv3lH7hbWidU7fvD1bT4hJuXj%2B9Jna8wIZbqefLushJBuxTouyU%2BrfktGm7nfXs6dydO1zTdXVpPUSe%2BVNSMwNSbk07%2FA1Zg8%2B%2Fzn0%2B954%2Bg2lBvB5SWS%2FIzMAsqOwNN9%2BHSu31sCp%2Bc9URqgyMuhq0XzR60ItJxjFpXw%2F8LRvD7wD9F1AVj2ACYp0XMleroE0wP4%2FOowS93Zrd%2Fr00Ckg2GkXXAYaac%2FuxyuV%2BcV2YxpLGlNRnEniluMik7c6ESsE8pW1GQhMj%2BW5oMf%2FwEAAP%2F%2FAQAA%2F%2F8hVsK5dgQAAA%3D%3D HTTP/1.1\r\nHost: interbasevideopregnant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 23:11:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: d61f2caca6fe4b09cb2cc4e5fb9d7caa\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7,"size_decoded":0,"mime_type":"image/gif","magic":"ASCII text, with no line terminators","md5":"132d6af1b46048b45cf86cdee7991d31","sha1":"eb7007d03d59b65bc6da7e098c4d38fc6dfb6285","sha256":"ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c","sha512":"ff7c468000b64b64a67199d0110afecead13da2dfd018e709392f39058d43155747ded8f3f8b30fbf8737851cb7839855d1c0b893da3258ab90e4af995dfef1e","ssdeep":"","tlshash":"fe4000000000000c000000000003c000000c0030330000000c00000000300030003000","first_seen":"2023-04-05T23:50:35Z","last_seen":"2026-05-14T10:24:33.637494Z","times_seen":19289,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.110.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.952Z","timestamp":1701731518952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://ds2play.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4676\r\nlast-modified: Mon, 04 Dec 2023 21:53:57 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=f8xTzFXXXcSYfcsWkOhyFo1XWKwQnQbPVTMNYQMY%2BxaiKm77kNttacbjdqVR7Hs7ftgX2w%2F2U9BiCUhePVUGnl5Y7TFXJFZXBD4vmVr8zvXiE0oDZg4zKA%2FHCyXPy6Mo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb26a98752e2-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102938,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"62e6da19507b6f5089020a7b01474946","sha1":"ad3ec1bf9d978908689b6183c656fc6e8ba16329","sha256":"f37c99010648b4ec06827a49c144d79a81eefdff414ae0e7a50119d2e33bb487","sha512":"0b84ab8d38fae42f0ae9b9099e8679c0d8024c03ca9e379a70ac9d5d77c7511e0c197f7e182c386b0a97d12e0842f4a4bfc39a106e8cf43f096bbfd8832e0bf5","ssdeep":"12:H/DkK5e580bOcGlfv6O68rOtPdv+ztS2En7c6te:H/DkG880qjAFlPdv+ztSPI6te","tlshash":"89a3c0524a88be87d699df739e9dda12727530cda41c25df94d516d1fca03d5060840e","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":128,"dns":30,"connect":30,"send":0,"wait":90,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getbestpolojpob.org/multi?cs=N2tuWWIGUl9rUQdaWWhTBFNWYVY\u0026abt=0\u0026red=1\u0026sm=76\u0026k=\u0026v=1.0.60.3\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=901258\u0026rxy=1280_1024\u0026u=1962401213087510\u0026agec=1701731513\u0026fs=1\u0026mbkb=105.15247108307045\u0026ref=https%3A%2F%2Fds2play.com%2Fd%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_frlR=1701731520002\u0026crc=1","fqdn":"getbestpolojpob.org","domain":"getbestpolojpob.org","tld":"org"},"ip":{"addr":"65.9.55.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.081Z","timestamp":1701731520081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbestpolojpob.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 29 Nov 2023 00:00:00 GMT","end":"Fri, 27 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BD:F6:95:89:F9:7E:C8:03:91:9C:73:E7:C5:4C:5B:31:83:EF:77:ED","sha256":"BC:E9:2E:AA:A6:29:52:4C:0B:D3:34:89:98:7D:7A:6B:AD:B9:AD:4C:A9:E0:68:5A:4D:1D:88:1F:1F:50:FC:27"}}},"request":{"raw":"GET /multi?cs=N2tuWWIGUl9rUQdaWWhTBFNWYVY\u0026abt=0\u0026red=1\u0026sm=76\u0026k=\u0026v=1.0.60.3\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=901258\u0026rxy=1280_1024\u0026u=1962401213087510\u0026agec=1701731513\u0026fs=1\u0026mbkb=105.15247108307045\u0026ref=https%3A%2F%2Fds2play.com%2Fd%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_frlR=1701731520002\u0026crc=1 HTTP/1.1\r\nHost: getbestpolojpob.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 1533\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ds2play.com\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=21e8c47f-115c-46bb-b61e-2459e4dc51c1\ncsu=1962401213087510\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dbf67e262a6295e9e8f6570f9aae7e0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: Xc5kaaAVC70NDAsvOoLVjBVRLiw12uNu0Yfni3aELSY8uaVGiOabog==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1533,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (3259), with no line terminators","md5":"e80593b216833a7e9bf6ba1ea9f2b845","sha1":"fc7a003c4062636d6bc58d51ac379f2ed527f7ab","sha256":"b3684c273b71dec3fe0148c2ca4f8f9c86656685d366050e294251a2dd191077","sha512":"d87e2575e8ad44bf8db4a1741baee9fe86fdefce2bf5aa9f0ce42136db4df5c9c41006a4557173a3ee7689ab73fa40a0cb61cc03449009a412a873171c044227","ssdeep":"","tlshash":"1f616749154f456f90f9e7245d7e9c76ec25af1f52ab4cce9c2f62e30ca21783631a20","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.110.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.952Z","timestamp":1701731518952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://ds2play.