{"report_id":"33253ada-3a5f-4764-b852-cea8b8b1e866","version":6,"status":"done","tags":[],"date":"2025-11-18T21:44:27Z","url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":0,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"title":"streamtpmedia.com/global1.php?stream=espn","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":0,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-23T21:44:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":45,"urlquery":0,"analyzer":12}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.598651+0000\",\"flow_id\":1310119252271739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50986,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.598651+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.619188+0000\",\"flow_id\":1310119252271739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":50986,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.598651+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.624803+0000\",\"flow_id\":1683072737446051,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50986,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.624803+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648183+0000\",\"flow_id\":1197432195376119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57167,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648183+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648430+0000\",\"flow_id\":646143078163694,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":58300,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648430+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648726+0000\",\"flow_id\":1948720759694870,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54459,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648726+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.649535+0000\",\"flow_id\":1358463404206399,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40198,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.649535+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.649842+0000\",\"flow_id\":415593528683122,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56080,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.649842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650159+0000\",\"flow_id\":1903095322110895,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52727,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650159+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650606+0000\",\"flow_id\":909819710401902,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48328,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650606+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650847+0000\",\"flow_id\":1550422672535135,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45416,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650847+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.651168+0000\",\"flow_id\":746224406097824,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":37832,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.651168+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.651596+0000\",\"flow_id\":2172179318174028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56150,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.651596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.652041+0000\",\"flow_id\":2232085522019081,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":51219,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.652041+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.652283+0000\",\"flow_id\":1851499879986171,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45750,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.652283+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668273+0000\",\"flow_id\":1987847911715441,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40446,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668273+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668419+0000\",\"flow_id\":387414248207107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57167,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668419+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668484+0000\",\"flow_id\":1270012847665988,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":58300,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668842+0000\",\"flow_id\":1789570746496170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54459,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668911+0000\",\"flow_id\":367021743486191,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56189,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668911+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.669632+0000\",\"flow_id\":668640116815808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40198,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.669632+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.669710+0000\",\"flow_id\":279108057905166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56080,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.669710+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670257+0000\",\"flow_id\":184670317001265,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52727,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670257+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670674+0000\",\"flow_id\":2036552840854482,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48328,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670740+0000\",\"flow_id\":659886973467668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45416,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670740+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.671256+0000\",\"flow_id\":2179751345471000,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":37832,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.671256+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.671628+0000\",\"flow_id\":1619593120792460,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56150,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.671628+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.672126+0000\",\"flow_id\":2147861213299070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":51219,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.672126+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.672195+0000\",\"flow_id\":2086928512270787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45750,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.672195+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688364+0000\",\"flow_id\":726248513175788,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40446,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.688364+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688621+0000\",\"flow_id\":1270012847665988,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":58300,