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4676\r\nlast-modified: Mon, 04 Dec 2023 21:53:57 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gDo8j7wy32hMqUZe96GIJzLFwHru9s6rGTMA2lELdHjs9byyoa5dLQm7%2Fwr9wZLPxj8uxBkAigE7hhKtoEHj5a5o1N64PFuE2gcUHSDwTNnKRS8CrgrpuZh6ijnIUHhx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb26a98652e2-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108960,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"2393330d6f343512474ca2d566943ee7","sha1":"56b3760b0550d56474c494a0b373f2061d6e61f2","sha256":"e79c50c571d016ca2cd27e83ea72896d8652a71b42e1ac43c7d580a1864ee566","sha512":"1b7d78fedd73acd18cd5a29f3e787eb8c6aa18516082da8035a4df459bc06156e0d616f2638c3d0844ff39f218634556156f523b4de3614dedf1e816a869aea7","ssdeep":"192:5SDS0tKg9E05TAYwEBPwF9JNsTgSSL3ON:gJXE05UYwE+FnNsTSLS","tlshash":"1bb38efbf9a09ccfc066b772194e4080fba6353c83962694d8b051ec5546d1a4fdb4b6","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":128,"dns":30,"connect":30,"send":0,"wait":90,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/cdn-cgi/challenge-platform/h/b/jsd/r/8307bb181971b518","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.999Z","timestamp":1701731518999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ds2play.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 11:08:38 GMT","end":"Wed, 28 Feb 2024 11:08:37 GMT"},"fingerprint":{"sha1":"01:70:30:C0:4B:E8:2F:96:93:F4:0F:7C:31:5C:D0:AE:09:D6:0F:AC","sha256":"BA:1B:E8:96:CA:12:EB:01:9C:60:D3:DC:A6:0F:12:8D:E9:0E:4F:36:0F:07:68:4E:3E:CD:76:8C:78:76:6C:03"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/8307bb181971b518 HTTP/1.1\r\nHost: ds2play.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12167\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/d/\r\nCookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nset-cookie: cf_clearance=EqD9AGsO0SLy13sYSayeFtewJJKWHwVxPji3GpFNV7A-1701731513-0-1-730ca2d2.73a07051.5b213570-0.2.1701731513; path=/; expires=Tue, 03-Dec-24 23:11:53 GMT; domain=.ds2play.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vR54PGYqRmTakCJaAFprfs3qim8wVAY2J2IHhfjHXRzP%2FIOZt%2BrAwhvQw%2FthKyKWkUjoTpXD6EIFsNFFiaFUHom0OMKZ%2BPO8fgNrzJAEnOVt%2FW5RXBOvIxXGr1cd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb260cefb505-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1139,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"bfbabd2f1a9bd2041049e160d3f93715","sha1":"be67abe2dd0ae427c13b2923bd70ecaa141e9b28","sha256":"cb3210950fbaec704ed967f35a2e168e4a397b95ff22c8b76bf067e226e3489a","sha512":"71d0c22298c36e665dc1cb072db78f77cea1f5acbdd278cda145b7d4496b8132720920ec00177b06294d7d68d7518a5a5fa5409ef77910e300f06e290ab54984","ssdeep":"","tlshash":"df21f90aeca21be0d7888f0214dc135095da07447f8e280a37b6aa599e1070614451fb","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/arrow.png","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.589Z","timestamp":1701731520589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/img/arrow.png HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2332\r\nlast-modified: Tue, 12 Jul 2022 10:56:23 GMT\r\netag: \"62cd5357-91c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 497986\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=NW4w8NpPqWpJfUHJ2%2Bpp3EV8sb8eltWHoq4j1lOWGTF39ALJ16F09I2INXalWrXCLYsIhjcYAQKn1a2FDf%2BceCqkIQr3PcoOEc0qKUZCQKX%2B7wz50WtALFCcTXO41g8%2BsKCKnvBbwVej\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb308e7548ce-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 81, 8-bit/color RGBA, non-interlaced\\012- data","md5":"41109abf05740798aa2e66a3e938c8de","sha1":"706e93332bf4819e9f4059765340cf97981bd1fe","sha256":"2fbf669490df5b04badb9886ca664dbd9a0d66e0ecdc951b822feb6089fac0ea","sha512":"dee28f25ddd4aacce276d436f2670d613ed09be0d984d88fa89a00a0d36f10998aee11757a3329527c68cf9fab20542227259a066d29ca47fad8b7028f1b55ee","ssdeep":"","tlshash":"","first_seen":"2023-06-23T14:37:48Z","last_seen":"2026-03-09T09:57:33.084721Z","times_seen":229,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":56,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/si/fa/41/e4/fa41e4558b816ed7e0ab0552953b2d07/1690854338.png","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.592Z","timestamp":1701731520592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Nov 2023 05:00:53 GMT","end":"Wed, 21 Feb 2024 05:00:52 GMT"},"fingerprint":{"sha1":"71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF","sha256":"DB:84:5A:F0:34:CD:8D:C1:AC:E1:09:48:B6:88:E6:8F:A5:34:1F:B4:37:02:AB:78:1F:31:7E:D5:D6:C2:28:30"}}},"request":{"raw":"GET /si/fa/41/e4/fa41e4558b816ed7e0ab0552953b2d07/1690854338.png HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 67165\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 01 Aug 2023 01:45:47 GMT\r\netag: \"64c863cb-1065d\"\r\nexpires: Wed, 06 Dec 2023 23:11:55 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\\012- data","md5":"674efc7161b89ce659afd5b0643930e1","sha1":"ace5e7c836afc552f82908e8c646c74c66351a6a","sha256":"7f44e25525d576448d70619c900546bf13f2439c2006808a058bc68c71c35406","sha512":"ffb165a92823ce3e787ad51a52fb9bedb9e40684251c4f5ae0f207dcc7fd5cdf7abd59d1b01d7853aebba1293060408067505f2dc39cefe6d961717eeb9802e3","ssdeep":"","tlshash":"","first_seen":"2023-09-15T15:36:51Z","last_seen":"2023-12-05T00:12:11Z","times_seen":11,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":147,"dns":80,"connect":30,"send":0,"wait":26,"receive":55,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unseenreport.com/pxf.gif?uuid=5ff712f9-bcc7-4efb-90d9-8ee068ff9fa4\u0026eb=a996fe56ed028c08f89591a4a8a9c431\u0026te=4cb725660c43031e3b06c75892d96c5a\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=06e2eefbde702208a7324b7b8f526df8\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23","fqdn":"unseenreport.com","domain":"unseenreport.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.901Z","timestamp":1701731520901,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.unseenreport.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 07:56:28 GMT","end":"Tue, 20 Feb 2024 07:56:27 GMT"},"fingerprint":{"sha1":"79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14","sha256":"A0:3D:80:7E:F2:AF:8E:31:96:A2:40:FF:3E:B1:BB:3F:7C:18:BD:13:C8:58:5C:1F:94:C9:51:0A:D2:91:97:18"}}},"request":{"raw":"GET /pxf.gif?uuid=5ff712f9-bcc7-4efb-90d9-8ee068ff9fa4\u0026eb=a996fe56ed028c08f89591a4a8a9c431\u0026te=4cb725660c43031e3b06c75892d96c5a\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=06e2eefbde702208a7324b7b8f526df8\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23 HTTP/1.1\r\nHost: unseenreport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 04 Dec 2023 23:11:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 096a221259c4de5e46a525d8c870b190\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"image/gif","magic":"very short file (no magic)","md5":"93b885adfe0da089cdf634904fd59f71","sha1":"5ba93c9db0cff93f52b521d7420e43f6eda2784f","sha256":"6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d","sha512":"b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:01:45Z","last_seen":"2026-05-20T00:22:09.674577Z","times_seen":28756,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":353,"dns":10,"connect":112,"send":0,"wait":116,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unseenreport.com/pxf.gif?uuid=5ff712f9-bcc7-4efb-90d9-8ee068ff9fa4\u0026eb=a996fe56ed028c08f89591a4a8a9c431\u0026te=4cb725660c43031e3b06c75892d96c5a\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2c0360ed33b0b4736859081c701f9a91\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23","fqdn":"unseenreport.com","domain":"unseenreport.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.903Z","timestamp":1701731520903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.unseenreport.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 07:56:28 GMT","end":"Tue, 20 Feb 2024 07:56:27 GMT"},"fingerprint":{"sha1":"79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14","sha256":"A0:3D:80:7E:F2:AF:8E:31:96:A2:40:FF:3E:B1:BB:3F:7C:18:BD:13:C8:58:5C:1F:94:C9:51:0A:D2:91:97:18"}}},"request":{"raw":"GET /pxf.gif?uuid=5ff712f9-bcc7-4efb-90d9-8ee068ff9fa4\u0026eb=a996fe56ed028c08f89591a4a8a9c431\u0026te=4cb725660c43031e3b06c75892d96c5a\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2c0360ed33b0b4736859081c701f9a91\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23 HTTP/1.1\r\nHost: unseenreport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 04 Dec 2023 23:11:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 73ed9a5e1e943a356accbb401e0e4108\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"image/gif","magic":"very short file (no magic)","md5":"93b885adfe0da089cdf634904fd59f71","sha1":"5ba93c9db0cff93f52b521d7420e43f6eda2784f","sha256":"6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d","sha512":"b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:01:45Z","last_seen":"2026-05-20T00:22:09.674577Z","times_seen":28756,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":353,"dns":9,"connect":112,"send":0,"wait":115,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"unseenreport.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1KnTJmGjoiXOULI8wG_j3lWOV9tQdcXlcdFri9v4cuiEjtHHyyY6QXbYIxuJONRuKyI04J0g\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-519995528%3A1701731513368123\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.569Z","timestamp":1701731519569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1KnTJmGjoiXOULI8wG_j3lWOV9tQdcXlcdFri9v4cuiEjtHHyyY6QXbYIxuJONRuKyI04J0g\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-519995528%3A1701731513368123\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-7HwndyfOfVQHNU-eI3R1ew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":16551,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"43d865efeae81cab7fa00545c82f29c8","sha1":"99b714fcb09ba7c09935f119aab9422adbff7283","sha256":"89987b83f1a4967f9b6d0cd502839415c269d7bf6a0f64c266ebcb0f4ae1dd52","sha512":"817199d073a63f9ebb667a9813be9941f6d7f8736ef1d3bfe984db057d48580f0f9585a46b89f34e4a878cd4b0c5cd8b4bc40d5be397804adb412122dc6d4e80","ssdeep":"384:Jc1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:JK7EJ5E2bJwi5jLwK79/","tlshash":"a272e10198d123ade5f2323ea14f5fd1c401a1a17d2504d895e0bc9afe2d7ad58837b6","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"interbasevideopregnant.