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688645+0000\",\"flow_id\":387414248207107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":57167,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668419+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688892+0000\",\"flow_id\":1813274671022844,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56189,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.688892+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688971+0000\",\"flow_id\":1789570746496170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":54459,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.689793+0000\",\"flow_id\":279108057905166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56080,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.669710+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.690120+0000\",\"flow_id\":668640116815808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":40198,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.669632+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.690931+0000\",\"flow_id\":184670317001265,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":52727,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670257+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691117+0000\",\"flow_id\":659886973467668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":45416,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670740+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691474+0000\",\"flow_id\":2036552840854482,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":48328,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691753+0000\",\"flow_id\":2179751345471000,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":37832,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.671256+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692167+0000\",\"flow_id\":1619593120792460,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56150,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.671628+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692431+0000\",\"flow_id\":2147861213299070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":51219,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.672126+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692789+0000\",\"flow_id\":2086928512270787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":45750,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.672195+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.708881+0000\",\"flow_id\":726248513175788,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":40446,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.688364+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.708997+0000\",\"flow_id\":1813274671022844,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56189,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.688892+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"doc1.crackstreamslivehd.com","ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-02-21","domain_rank":5295463,"first_seen":"2025-05-27T23:18:08.412939Z","last_seen":"2025-10-04T21:57:14.394135Z","alert_count":0,"request_count":10,"received_data":5872904,"sent_data":5729,"comment":"","tags":null,"fingerprints":null},{"fqdn":"streamtpmedia.com","ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2025-10-22T16:57:13.874938Z","last_seen":"2025-11-01T19:59:54.625718Z","alert_count":9,"request_count":3,"received_data":94843,"sent_data":1517,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-16T22:24:12.204838Z","alert_count":0,"request_count":3,"received_data":840429,"sent_data":1365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"99a1.crackstreamslivehd.com","ip":{"addr":"93.123.109.242","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-02-21","domain_rank":0,"first_seen":"2025-08-24T12:47:15.503889Z","last_seen":"2025-10-26T14:53:03.657672Z","alert_count":0,"request_count":1,"received_data":922,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adexchangeclear.com","ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-11-17T13:55:56.757999Z","alert_count":1,"request_count":1,"received_data":1716,"sent_data":836,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"alwaysdomain01.online","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-06","domain_rank":567801,"first_seen":"2024-02-07T21:16:21Z","last_seen":"2025-11-01T19:59:54.624776Z","alert_count":0,"request_count":1,"received_data":235453,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2025-11-18T04:53:58.448054Z","alert_count":0,"request_count":1,"received_data":832,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"us.meshify.cloud","ip":{"addr":"104.21.17.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-26","domain_rank":1702107,"first_seen":"2025-07-23T06:06:22.725237Z","last_seen":"2025-11-09T15:31:16.756227Z","alert_count":0,"request_count":1,"received_data":687,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"madurird.com","ip":{"addr":"104.21.19.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-06","domain_rank":7966,"first_seen":"2023-10-07T10:39:52Z","last_seen":"2025-11-18T15:54:49.215171Z","alert_count":3,"request_count":1,"received_data":111584,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-11-12T16:54:53.41295Z","alert_count":5,"request_count":1,"received_data":522,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pro.ip-api.com","ip":{"addr":"51.77.64.70","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-24","domain_rank":40593,"first_seen":"2015-04-06T16:13:16Z","last_seen":"2025-11-17T20:53:40.316978Z","alert_count":0,"request_count":1,"received_data":315,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-11-17T01:58:33.671842Z","alert_count":0,"request_count":1,"received_data":840,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.598651+0000\",\"flow_id\":1310119252271739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50986,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.598651+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.619188+0000\",\"flow_id\":1310119252271739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":50986,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.598651+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":50986,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.624803+0000\",\"flow_id\":1683072737446051,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50986,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.624803+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648183+0000\",\"flow_id\":1197432195376119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57167,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648183+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648430+0000\",\"flow_id\":646143078163694,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":58300,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