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRReu3s1%2F%2BkVY9eJBGJSFFWRSPT2TmXGRZeMaCcYk7q7k4qW6qmZSprqqreqenuQUXJA9yYgX9dT5JtmgLupeBUEmXkJAcDxIDubuWdizzGRg9EHVe1997%2FB979UnB%2FkFCZGz88137Z7Smi02qrRyY0sZYQtfWb9fCWmV3qxsKbNUv1npTy7Xez2kjSp9tfK25Dt2sUZDSkMaVlaUkx3bX5yyUOnjdlht02q9Vg0bdfTdf7HPA3gWQPQuyHNQYvy%2F7dMnUHwEk%2FxwR%2FqdzKavvZXkmmXWoSeO3zc7xhYGybzsuAAdczzrhvVjQr64AmuOZw5ge4cTB4jVmAR%2FhIjN8Uwm4t7RpdJYQxrE4v8oeiNIPYJiI3D7AEr8RgAusL4Bkzxat65gu5csm7BjsvD0b6hiTBb%2BfAEm%2BW5Zq37lntV5pqzx6HdKqP4IqjtCmp8g2wugihPw7GMo8StZfLoGkxxueG2hRDl1r9QIqjOClgMwHyCfHBUg7wTI0wCJOK%2BwRrtDabMTd6KoVeecRxHnjdaSaIio3upQ5Hwib4AsHYDrAbjbR%2Br2saMGcPnP8NslvAjgszEJ3ttHT5QoJEHhCQpGUCiCIiMoeuWR0L7my0dC%2BzwOZ7k2y1E5tFn3gB3ZrCsNAXODg%2FSCXJvMJnjl5QXsyPNKjdNoiUoRRTGN681oqdVo01bImzTstFk7hFcllL8ytbunxuT6R7eQqjF55vQaYnYCr0%2FA1XWw%2FCWwYtisUbDtYb1FsWe%2BD4W1wmdOsqTKbQJhS6TZArLd4EBfkBena1qtvgHJz26dfjmJr8BdidSV%2BFD9QtDVD4d3bUEO79rCkycbaaYStccmK7yXsUxe%2FeYduVtYJ1bv%2BMHXt%2FmEmJSP70ufrTEjlOl68u2yEkK6Feu4JD%2Bt%2Bi0Zb%2BZ%2Bezl3Jk%2FXNt9cWU1SJ71X1ozA1JiQT%2F8CV2Py7POfT7%2FnjaPbUG4El5dI8jMyCyg7Ak%2F34dO5fm8JnJ73xGmAIi%2BHrhbPH7Ui0HKOWVzC%2FwvH8%2FrAP0TXBWDZA5ikRM%2BV6OkSTA%2Fg86vDLHVnt36PpoFYB8NYu%2BAw1k5%2Fdjlcr84rjbAuW3GryYWIJRdhsxa1IkprQtSbbRm2kfmxNB%2F8%2BA8AAAD%2F%2FwEAAP%2F%2FNV5MX3YEAAA%3D","fqdn":"interbasevideopregnant.com","domain":"interbasevideopregnant.com","tld":"com"},"ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:01.465Z","timestamp":1701731521465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"interbasevideopregnant.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 10:51:51 GMT","end":"Mon, 26 Feb 2024 10:51:50 GMT"},"fingerprint":{"sha1":"05:CE:54:0F:E3:69:0F:FA:81:8B:E1:49:7E:A8:C7:B9:AD:FA:67:8F","sha256":"52:6A:08:FF:50:E2:93:D6:20:55:74:FF:D4:94:48:F3:73:9F:A9:B8:B6:81:75:CC:07:AA:9A:16:A3:91:00:7C"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRReu3s1%2F%2BkVY9eJBGJSFFWRSPT2TmXGRZeMaCcYk7q7k4qW6qmZSprqqreqenuQUXJA9yYgX9dT5JtmgLupeBUEmXkJAcDxIDubuWdizzGRg9EHVe1997%2FB979UnB%2FkFCZGz88137Z7Smi02qrRyY0sZYQtfWb9fCWmV3qxsKbNUv1npTy7Xez2kjSp9tfK25Dt2sUZDSkMaVlaUkx3bX5yyUOnjdlht02q9Vg0bdfTdf7HPA3gWQPQuyHNQYvy%2F7dMnUHwEk%2FxwR%2FqdzKavvZXkmmXWoSeO3zc7xhYGybzsuAAdczzrhvVjQr64AmuOZw5ge4cTB4jVmAR%2FhIjN8Uwm4t7RpdJYQxrE4v8oeiNIPYJiI3D7AEr8RgAusL4Bkzxat65gu5csm7BjsvD0b6hiTBb%2BfAEm%2BW5Zq37lntV5pqzx6HdKqP4IqjtCmp8g2wugihPw7GMo8StZfLoGkxxueG2hRDl1r9QIqjOClgMwHyCfHBUg7wTI0wCJOK%2BwRrtDabMTd6KoVeecRxHnjdaSaIio3upQ5Hwib4AsHYDrAbjbR%2Br2saMGcPnP8NslvAjgszEJ3ttHT5QoJEHhCQpGUCiCIiMoeuWR0L7my0dC%2BzwOZ7k2y1E5tFn3gB3ZrCsNAXODg%2FSCXJvMJnjl5QXsyPNKjdNoiUoRRTGN681oqdVo01bImzTstFk7hFcllL8ytbunxuT6R7eQqjF55vQaYnYCr0%2FA1XWw%2FCWwYtisUbDtYb1FsWe%2BD4W1wmdOsqTKbQJhS6TZArLd4EBfkBena1qtvgHJz26dfjmJr8BdidSV%2BFD9QtDVD4d3bUEO79rCkycbaaYStccmK7yXsUxe%2FeYduVtYJ1bv%2BMHXt%2FmEmJSP70ufrTEjlOl68u2yEkK6Feu4JD%2Bt%2Bi0Zb%2BZ%2Bezl3Jk%2FXNt9cWU1SJ71X1ozA1JiQT%2F8CV2Py7POfT7%2FnjaPbUG4El5dI8jMyCyg7Ak%2F34dO5fm8JnJ73xGmAIi%2BHrhbPH7Ui0HKOWVzC%2FwvH8%2FrAP0TXBWDZA5ikRM%2BV6OkSTA%2Fg86vDLHVnt36PpoFYB8NYu%2BAw1k5%2Fdjlcr84rjbAuW3GryYWIJRdhsxa1IkprQtSbbRm2kfmxNB%2F8%2BA8AAAD%2F%2FwEAAP%2F%2FNV5MX3YEAAA%3D HTTP/1.1\r\nHost: interbasevideopregnant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 23:11:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: d22542685d2a2e8fbea2a3d8b1a4b353\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7,"size_decoded":0,"mime_type":"image/gif","magic":"ASCII text, with no line terminators","md5":"132d6af1b46048b45cf86cdee7991d31","sha1":"eb7007d03d59b65bc6da7e098c4d38fc6dfb6285","sha256":"ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c","sha512":"ff7c468000b64b64a67199d0110afecead13da2dfd018e709392f39058d43155747ded8f3f8b30fbf8737851cb7839855d1c0b893da3258ab90e4af995dfef1e","ssdeep":"","tlshash":"fe4000000000000c000000000003c000000c0030330000000c00000000300030003000","first_seen":"2023-04-05T23:50:35Z","last_seen":"2026-05-14T10:24:33.637494Z","times_seen":19289,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"interbasevideopregnant.com/pixel/sbs?c=1","fqdn":"interbasevideopregnant.com","domain":"interbasevideopregnant.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:01.467Z","timestamp":1701731521467,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"interbasevideopregnant.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Nov 2023 10:51:51 GMT","end":"Mon, 26 Feb 2024 10:51:50 GMT"},"fingerprint":{"sha1":"05:CE:54:0F:E3:69:0F:FA:81:8B:E1:49:7E:A8:C7:B9:AD:FA:67:8F","sha256":"52:6A:08:FF:50:E2:93:D6:20:55:74:FF:D4:94:48:F3:73:9F:A9:B8:B6:81:75:CC:07:AA:9A:16:A3:91:00:7C"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: interbasevideopregnant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nCookie: u_pl=19079684; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 04 Dec 2023 23:11:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":341,"dns":1,"connect":112,"send":0,"wait":112,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-04","alert":"Sinkholed","trigger":"interbasevideopregnant.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/style.css","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.465Z","timestamp":1701731520465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/css/style.css HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Jul 2022 11:09:04 GMT\r\netag: W/\"62cd5650-23e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 496645\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=07oSmbfuVe2e%2Fy%2FPe6eSrIaMPmytD5JhpjOcnJ%2Bj4MTwAPzJlYtz%2FgsN5lW000FIYqHAA3lDzuEFw57wL2eLrZeyvDkCNlTxQNbKzoXEhIHziLBJ3i7Bf5gmG1s0zS2T3ls2igTimQsL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb305e6b4089-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9771), with no line terminators","md5":"3bf44c419c27c2507bc1b009469c4482","sha1":"b645016017cbba34b71497b76eb2a89ea7d54839","sha256":"dca224015fb9353a013d68f8d9c8d5e028940fd9f0750e17b4dc66fb620dd64a","sha512":"b64ee23ec2ee4a2434372054091fbc7c4c93d08c122c22dde0954d687a2af02b80f3ea7f6cf2e59fa6ae9fe511d2d4c5047c84a04e5406382b8eab71fe71770d","ssdeep":"192:RpXUetr24PwsNhKMgZHBXsxHNbq9O1kz6NezeqPwJW9cbZ2/X:9txKKbV11O","tlshash":"1512de1e2e0604387523efdabfe306a722393246563752297f8d5393435e1a4d152bbf","first_seen":"2023-06-23T14:37:48Z","last_seen":"2023-12-07T23:58:30Z","times_seen":26,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":169,"dns":75,"connect":30,"send":0,"wait":45,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipmathematical.org/popunder.gif","fqdn":"ipmathematical.org","domain":"ipmathematical.org","tld":"org"},"ip":{"addr":"172.67.146.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.623Z","timestamp":1701731519623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipmathematical.org","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 29 Nov 2023 06:02:08 GMT","end":"Tue, 27 Feb 2024 06:02:07 GMT"},"fingerprint":{"sha1":"D2:34:74:D1:16:55:F8:EF:87:87:38:64:00:6A:AA:9B:4C:F4:F1:CF","sha256":"45:CB:E1:76:49:E0:D3:8A:44:25:05:31:93:02:8A:68:3B:A0:28:32:18:30:11:9B:3C:B6:EB:41:AB:94:0F:50"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: ipmathematical.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncf-cache-status: HIT\r\nage: 77229\r\nlast-modified: Mon, 04 Dec 2023 01:44:44 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=SF9YahOtoZw7H60cBxTkuoMOFGbcozuY5BAEjir0En0FU9Z7DxwvqjSkx%2B51LbSQLrMvqALBpgo6hG2MrSXvRZEgBe9uwnR%2BHvfSV2XmM%2FYzB%2FkflVFd8AAZjAbytxJ2GtjPEpI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb29fc01b527-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-05-20T06:05:58.382613Z","times_seen":47855,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/css/bootstrap.min.css","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.357Z","timestamp":1701731517357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 12 Feb 2023 00:00:00 GMT","end":"Sun, 11 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3","sha256":"87:B4:CF:85:01:9A:AD:66:0E:D3:7A:68:BC:81:A5:00:B9:5F:C8:26:97:F2:E5:D4:A5:26:74:B2:92:EE:AF:FB"}}},"request":{"raw":"GET /theme_2/css/bootstrap.min.css HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Tue, 03 Dec 2024 05:27:25 GMT\r\nvary: Accept-Encoding,User-Agent\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 63070\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=1NRrHCVHFvq%2F0XOX80Iq2OYoYGhLsOkIX2DV45wd6I7rfjRrDhmQ6XcxP9OVQ88QvUjXukSmCwsPxr%2Bj4KixuaqU%2FSCDw884XLR%2FEd5tZq1tcIa7IcWLhoCP8RMgag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb1ccd06b4ee-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"7cc40c199d128af6b01e74a28c5900b0","sha1":"d305110fb79113a961394b433d851a3410342b8c","sha256":"2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6","sha512":"ce79937f81cda05f54ea67c1e8a96101285b46f6ede02bc2687a0d574832b2c7d3a0d43ff40d1e35d51bbec4b038852825d323146da7752bebd0ba37669b13a9","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F","tlshash":"9ef352a6f5a0312de467c61964d0bafe152f8245d7224bfaf827376487892c70a73e4c","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-05-20T04:48:46.647305Z","times_seen":18716,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":153,"dns":30,"connect":3,"send":0,"wait":18,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.co/theme_2/fonts/avertastd-regular-webfont.woff2","fqdn":"i.doodcdn.co","domain":"doodcdn.co","tld":"co"},"ip":{"addr":"172.67.70.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:57.852Z","timestamp":1701731517852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 12 Feb 2023 00:00:00 GMT","end":"Sun, 11 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"95:79:36:28:82:A7:27:27:28:6B:8B:F8:02:2B:6E:BE:EC:06:A5:C3","sha256":"87:B4:CF:85:01:9A:AD:66:0E:D3:7A:68:BC:81:A5:00:B9:5F:C8:26:97:F2:E5:D4:A5:26:74:B2:92:EE:AF:FB"}}},"request":{"raw":"GET /theme_2/fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.co/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 02 Jan 2024 07:03:57 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 73129\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2O%2BHnuU97LCcDJSVlUKT%2BouZyz03GIQHvx70Knp6P8ZOrlFFMhYL%2BUIfzMZOWqGc9%2FfgfaCEd0wXwIPVxHaFm90ydaNxeHF4d%2FDfYkQbwJK18ucAaL4SVfCrToTOYw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb1efe25569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524\\012- data","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-05-20T04:19:46.410577Z","times_seen":4220,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"172.64.172.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.319Z","timestamp":1701731518319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 18 Feb 2023 00:00:00 GMT","end":"Sat, 17 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37","sha256":"82:4E:6A:8D:E6:9B:EA:74:3D:E2:A4:3F:17:C0:E9:50:1B:15:F3:8F:64:56:CD:91:82:2E:74:C0:A3:75:C8:1A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: friendshipmale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-request-id: 70683ea8abaea478ad7388b5f93cf96e\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 04 Dec 2023 23:11:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=6%2FVxpNZBwEztMtVT6m30qsefTDkYzrgVaRDyrhHZdw0leg%2BimEC%2BdpOPuZHeGEBXkofc37C5mKRf2p7mojV9tFZ0tQHaLwozN7w7HcKrbyNN9tY6D51ivBy0G7LqCsk7Ty1q0hU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb22ca54414c-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85468,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":142,"dns":23,"connect":33,"send":0,"wait":146,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.barscreative1.com/sb/au/29/79/b6/2979b6cd81afad6251e222515b2d8311/1663145782.html","fqdn":"cdn.barscreative1.com","domain":"barscreative1.com","tld":"com"},"ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.088Z","timestamp":1701731520088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.barscreative1.