648430+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.648726+0000\",\"flow_id\":1948720759694870,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54459,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.648726+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.649535+0000\",\"flow_id\":1358463404206399,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40198,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.649535+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.649842+0000\",\"flow_id\":415593528683122,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56080,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.649842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650159+0000\",\"flow_id\":1903095322110895,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52727,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650159+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650606+0000\",\"flow_id\":909819710401902,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48328,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650606+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.650847+0000\",\"flow_id\":1550422672535135,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45416,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.650847+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.651168+0000\",\"flow_id\":746224406097824,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":37832,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.651168+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.651596+0000\",\"flow_id\":2172179318174028,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56150,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.651596+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.652041+0000\",\"flow_id\":2232085522019081,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":51219,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.652041+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.652283+0000\",\"flow_id\":1851499879986171,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45750,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.652283+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668273+0000\",\"flow_id\":1987847911715441,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40446,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668273+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668419+0000\",\"flow_id\":387414248207107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57167,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668419+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668484+0000\",\"flow_id\":1270012847665988,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":58300,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668842+0000\",\"flow_id\":1789570746496170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54459,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-18T21:44:05.668911+0000\",\"flow_id\":367021743486191,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56189,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.668911+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.669632+0000\",\"flow_id\":668640116815808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40198,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.669632+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.669710+0000\",\"flow_id\":279108057905166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56080,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.669710+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670257+0000\",\"flow_id\":184670317001265,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":52727,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670257+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670674+0000\",\"flow_id\":2036552840854482,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":48328,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.670740+0000\",\"flow_id\":659886973467668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45416,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.670740+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.671256+0000\",\"flow_id\":2179751345471000,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":37832,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.671256+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.671628+0000\",\"flow_id\":1619593120792460,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56150,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.671628+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.672126+0000\",\"flow_id\":2147861213299070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":51219,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.672126+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.672195+0000\",\"flow_id\":2086928512270787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":45750,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.672195+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688364+0000\",\"flow_id\":726248513175788,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40446,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.688364+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":58300,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688621+0000\",\"flow_id\":1270012847665988,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":58300,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668484+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":57167,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688645+0000\",\"flow_id\":387414248207107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":57167,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668419+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688892+0000\",\"flow_id\":1813274671022844,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":56189,\"dest_ip\":\"18.156.18.183\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-18T21:44:05.688892+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":54459,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.688971+0000\",\"flow_id\":1789570746496170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":54459,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.668842+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56080,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.689793+0000\",\"flow_id\":279108057905166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56080,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.669710+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":40198,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.690120+0000\",\"flow_id\":668640116815808,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":40198,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.669632+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