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Nov 2023 03:00:51 GMT","end":"Fri, 09 Feb 2024 03:00:50 GMT"},"fingerprint":{"sha1":"55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F","sha256":"C7:41:66:27:25:F6:F0:53:1A:D0:15:07:00:08:7F:B2:E1:EC:F7:D6:29:BD:85:9D:FD:6D:DF:FA:2C:98:D9:02"}}},"request":{"raw":"GET /sb/au/29/79/b6/2979b6cd81afad6251e222515b2d8311/1663145782.html HTTP/1.1\r\nHost: cdn.barscreative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 14 Sep 2022 08:56:26 GMT\r\netag: W/\"6321973a-6ef\"\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nexpires: Tue, 05 Dec 2023 00:11:54 GMT\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1775,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1887), with no line terminators","md5":"ad060cdf961dc780713500620212dfd2","sha1":"00dff11f954cb93349d081333ba22779b5380de1","sha256":"5975e0efdf299d5ab9695c6be88a67b29bd4e044aadc6af993f5102a3eb894f4","sha512":"d1052f4ea87d775d15db2b0cfd59bdcc5fbcfcabd59ebce657118bdfd47d4aa95add5435b2bd73c4ea8521a52220520cf1c1ebca17f332bbf3f0cf6aa844bdc5","ssdeep":"","tlshash":"1a418da52ccd64b621c3d19b7f716f6fbc52f484ad5a880537fc89688388e64cd63502","first_seen":"2023-06-27T14:39:16Z","last_seen":"2024-10-11T09:19:41.543528Z","times_seen":42,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":126,"dns":25,"connect":27,"send":0,"wait":28,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/script.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.904Z","timestamp":1701731520904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/js/script.js HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Jul 2022 10:56:18 GMT\r\netag: W/\"62cd5352-37c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 315715\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vSV%2BupsJ%2BtR5bikdIy4LUndx8zrQ2xANqTzaPU9iOXYwWFUOV7dk5pk6Wbmho3iaLVunWteWIQNGDX%2BIWUzRVOlD4I8lYW%2FaeDvJTXf7ne2o6keqIowqzVxjHfO4l3PHPgO2SMjsikGH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb321fd44089-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":892,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (959), with no line terminators","md5":"9d441b1ef0d4f07226844f2a75309fe0","sha1":"588ed7e74f0c215a09e72131be39b930479dccf9","sha256":"5df48723b4f69d2ecdd0de387d4233bf720e3c0cac669645d8a5ca6cb31e9bf8","sha512":"8894b81a59f6118801ac89600014106044574b4778bc2b438f081ce03a7cf82085ae6c2bf14c86b18217d338f4e2aee264bd1a564a50cf8ec232c2c7bd054278","ssdeep":"","tlshash":"3b11ed2439088a354227d7bbb2fb7bf67db60149841246063a0c291f0be9bb485d992f","first_seen":"2023-06-23T14:37:48Z","last_seen":"2024-12-06T07:45:45.378203Z","times_seen":72,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/close.png","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.588Z","timestamp":1701731520588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/img/close.png HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5982\r\nlast-modified: Tue, 12 Jul 2022 10:56:24 GMT\r\netag: \"62cd5358-175e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 419613\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=6juiT%2FSPoj20joxp7qHd4vmMsx%2B7I5RHGG%2FzIIImwedHIC96Eqe8GEUo06WVOeBvlybFdaS%2BnpDeFkeyCnVm0YoUWXj1pZEegOtB370z%2BsNHUXzng9TAStloTEvn7dL7RHZfbjVvIB39\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb308e7648ce-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c489ce2c491a22ee37a55e26a92dfd73","sha1":"2fa588ab09e94dd902e5bd24b48f98ad1949c9d6","sha256":"1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd","sha512":"fe6a53296238283eac984b1912bfe7fbbdf5f0692f59f86e7e1ca989555a81be786ff29b9f8644443b2ace8137d412b6d9a92b0edf7f595ddf36058702a2d0d0","ssdeep":"96:FSDZ/I09Da01l+gmkyTt6Hk8nTbo5GZNKEBX97O+co2RF9JNssCgSSiiFr4uolec:FSDS0tKg9E05TAYwEBPwF9JNsTgSSL3C","tlshash":"80c1afeff8a058cf4566b7021c8e4080fbaa713d835536b4d4a092dc958be4a0fd7475","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-05-17T18:13:57.742227Z","times_seen":4131,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banquetunarmedgrater.com/advertisers.js","fqdn":"banquetunarmedgrater.com","domain":"banquetunarmedgrater.com","tld":"com"},"ip":{"addr":"104.21.86.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.362Z","timestamp":1701731519362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banquetunarmedgrater.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 09 Nov 2023 11:40:15 GMT","end":"Wed, 07 Feb 2024 11:40:14 GMT"},"fingerprint":{"sha1":"92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57","sha256":"FD:49:8D:A6:5C:D1:FC:24:31:7E:0D:9C:80:D2:A1:98:D4:CF:46:DA:C0:9B:B6:E7:B0:49:21:CD:FB:1E:B0:9A"}}},"request":{"raw":"GET /advertisers.js HTTP/1.1\r\nHost: banquetunarmedgrater.