":52727,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.690931+0000\",\"flow_id\":184670317001265,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":52727,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670257+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":45416,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691117+0000\",\"flow_id\":659886973467668,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":45416,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670740+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":48328,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691474+0000\",\"flow_id\":2036552840854482,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":48328,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.670674+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":37832,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.691753+0000\",\"flow_id\":2179751345471000,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":37832,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.671256+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56150,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692167+0000\",\"flow_id\":1619593120792460,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56150,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.671628+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":51219,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692431+0000\",\"flow_id\":2147861213299070,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":51219,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.672126+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":45750,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.692789+0000\",\"flow_id\":2086928512270787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":45750,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.672195+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":40446,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.708881+0000\",\"flow_id\":726248513175788,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":40446,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.688364+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T21:44:05Z","timestamp":1763502245,"ip_dst":{"addr":"172.18.0.25","port":56189,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"18.156.18.183","port":3478,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-11-18T21:44:05.708997+0000\",\"flow_id\":1813274671022844,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"18.156.18.183\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":56189,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":110,\"start\":\"2025-11-18T21:44:05.688892+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[13]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d2e0aa749903250349b071362de696bd","sha1":"d4486ac2045ae74933ad5a1c05fbe30b39eee4cb","sha256":"246aa71e2a226caa935b209d8862a0e4716c636e01495898ec20b17ba838119e","sha512":"7ddf1f30293c1560e5234848cc3884d57786372affe2a1f50c89aea69bfea867cc27073e9de2776136efdedbf7970484c3b3aa6f657f49318c7b087460d749f3","ssdeep":"","tlshash":"2171c07010e910bba34f11f4496eba1b5b42d001c6d9d54e757e1ba08ffefa6c81e2e6","size":3546,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.489658Z","times_seen":1339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[16]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bf9620c080385c4190d481970b97f451","sha1":"c338fb77d77e634c51755c220a11f84864fcf88b","sha256":"66094161d62295d9d0e3b2c232d0f9c1007a297b0435d1049ab18252e6895051","sha512":"77b41a90b993d7e75eb4da6ab9c2970a101eca950ea831803e5d1516f11a101c5138c62fa0ef3aed67b493e7a1250e185d57d41a214b9cf4561315505a6281ee","ssdeep":"","tlshash":"85d02bc6b47122dc527316e8022685771568e52dd1a06948ca4dd630d47fb276e0d53e","size":265,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.396755Z","times_seen":1307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"eventHandler","is_inline":false,"md5":"247df2afbe35ea059f2a6fc086c4ed6e","sha1":"01981cd7e821e2e62c74ef6369bdbd5d001c4a1b","sha256":"3dc3a9bdd9a0109204180d7578ade8aca37ac105ae924e29fd89eae194fec91b","sha512":"1ce8638f9173bbc4c8f8d5d5d8bc78a98f377fd6478a8919313a7077ee9dce44900ed50d54f3b95fd52d6ff914a766a0449ed0e48d09c75cef6047657a3a4d68","ssdeep":"","tlshash":"c95000000000000c0c303000000000003000003303030300000030000000000000c033","size":8,"data":"","first_seen":"2025-04-11T20:45:23.096365Z","last_seen":"2025-11-18T21:44:33.462962Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[23]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c6420a63caeab46fa6e03dc58135f555","sha1":"dd17e9bd15d7e3fb3f8e00ddb23214059ad89b88","sha256":"574f6245fe4b61aeccca439b2a454d5ddfa91452e16b1f2a2c6ff1fc5c291700","sha512":"7db6284c8886020b034cd42d0622924078e5810d43a5911e8ffb147e5f84777cb64223c27f8e60c321fab9fbb931f939dd67a594fe5c3b4a3a725b82749e2917","ssdeep":"","tlshash":"0d31e047616503b938bb8a982f91d391323df2a5d46253feb98eb9d043fe00cb117128","size":1481,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.434616Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[2]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"802eb34ff58dc7c705f3e864ef98c945","sha1":"801fd9cd1a2fd8ced641ae19422182057ba6ff5a","sha256":"b1d729a0bbe3e73c3590c607bc3704184115cda68ab355fd7feaf8f0bce7c71b","sha512":"d1cc0e7e525b122b6999130c28690a43d142cde57b70b188064aafe8f08a490f06ce65b0f83cbebdb9f0a44cfcb7f464257c4932f04a6d19614489d13ef1194a","ssdeep":"","tlshash":"4c417b0ba664237578b34f8c3beae201222cf306c5215ebf7ecd7a1683c8644a413b5d","size":2321,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.482606Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[18]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f1d04d242cbea86f97aa5e1c5e1e460e","sha1":"a766ce4a8824caf9a59b204963ad4b5c6ee4478f","sha256":"ebc28b0271fc555eb502c694ddc64f7efc9a75d45a03d44e5f5269dcc84387da","sha512":"cdced41072f9c043aced4b2c8fcf3ca7930935807f95c0b974d13a667314694de42ed67ffd9b3a1b0b3ec66d3774d9c76403f73ab746f1bc3e77004659edf9a5","ssdeep":"","tlshash":"1701cef400ec12fea35a03a8290ee11f554dd056d1d8254ef5788a70c6bc3b94c1963f","size":791,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.421436Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[20]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"75e79108a32d8198e9c8fdc380beab6d","sha1":"1705219b86d194f203dfdd000140342d51d5b7f1","sha256":"fbc4489a0e2c84fb17f43a773522b9d26508befa7b827af3f46918fec5b5404c","sha512":"652941d848564dd6cc58361988185c28064e62951610571e254f4af9da82632e9740a9e76279d2224746c6092d7a0fb6884d1017847b1e7a03718bebcec06525","ssdeep":"","tlshash":"f3418b02f43f52801ae79ee333094863bbf4b654b4911f64f1c9b0bd807e7647795228","size":2400,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.481578Z","times_seen":1175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[21]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8f7d8f20a7732f0c7b0346ac8cc5a3b1","sha1":"e759f484c4dad54d86df7d82789263bfa49e13bf","sha256":"7be4a2cbabbf34688cf19a92144e0fff8359516d8e8420c26af4cfa1f1f856b5","sha512":"a0952f2c11ff1d7b864f087e0a6feceeffd09450f016fad2f4443d8312b0fd99a4cd5ba95f61ea67f1ca3c9a7772dd1439666154f8b2a5c21ed7fd6a4478b719","ssdeep":"","tlshash":"fb71bf7010e910bba34f11f4496eba1b5b42d001c699d54e757e1ba08bfefa6c81e2e6","size":3546,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.397986Z","times_seen":1016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[0]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"173b70b85a9658eab15a9110e0b04568","sha1":"3b21823d0aa94ae751cbc7bd0e214f2f7bc3d503","sha256":"c3572efe5f3a33f021ceae7a845d8aac508e2ba4357b40c9d8a05608aff7863b","sha512":"786a1d7ad4387256cf21a6c185e60aafb5da09f64282c50ab1e767da6d4d1206f628d65b91f22414a21c86dd9f8523c192c9bc6bbf9610d52b0060029e6a1a18","ssdeep":"","tlshash":"6d31e047616503b938bb8a982f91d391323df2a5d46253feb98eb9d043fe00cb117128","size":1480,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.495274Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[6]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0fef0cfef9acd9068f428da4adfc868d","sha1":"e04a20aca5ac9bf6b4a15128882153326525c6c7","sha256":"2c4d4a81081cd404eed42504e246cc951e5dc5b9b2772d75ee1bc3e4eef51b87","sha512":"df6709fba9375b24d5cbac9365794041080dc15c7369f0b18a7c812223257f7e945b8d2edc078eb0618cf4c82cb4c015bffca121de2b67a75bf04ba7bde052e3","ssdeep":"","tlshash":"c1d02b86b47122d8527317e8022649772568e52dd0506948ca4dd630947fb276e0d53d","size":264,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.399567Z","times_seen":1635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[8]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fc9ba20cae0848cf3a946374da072d2","sha1":"d697e65a6ec0f44b5745a1d1a2f26886413d8819","sha256":"63d509f07a5692ddb41099673c767f50ed4f99f1c3c01e7e298629ff22edcbdd","sha512":"47f644b495a9346f9ab0d03498737699882752dac72f8d2747e6c248a22b258382bfa2fb874be414091a0789725b79adf0751dcef23356b268aaf385012773bc","ssdeep":"","tlshash":"b0d02b46f4b132e80553267c02268657216dc71c55512d89868cd5605677e518e09479","size":251,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.483109Z","times_seen":1376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[15]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7714f2e1bdc951dd60161694190a90a8","sha1":"8a69b70fef1732d7937c07180df1442b34ca68bb","sha256":"dacd591b9a7aacb25b9b39135b936aa16483a0fbfb835522879bd9970a6bdef4","sha512":"c068b89a79761007cd7a57e495bdc20aec6089b67e367c96bd22ea9a948e37b10de3b59ec000bca8fdb9665be8958eec5e083936a313d5386ffd3eb038169e6c","ssdeep":"","tlshash":"ec11abcbb36a132490277fde2fe27fb93338b22a5071265cb64da442d754c51a301a6d","size":1031,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.395994Z","times_seen":1177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swarmcloud-hls@latest/dist/p2p-engine.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc876e1d87bc4ee708d60a929bc0fbf","sha1":"6892b613cb64af83228b2a80ba4c7d739377544a","sha256":"909c3f8fa30df10e71d5b55ce3da224c8d2c1345459879d6bdbb8896b3e62678","sha512":"57e221970dcbcb46ef3fc6ced722402af480caf03ad00491b7fa26043d91e9a2306adc04d7d0e2082238b162143a7b6cccbe942da68be8320f42aeeac4a5f61c","ssdeep":"3072:8+4CM+d0U8RlqKBaH7ROSE6E3kVgvp/u3Zca9AGX2Qf:kC1KM1LMUVQ/u3ZcatX2Qf","tlshash":"89142bd77396902383d5a9d6a4740303a335a94e3808c06cb67cbddfad2ae89b175f74","size":202995,"data":"","first_seen":"2025-11-09T15:29:56.008297Z","last_seen":"2025-12-05T22:28:51.818567Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[14]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"77bcd8a1f4725a3658221d430032b9d6","sha1":"acb15f6adad154ffbcd6b77f8f607d924845ae19","sha256":"18b776af5cdeee3cb04e8a91ab0165215054b0b471591e56158a312a77eac77d","sha512":"43074e5e53d2b2c7407bc63b0762d4268384b679240bd10ec57f8e2a9ce2aa1a5ca94fc9ff6b123d460fb7684adddb4cd1cabe9f43376afdb0374f7088214e00","ssdeep":"192:InGDA78KFQgwcV8lY53miqGvHFFriTtJJovlBl4MBnQlBChj1s49G0iR:roq41QuqWHiR","tlshash":"fd6216022b79033458f72b4c3bf69610221afa91d47285ee7f8dbf5657c84d63063ea9","size":14947,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.490165Z","times_seen":858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[26]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b18d1c3eb98082481114d55d1d30250c","sha1":"b962ddd745e64f9867d93ad73619b15098a91c14","sha256":"60fd9710e89a2dd65ef34872ba829bf83f2743836e69088bca1a60ab1c266917","sha512":"d709b23a229218716da73133802aac687f21c23cafd2cd3b6c7d097e082672e23d590a5782b8a4294b365345f148c4c50f1e38e6ba1a14f80a34254b609c893e","ssdeep":"","tlshash":"5ed02b86b47122dc527317e8022645771568e52ed1506948ca4dd630947fb276e0d53d","size":265,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.45985Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[32]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"80154efca6a8aefc71f5ea5ed572ed8b","sha1":"798352580dd2a2e01398c0bb0c3398264bc97bf7","sha256":"8b42b2aafbd0c916b0245bb12a005aea76fd18b6e300111d5a92de181296b9f8","sha512":"76956a0fa6f82e954ba48b68c79e0022ead7e90766105d9bd84fb9b72afe356afeeab839f08134f7327051c0617b228f019554b6f9109e4e8644d39fa7f02582","ssdeep":"","tlshash":"f701cef400ec12fea35a03a8290ee11f554dd056d1dc254ef5788a7086bc3b94c1863f","size":791,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.441549Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swarmcloud-hls@latest/dist/clappr-p2p-plugin.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9acfffb9ca4835e965ec668f00b0096","sha1":"b2b60ebaf93b2a37a9a81e0bfc9466ac7ce73c4a","sha256":"60d7095c2958ace3a1d1038e94616f856feb0d7906c42a6e8e33941481cd6ddd","sha512":"9abeb7320521a93beb16145d15824b6e662e94cb4713d70728f409b026cb041d843452a3a15d495f4efea8e89b43558460eacffa82fa114e84e0a68e87adaec1","ssdeep":"","tlshash":"1d6162897da0b4b253e3a694c13f010af33d857a8198c140a2a9e9f4acf505f96a7f1c","size":3260,"data":"","first_seen":"2024-09-14T18:55:50Z","last_seen":"2026-04-21T12:26:47.12014Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"86617f4be2a7e0a8ca8f11bc97305552","sha1":"09fd56ce9f4de7ceba11193b8ef1303cd9c87e6b","sha256":"0ed6943528a556f1792e4f87326e04234e13b836cb5448c9f4c9a7204d1dae47","sha512":"9b2201049678451b8add7c3330b27c7b0f29ccf958e98b979a3dce00e891aef227ff1b2bb52f0b177a3cf6a3c3e8832721706039a72bfde946a1066b16e900b1","ssdeep":"96:3HIzEMhOWOHM6cBRablLu+mOkSTCuXHTMkxSKbSZSIoCBx/D:XtoOWEIwblLu+mKVHTMkxNbSZSIo6D","tlshash":"f991cc1d9ee4045a7d2ab3f10566b496fe240c430473bbc5829aaff625daed30d237b1","size":4474,"data":"","first_seen":"2025-11-18T21:44:33.473426Z","last_seen":"2025-11-18T21:44:33.473426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alwaysdomain01.online/ads/lib7.js","fqdn":"alwaysdomain01.online","domain":"alwaysdomain01.online","tld":"online"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ab7e8659cef5b564d705c43a14aa5a2","sha1":"c1061d4a14a7333586ff2637bf