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=172800\r\nx-request-id: cef19a76a142c1c45a1574e45278167a\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 04 Dec 2023 23:11:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VB83k0x4YcAn98PVlObefyIPWIwU533eRxdfUMnWMxjQ3vZUsTuwRkkEc7Dkonkonptv1u35ziQQAx2RnF4q1T8VpkTSMNS8EFBbeWTePOUpS4eVg6RR4MZwY86h5AvZ61LgVeSlYWBI9LQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb29f8d7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":266,"dns":29,"connect":251,"send":0,"wait":117,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp2OzE0s-rpmd2Ev3AvPYklThnxjrdH0hxBqWV2WwNRpOhC50mPfXqhadbi0DOqEK4gW5AOynw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-838037988%3A1701731513374880\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.73.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:59.571Z","timestamp":1701731519571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp2OzE0s-rpmd2Ev3AvPYklThnxjrdH0hxBqWV2WwNRpOhC50mPfXqhadbi0DOqEK4gW5AOynw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-838037988%3A1701731513374880\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ds2play.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 04 Dec 2023 23:11:53 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-3TnqmmIAcW6TE1M6o7_Ptw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/css/animate.css","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.467Z","timestamp":1701731520467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/css/animate.css HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Jul 2022 10:56:21 GMT\r\netag: W/\"62cd5355-13591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 407058\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=86wVonqtWxVoxJ2OhqVcOT%2BhTvcD0p67W7VOFy%2Fk5TxJ%2F3Evfp4gn5luTjmIto6lOXGKuQO8l98STiXgCQQ4g0WMcaem6ts4sNl%2FLTTRffRM66uZ4nkQhXfSiQ1MwOQHlgio%2Bm6tu%2BNy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb306e6f4089-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e1d8acd5ee9d1a90ea09313cbd8f2b02","sha1":"8a8327b115d1356715e63270d1ce6d46124c7b1a","sha256":"3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a","sha512":"b942379b39b29577123ce4017a6566c046fe68c5a862f234302ddfdb08127e9e2d6b22bbf660ebcd5a196f63df0b34e4eaaa13c5f728e28b7cedfab2669f52f3","ssdeep":"384:ZFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"bc731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T07:35:42Z","last_seen":"2026-05-19T03:42:55.483986Z","times_seen":4236,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":171,"dns":72,"connect":32,"send":0,"wait":42,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:01.474Z","timestamp":1701731521474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ds2play.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Nov 2023 04:57:34 GMT\r\nexpires: Fri, 29 Nov 2024 04:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 411261\r\nlast-modified: Wed, 11 May 2022 19:24:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\\012- data","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-05-20T05:43:01.702349Z","times_seen":160632,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":35,"dns":2,"connect":9,"send":0,"wait":10,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.483Z","timestamp":1701731518483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ds2play.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 11:08:38 GMT","end":"Wed, 28 Feb 2024 11:08:37 GMT"},"fingerprint":{"sha1":"01:70:30:C0:4B:E8:2F:96:93:F4:0F:7C:31:5C:D0:AE:09:D6:0F:AC","sha256":"BA:1B:E8:96:CA:12:EB:01:9C:60:D3:DC:A6:0F:12:8D:E9:0E:4F:36:0F:07:68:4E:3E:CD:76:8C:78:76:6C:03"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1\r\nHost: ds2play.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\ncache-control: max-age=14400, public\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qHfC8DkJZFdsL0EGA1CuZEv5OTcKEdO6tmKqbCQ7e131tt7RkEX8KGXyjtf5mfQtOY4ZyENhnDP5jmPcxqWWG480nuGjLrgpepOiOdb15L3evwx%2FN7QHo5gnmJZQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb22db29b505-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (7422), with no line terminators","md5":"6483b908cb544686cf08488574021ece","sha1":"76cfdfa1e129bf6a5ac64c8e72e8a7bfc3d8e41b","sha256":"3f2a1e2bb234af1dc5f6c40a840ccef01ad8d6338eed58d8ea6d0ab1e699c738","sha512":"7e9634d375c369b90db666947f54f4b46a8eb18fa4a89e64dc319d78de32afe081a83172142a916ba423c3626f93c45d8f659c9aed6cbc15ff65ac8dea63cd73","ssdeep":"96:he85Or1JHlfMLi5boTaJ7StEMtlb7OrRGv1Z5Y5osX4WYyX6samXhcUHPX0Tq+Fp:dOrjSBRly8uKgcVXey5HV7chX6","tlshash":"6ce1a7cb7d857063027139b9011fa5a6a11e9f9b24c86c46c734d0e9bb3b3444aeff96","first_seen":"2023-12-05T00:12:11Z","last_seen":"2023-12-05T00:12:11Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/img/number.png","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.590Z","timestamp":1701731520590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/img/number.png HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1138\r\nlast-modified: Tue, 12 Jul 2022 10:56:23 GMT\r\netag: \"62cd5357-472\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 2049006\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iB0BDGCg%2BaDQD4xD40%2FixzHlRZ5JUM3B3dw%2B6DDLnthqT0KG4PNAI0FJqW1baAut7kwhIkdi3x7iNlARlzW7vaSV%2F0xsQNBablRJhUBODJe5jhILMw4sh4tCKLm3RsgDhBkFVKJgQRgJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb309e7848ce-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced\\012- data","md5":"9e4414e85c588bf7db195e49c02ab2bb","sha1":"09254e79b255f1b2dfe45adbbe44583a4b433782","sha256":"0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762","sha512":"07925dc4d8f6cc1b9b89d26f2c3a6aa3175279719a0999fd837a20e8b12f443eb521e23b3212227ac1b6dfa2ecfcdd94b7494dd67d9d8b046efdddd185bb9bfc","ssdeep":"","tlshash":"a121f90aeca21be0d7888f0214dc135095da07447f8e280a37b6aa599e1070614451fb","first_seen":"2023-04-09T12:43:14Z","last_seen":"2026-05-20T02:24:33.022169Z","times_seen":2712,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.582Z","timestamp":1701731520582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 