2b4bbde27d0d44","sha256":"3781c1e972bcdeebc746dcb034f931c2c614a0beb59e4f9fe4e9c8b26243f42c","sha512":"2ee1b7f7f80764479620d11c3c5965043af454d2cf3f944fbfc1017412e7776d23810850d83b2c9e25561fcdb97fe8e42e801b3a14d725abf744998c6d45fb4a","ssdeep":"6144:6O3Dj+1jn3BFVBC4jscT1bji/FUKOxsRUyhZnHVkj:6O3DjQj3BFVBC4dlji/FUKOSRhnmj","tlshash":"b7345c153352773a7695809aac3a5330b335019a760ac02cb1ddcde376afdc97636bb8","size":234694,"data":"","first_seen":"2025-11-18T21:44:33.447961Z","last_seen":"2025-11-18T21:44:33.447961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[38]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b6d3274bf0413ea729ce145e9b4a83e2","sha1":"a25ebfb77b11a6aa2f37c765a652b2bb192977ab","sha256":"e505122c82bd9d2343b9a38b28f03d44a8ae3707179e25954f0ca05e8f0c73e9","sha512":"ca1c0888fa1609ed69c711c6068a232afb96a0c9154161ceb3d670940102cff569762aa964b0e745adc74fc15827a960278348c2355243fef9063beb83bf2f65","ssdeep":"","tlshash":"e0e023e0d0f462ec23050228210f5617214cc142d0c8354fc9bac6b0ceb7d950a0c23f","size":421,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.47767Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[37]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"206233e26fa3351b71a98173551c5ee8","sha1":"3ddd7aeae73135d89212433eb861654e8baa9f65","sha256":"42dac6ba84e060d334071bf69fd8ba362f1c2c0d6efd57ae8a08d5ee1590d6a6","sha512":"97149ea83d2eda50384e91b4aaeeb5061779d169fb950573f7d3ec6ada8c6cadd7046638e85f17b49bebf27146daadd7456286209fdefa8df69ec05c569dd460","ssdeep":"","tlshash":"4b41590ba664237578b74f8c7beae201222df306c5215ebf7e8d7a1683c9644a413b59","size":2322,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.447638Z","times_seen":685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[31]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6446316f1a33217612cd194bd79aa9b4","sha1":"a938a2792026e7cb801fb63d5b1c25e020abc167","sha256":"1332726fad3ab6c160c898f8deb6a305332f1e2cabcadda591d232292a2e73fc","sha512":"5679ef3b65522a03190fa3c2f5e0ae80d3a9060e52047f6aeddb17c134d8af7e3ed758745e8c08ef0b3d2818f71f9be4d077590a7a76747deae72ead790b2763","ssdeep":"","tlshash":"9031e047616503b938bb8a982f91d391323df2a5d46253feb98eb9d043fe00cb117128","size":1481,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.462451Z","times_seen":750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[30]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c79266f55f57e95a67b0ea8d725f9d13","sha1":"bd9b9e302ffdbcc3e4afe1e77285b31c01cf388f","sha256":"f4807bcb715f27cb42dbc62f902a190bb8de2fb50670636b16e25275aa7544d9","sha512":"136e684d5c69c2bc7f00b7b381664a5297b9c8a10fb2d35828ff43e754e7c269c6e5e79076d827bc79d940d4d7c772df10549d680a2fec0aa173076b1eed511f","ssdeep":"192:InGDA78KFQgwcV8lY53miqGvHFFriTtJJovlBl4MBnQlBChj1s49G0if:roq41QuqWHif","tlshash":"e06217022b79033458f72b4c3bf69610221afa91d47285ee7f8dbf5657c84d63063ea9","size":14947,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.413504Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[3]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f40933e603a05e3c1f59b8b335ff9a02","sha1":"8bdf38370eab8e6c148cfc2f9f3b6858882ece80","sha256":"eae854849ff9fe52b79b43b513b33644249e07c3db14c00377dda3840b913747","sha512":"5f23b3f7338e9123c671031f0516676d39109a0caeed2d10f28b0a92e7dd37ef268eacb0df52a40274ff01c46a3ffa5aca5d811be63263a13743b21c26a58acc","ssdeep":"","tlshash":"00e0a3e5d4f562ed23051268110f5617215cc546d0c8755fd9bac6b0ddb7d954a0c23f","size":420,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.419556Z","times_seen":1686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[19]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"09b2ee12355ca16350b383fb0253a2c1","sha1":"ec51e028f4d1cd9337160bac617afeb55df50d9a","sha256":"bb31fabf4e031706dfdb477a31b4645296ac881c072216e0d5fd81c04365b5b4","sha512":"7b9e6a4479baff0077a101d79849f598ff4e64f15723981da6a6c2c51005abb70052ee907d8e2a8c2323f6dd0f31f087777ccbecfc986ac0483e2e3582f958e4","ssdeep":"","tlshash":"ba21dc2f3853115419138f9567e7433a31bdf71429324e757a05a93783bbb98238432d","size":1184,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.483613Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[17]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c8a1fa4de07a4ee5744b88bf3243034b","sha1":"695bf56fa4c73b5e316cb97727018f41aaaa15f1","sha256":"b72c1d237c0e1d148fae25d5648691b7d4d485c6cde2cfea65236680208c2ac5","sha512":"3745d5e2be5ec6750f67d20aa8695bc61199a62932ff70d8ea2ca7acbd3dfe0e9ca8c8244f16dff2d1f4dfe0be5ee97d521f196e69d9669cb1404fecb214a6e0","ssdeep":"","tlshash":"6331e047616503b938bb8a982f91d391323df2a5d46253feb98eb9d043fe00cb117128","size":1481,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.485599Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[27]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b3b341ac401362f7251af5bfe64b218d","sha1":"f5989bf80cd3afbc97bf86158f5d6ccc2ec70a4e","sha256":"ccd0023c6c3f9331c5725686e31062db21b8ef4db1a0c4714e1ca2fa26c6c4fc","sha512":"d4cc221615aa2664a3a4b1d52c1ee7b6d1869d2f2c0400d226e55c302a129076e896b55f9d1e4bb57a82340ead3844a4d764e0e74873f695cdb9982fe986943e","ssdeep":"","tlshash":"3641590ba664237578b74f8c7beae201222df306c5215ebf7e8d7a1683c9644a413b59","size":2322,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.465445Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[11]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bb1191112e52272bde802d80749d1b9c","sha1":"a57c542d3f972968c70c0a16e7b8016b878e284d","sha256":"e0cba6e029fec740108a7ad86a5461ee9e4959937fa4ff27ce356e04c35e5850","sha512":"d4ddd5d338c6c59570737854a73f93db16a4c85a4e369723bba784226777b2e082d6312498e073dcd0250108db48368c12121131ba83c579d4d704b20cfb354f","ssdeep":"","tlshash":"ccf08b466ca121bcb2632d7c119040172b2ef20595212e8d37cde05082ef68909281fc","size":526,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.449588Z","times_seen":1331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"eventHandler","is_inline":false,"md5":"c57ebd6d193289940a79c19fdcdadfaf","sha1":"dcb1d0d9fe20499bbe8410ae53d6f8cb9c416d1e","sha256":"08e58ee887828809fa915d6a83e4498d0f85c8a5ebe41360ddb4ba898f033919","sha512":"48a3a02a0d24b2baee706f175784a1cf5d9a720ca6cebb877814b518400871bbf7287a455e0a449cdda51e2412a3118b523fe1f6e338845866d9a67e182a3ac5","ssdeep":"","tlshash":"c9500003000000c000000003c00c00330000033000000000000f0000c0000c30000cc0","size":11,"data":"","first_seen":"2025-04-11T20:45:23.095079Z","last_seen":"2025-11-18T21:44:33.483595Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b051af020a5524763c9d6c97a32afb1","sha1":"1809c839e4b2a0a94148b808051b13b3881ead61","sha256":"719a02c21cd99f74e475aee4e07f431bbe7c706ab765f29efddc8d74652bc7a2","sha512":"c5af912d740e141e7728c3af8b93b207ff32fe04757ca0d4526d8c6ea6018e06d0a1b0c4a38079e76b4d6feeeced7d298bea23c61d38c49606b33b57ef19d909","ssdeep":"","tlshash":"268000a82a20a0bb2c820a0c8a0a8eb082af080aee0c3bc20e883000c0320e0288b000","size":33,"data":"","first_seen":"2025-04-03T19:10:03.330703