04 Dec 2023 23:11:54 GMT\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6824,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7013), with no line terminators","md5":"49475c425d6c00477bb339179326c49b","sha1":"bd97deeb753f44f43a21feafa92d98239fa511bd","sha256":"598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09","sha512":"05f81d5ed74a7ff2f757ea0d6d43c60518dfe9fd3269a57355e82e76f70dac6103ae888e9744d31a0b91afb0174ac6e032ed7d30a109344aa06fc2dd33918d7a","ssdeep":"96:/APRFZ6XBIOCVc+ouNNARWXFZrgZFJ4Vc+on+pNBvTEFZuIQUDFVc+o6GNF:/AP0XBIOY5oRWjgZFJCE+dvTrIQUDR1I","tlshash":"6ce17c81581b6400ea830ee637df7a35bd0f2b2560729232abfd68ae9cc7d22535475d","first_seen":"2023-05-05T09:30:59Z","last_seen":"2024-08-22T11:17:46.945494Z","times_seen":2798,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":54,"dns":1,"connect":7,"send":0,"wait":23,"receive":2,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-bars1.com/sb/ssp/notifications/text_bubble/2/js/jquery.min.js","fqdn":"cdn.creative-bars1.com","domain":"creative-bars1.com","tld":"com"},"ip":{"addr":"172.64.109.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:12:00.593Z","timestamp":1701731520593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-bars1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 21 Oct 2023 15:38:40 GMT","end":"Fri, 19 Jan 2024 15:38:39 GMT"},"fingerprint":{"sha1":"2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34","sha256":"79:4B:8A:52:C3:34:AC:4B:98:34:14:C1:CE:3B:CC:6C:D5:8B:22:C1:64:76:B2:7D:D3:70:F7:2F:7D:38:2E:D3"}}},"request":{"raw":"GET /sb/ssp/notifications/text_bubble/2/js/jquery.min.js HTTP/1.1\r\nHost: cdn.creative-bars1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Jul 2022 10:56:19 GMT\r\netag: W/\"62cd5353-15d94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: HIT\r\nage: 418801\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=OKf83rwu22DS1zgr4up8dYUfRATuLIdVmJMo7nvaPCc%2BsVQunNCmmTFkBg4HOpjYjgtpTLV8aTDGlIvb8pXKA1%2BDqYF4lGKw2X1%2BziO1doTU0e%2FtW0i1TWuavNje6WB%2B1WeqtaohzeZw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb308e7348ce-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89492,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-05-19T02:48:26.765604Z","times_seen":6675,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":71,"dns":1,"connect":31,"send":0,"wait":54,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2play.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ds2play.com","domain":"ds2play.com","tld":"com"},"ip":{"addr":"172.67.70.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.448Z","timestamp":1701731518448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ds2play.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 11:08:38 GMT","end":"Wed, 28 Feb 2024 11:08:37 GMT"},"fingerprint":{"sha1":"01:70:30:C0:4B:E8:2F:96:93:F4:0F:7C:31:5C:D0:AE:09:D6:0F:AC","sha256":"BA:1B:E8:96:CA:12:EB:01:9C:60:D3:DC:A6:0F:12:8D:E9:0E:4F:36:0F:07:68:4E:3E:CD:76:8C:78:76:6C:03"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ds2play.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=1; ppu_show_on_06e2eefbde702208a7324b7b8f526df8=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncache-control: max-age=300, public\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kB6uB4t94sk%2BUQvXKJY5wZBHfIb4XN9FMdBaCLGYSLQoUayvOsiyg426rza014YIwbqWs5TLESt6g4hiB%2BV3hWjLTDts3ITOTZgLXCSruBXF9OU6kKUK5sjEHKRh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8307bb22bb18b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":7422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"172.64.172.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ds2play.com/d/","date":"2023-12-04T23:11:58.312Z","timestamp":1701731518312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 18 Feb 2023 00:00:00 GMT","end":"Sat, 17 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37","sha256":"82:4E:6A:8D:E6:9B:EA:74:3D:E2:A4:3F:17:C0:E9:50:1B:15:F3:8F:64:56:CD:91:82:2E:74:C0:A3:75:C8:1A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: friendshipmale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ds2play.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 23:11:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-request-id: f4285d808fe749ffeee911b5b2588470\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 04 Dec 2023 23:11:52 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gx8XeDh5XFnCYhs76QrxTS3LzEcwyJ8R%2FIQumv9%2BK2GG3JSOEWnmuOqN8AoU7HduF6%2F%2FsHHbO6DHpYWcwXHtSlXEbL%2FUTotX%2Ba8vQDIPBvP70lYCAj5TXsNACMNQ3QWXRqbUVoQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8307bb22ba38414c-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85468,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T06:12:39.446132Z","times_seen":15471872,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":136,"dns":31,"connect":30,"send":0,"wait":126,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}