Z","last_seen":"2025-11-18T21:44:33.484345Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[24]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"60d712708b983f5789f2a8aaa1870dbe","sha1":"5e0ad9bd5d3e98d4afa868c9a7fbee38d2e7b0e3","sha256":"9cd6d70f9cda4f328223ee7fd22021f2ffa2196b314a383cfa187ae7cce6f16a","sha512":"dfce387aa91d9d24fab8e9b730bbfc88e21b532a9fd1c02ae475142191bbdd88b042900901eb58e337aa3e5c2d5d92cdfc442755ac19b4b762f9aee82387c574","ssdeep":"","tlshash":"0501cef400ec12fea35a03a8290ee11f554dd056d1d8254ef5788a7086bc3b94c1863f","size":791,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.433451Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[28]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e7a52234fac12ee7df0912cf171f2de0","sha1":"6d29ee2eea0a5c3f04e18a7b0d1609b9085f16ff","sha256":"b4a375aef7efb26e6bd67efd10d5d9eabbe0972c1f575742958823e99932da8d","sha512":"a49c57d96a40ad3f3f5f548ce6a254707f0882c268c67d5b8f237c23ede2292dea613e62cdca466816799660dc3d9cbc028c39eea458b1fa32ff36927b138550","ssdeep":"","tlshash":"85e023e0d0f422ec23050328110b5617214cc14390c8354fcdbac6b0cdb7d950a0c23f","size":421,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.398807Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[34]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"39e724566d9f0a91f3396ff5be25595b","sha1":"dcf909a3627031272ecbcdf9c244cd5e6ed841c4","sha256":"e83e595ad5f8223a1fa4cec530d911b4c69ca146ce43f48564c7d5a1794b6272","sha512":"0d402833213fe5240be6bad67f1b5b95ad9c4075fb181740b56496800f605d58d743e6ddcb388a8e179fb29fe3b49276d0a899674ef80054e983a1842caf3b25","ssdeep":"","tlshash":"9dd02b86b47122dc527316e8022685771168e52dd0646948ca4dd670947fb276e0d53d","size":265,"data":"","first_seen":"2023-04-15T15:46:19Z","last_seen":"2026-05-05T14:46:42.475693Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[29]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4116cf333a72b1646045ae7bc7986cec","sha1":"b4291b06cd9914173429bb8d3271c28fb993f417","sha256":"337d64c3166b2489ac14216dee71e6638cbb422ff274f72498c234ce49b4fa94","sha512":"4018a4fc945fec7edb666463c808b9e4f5935c38e465fda91e7f862819256f821ac4974f5607a8db1dc234dde4b4319198c3cd1f05b8aa727ea95352e6e02477","ssdeep":"","tlshash":"c971d07010e910bba34f11f4496eba1b5b42d001c6d9d54e757e0ba08ffefa6c81e2e6","size":3546,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.497293Z","times_seen":756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[5]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"69c2e174b203cc6927bb67ed966503e1","sha1":"45fd454a7731e181fc07f0103ef5316a963f048b","sha256":"081101b241d33b439d67a5985cb6f1e38d99d903f52d31524ec251f9ce1236c4","sha512":"08673c7d2ed93262e420d8753f99b59a80f53805b680df7909bbf996f2d8863490adeb9e0023cad7a3e4818912b4b5ab95c8af78da97f1702d4e01fdba931aa6","ssdeep":"","tlshash":"ce11abcbb36a132490277fde2fe27fb93338b22a5071265cb64da442d754c51a301a6d","size":1030,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.477189Z","times_seen":1552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[9]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"020ef45dc126b5d78e9885ba8c0e8895","sha1":"c21ea8c7b9827e7232e62d89db29d414771d2855","sha256":"d7875335946dec91d6e6cb18b204a2c5f9306319416ca311c04970483b4b0356","sha512":"1aef81eb7c08c116ddd69605d3c4369e99ffb615923a24c1d739eed40ebc1883e205ee260da5b9fa907d5a73c3b4f99e708fa6a27a1bd69370427929737d47dd","ssdeep":"","tlshash":"d5d02bc6b4a121e842a35968913a761f312dd70c5051ac4dcf4cc5a059f7aeafd094f8","size":279,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.412666Z","times_seen":1466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[12]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"51b5641aaec7bf63ee43321963b69a9a","sha1":"79490c0ae8ddadaf9b0d584f5ddbc07e99bf5955","sha256":"a17a70a6eb7bcae18f14a1da75e740c82c36ae1af9c183d4a1f93067f00c6c4d","sha512":"97916b0c3fe41eb65fcea0d2a5deb8d4c392a277fc271e331766b38f594810edc1bcaa31aa9e9b21177dbf617b29a03998cff149db8b392cc445a3c275f96d9b","ssdeep":"","tlshash":"a9e02d0a743433cc0223abb849a5871b2238820ca2311a4cab8ff000403fa050d091ba","size":305,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.458881Z","times_seen":1190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@clappr/player@0.8/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7ee162594292d8a7cd8c88a8e2318d","sha1":"55413890dd74e180a2b2a04994c40876bd8b1769","sha256":"f0243f6e2395c077f4ae46ae4b1d969090d64106387b45cb39a28bbdb07e6752","sha512":"8b0f5034c5c9260a98cdafab67457668a45c115679929c18eb3674470ce5b53c6238b9830627a7ffc125dfb8c115c548e734db0133174d889d11a8c643954933","ssdeep":"6144:e4tMAsCnJlgzoi3QaUS3+03cJibkLLQNjnMWWzr2EfpuXyEZloW/GHH0eOwuqyyv:rsPJxuijUQNjMWUrpuXRloWWuudhz","tlshash":"e4d44ca932d5603246d2a5d9503a4202a339b90b3045c1ecfa3efdd75fa5d4ab07bf78","size":630856,"data":"","first_seen":"2024-08-14T20:52:02Z","last_seen":"2026-04-30T01:42:53.549327Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab4c484a1e29032f31a6b9ce45dc0ff7","sha1":"5929f60225601cb9cb48474071b3ee13d5ceea8b","sha256":"456997b623da4aff53fbe54f75a449dce571fb8f1e39bf62efd74683398f7f6c","sha512":"8384f85c59e0fe1d133f0a4fc2fa7e1936042ef58f844242ab843eb3f1edf9dfcdcb00f463b1043a3ff54ae34b5da41c67f03130339f66404e27712f14392524","ssdeep":"","tlshash":"a12114b63138347842e6126e7cfb764db07b56512e1e9084915ce4602868fb9a6238cf","size":1371,"data":"","first_seen":"2025-03-16T14:23:57.438408Z","last_seen":"2026-04-18T19:57:08.647665Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[4]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"264468ecc510b214524caac850a5a816","sha1":"1d42802acd1534a8d965212fd4bc512639ac1ecc","sha256":"05692a592943c76f6d76fca12928fcf366c094f33e16fba77d4f431c6a2718f4","sha512":"a8b792fff6f729f7766936fa118a4fba745e54f65e8b45019171b13ce0f80f901d8e404a2ec6a21de68fd22eb38f68042f2aaaad2ced7c15866b622b266e57e5","ssdeep":"192:InGDA78KFQgwcV8lY53miqGvHFFriTtJJovlBl4MBnQlBChj1s49G0i4:roq41QuqWHi4","tlshash":"756217022b79033458f72b4c3bf69610221afa91d47285ee7f8dbf5657c84d63063ea9","size":14946,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.470918Z","times_seen":1195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"000d284c909d28bb0f5cc8759708b356","sha1":"97d2e7f6c6260a52cfca0ce064aa666e281e1c13","sha256":"5dd3c17942d531188e88d8d6f9acd45f42e1cd8baf414aa68d8accadbf272737","sha512":"1c177305b153d9cebac7c636a18ac2aa4389b331b901fc297fb41bc961a47a66cbb290094486b381dc7fcc2666cac67896fe944df8b51247669877233816840d","ssdeep":"384:+v0a/K7iYFRdYttKPV0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMV:+K72tyGQ80GaIoQPzahq/AMOY","tlshash":"d4c2e4a7321eb91a8719626150ef2e85a2cc48c4718f1f7ce724e53634d763485ebef8","size":27992,"data":"","first_seen":"2025-09-27T17:09:31.206474Z","last_seen":"2025-11-18T21:44:33.491839Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"104.21.19.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2615446a660a1f11d4fac7e015a7164b","sha1":"dac11891c2cd90337f1afa55bf7437d1b797fb7b","sha256":"d47788b41714a632c2191f80666ae3498110c83e313925b9edc41e7fed9f669a","sha512":"665f22e77e4b72c7a5a39868c59d3df00d977eb60cc589c9583c33e675e383e7fa0aa1760f9608b77839a1bcaa954d32780d89889d5f2661c621d8c55bf273c7","ssdeep":"1536:TX3SvSfBAcXOXtDRQ4+LNfU4IICZx6v8HN0SDhfkwdB7U4jMlDHQjN7Tc5tXQMS:TXC6J0xR1+LmdIOxP0SNzjN7Tc5tgZ","tlshash":"f2b32bd672667469126e90244597ec0db5be8c80048d8db8f0e5fc722d74b22e3f7be9","size":110318,"data":"","first_seen":"2025-11-18T15:53:50.195448Z","last_seen":"2025-11-19T08:05:49.134376Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[7]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f83c1d07ad4ff904142ff0e2603d4de","sha1":"03b211f488d5076c0fae8527823689f5fa4c2baa","sha256":"4f818be92004a6e0fa9fdcf60480269aab421e9ba0afcc5e85f6d07324ccb7a1","sha512":"82f47260713cb0e798562afa044b4866a04530e0ecdfd7b2c2999b79107ea89523b1270d731f6f9ed1306e5fe4e974d3b6c65237476ea0815b3e0923fba1845d","ssdeep":"","tlshash":"03110373a91a22585c137ff816e403652e3ea11485260faeb7c9705b439f2c4ad3a9ed","size":1043,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.45551Z","times_seen":1369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[10]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec1e8f92a63a7e752b9845f024a56cb0","sha1":"8e2dca2a34443bb4e7d012a34af4e6cce4adde0a","sha256":"6e38d26061a6bcc18d40b6267f87e12a54b14de0648c3e1418c8fca822b4dcd7","sha512":"ad6eca532128b40aaa3a1679d1424b9430453709e75b37b40a7cf0ebe3624c9c41a27ab7ec0252bd3b5ff4fbbcfe1e0381ea87533d97b3b366c0efd2f65e348e","ssdeep":"","tlshash":"031103533861147855274fe80eed115b517cb90436735a7cf9287487835184d132f67d","size":1105,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.467526Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[25]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6d58f0e6396b2706f39269a2af796bcc","sha1":"45f38bf9eaa9873bc8de0ebe4400a838c3c2e220","sha256":"0000c42c5dd1b2cc72f59daf434a8474db045cfedc2163773e36c4a2b5a3bdf4","sha512":"25e4824ee44e9c6d7947216cfbd6f053c05e65aa84bf38e8a01828867d9fa0fd17a5aa9a7ce056f4cfd900760680191d74604eb921530cb096c54a1efda06e82","ssdeep":"","tlshash":"bb11abcbb36a132490277fde2fe27fb93338b22a5071265cb64da442d754c51a301a6d","size":1031,"data":"","first_seen":"2023-04-16T08:37:18Z","last_seen":"2026-05-05T14:46:42.440747Z","times_seen":858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[35]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0219bf5610a61230c758d65e3600b599","sha1":"7b5e4f7000f15b7ce25fbd2e8e8d918abc0cbb94","sha256":"ac2d4773305d5a6aae87f52ee592169153cb02d2501029291b5d0bed0934b877","sha512":"b0549f1ac02a51e57eb83c445c4489baeddc502154b9ffb805ed4145463cd382ab7e96cd8368b5ce093cf1a994047b38a1b4939160dd830a2958358186a0e07b","ssdeep":"","tlshash":"3e416b0ba664237578b74f8c7beae201222df306c5215ebf7ecd7a1683c9644a413b5d","size":2322,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.492685Z","times_seen":748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[36]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"60d01b8464eea26e59e2b778b9d8f6f8","sha1":"dbb521a844502244d0411de45c87615fafa34158","sha256":"e7f672f5dd286f2af6700408701172f78645af298a69e41b6e851984941cf1f1","sha512":"f6321d6827e60fc5512a244417b6d862662fe2edb19fb6e5e65c8991e127804496ecabc14a7656ecd2eb84a042825d569185bb04446dc28d05f2979ef3522ef2","ssdeep":"","tlshash":"2ae023e0d0f462ec23050228210f5627214cc142d0c8354fc9bac6b0cdb7d95090c23f","size":421,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.492125Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[33]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8e0b2688b7912b68b8bdd9c42e6553aa","sha1":"b7bf52d1ae02f4a21fad6548253e10c827df8905","sha256":"229e569d17d5e282b8409fc802028f8f06d540ecf6f4e833b04703b4033aeda9","sha512":"8a58894630576109b3596f299ced86d4097b7c4e2d9016defa1b8e3b1629f288cf49a666eedef528dfae44d211c9dfd86bd05b48345808ac56a58decd176a4e0","ssdeep":"","tlshash":"2511abcbb36a132490277fde7fe27fb93338b22a5071265cb64da442d754c51a301a6d","size":1031,"data":"","first_seen":"2023-04-18T20:25:43Z","last_seen":"2026-05-05T14:46:42.478705Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[22]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"830ece2ecf3b3d785d541fc83922164d","sha1":"2614c5f5e24ebc6c0945f3f43750eab6463290f2","sha256":"9ff569fb4d30e581ad914b32f200bf2d52c0105e913fd7e4491ddaf211dcc5f3","sha512":"d438feb48ad66fa8b977572e0f955085f43e3a15757b364b462fbf4f371fc6a1d5e66bbb6a752e84711b0906a7fa66b1ea9f2e391770893a0adb6704e83e5bb4","ssdeep":"192:InGDA78KFQgwcV8lY53miqGvHFFriTtJJovlBl4MBnQlBChj1s49G0is:roq41QuqWHis","tlshash":"2f6217022b79033458f72b4c3bf69610221afa91d47285ee7f8dbf5657c84d63063ea9","size":14947,"data":"","first_seen":"2023-05-27T21:55:35Z","last_seen":"2026-05-05T14:46:42.411089Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/microtemplates/source[1]","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e22017c2e9c001bce109bfe2fe68c380","sha1":"e5a75a55df382896aa8aff43bc37e72566edf401","sha256":"0852bba61d02a2d08e06f623e1934f3c17d6d1e84b53d9ffcdc4524402733a54","sha512":"780a63ffb9744024762fe253c98a995020e6623c993dee13e93c8a27e1dcd58942402e18bc9fdbe5e3e2b33ea8c7705c5d0129c4626e6b6b6abb918b41f50145","ssdeep":"","tlshash":"8c01cef400ec12fea35a03a8290ee11f554dd056d1d8294ef5788a7086bc3b94c1863f","size":790,"data":"","first_seen":"2023-04-13T17:29:45Z","last_seen":"2026-05-05T14:46:42.47032Z","times_seen":2250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nRange: bytes=0-0\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 1\r\ncontent-range: bytes 0-0/1170112\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 183\r\nx-run-time: 56\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"video/mp2t","magic":"very short file (no magic)","md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-05T05:52:27.629662Z","times_seen":61622,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T21:44:03.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.streamtpmedia.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 21:23:08 GMT","end":"Mon, 19 Jan 2026 21:23:07 GMT"},"fingerprint":{"sha1":"03:72:F5:4C:81:D1:67:D2:9D:5B:12:35:A2:C1:A7:48:F7:01:68:F7","sha256":"9B:4B:6C:61:41:83:17:23:27:CA:A1:36:CB:57:BA:A1:A1:81:73:6F:4F:47:EC:CB:B6:63:84:51:80:69:2C:40"}}},"request":{"raw":"GET /global1.php?stream=espn HTTP/1.1\r\nHost: streamtpmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=tlde4jl80eglhpbf7dq6sm44ek; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35642,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30352)","md5":"11357251670e81e7d87df8ba9f08f4af","sha1":"c787e44fe6593c72da9c02d8d1a14b56be560953","sha256":"794122f556e86be8a8b9e3d6441c88f7caef83d9e7d4f65b7005d3b8d8291d11","sha512":"45bc557a97f86baaa4be10ac6e3274520cf8052ab489551cbe06397ba6eed5c67c9c3a5c05d0191b667c664aa0e6a193b434a5e833584723f8be082f55a6be9c","ssdeep":"768:n8CD8JTM/KK72tyGQ80GaIoQPzahq/AMOU:7WM/D72IGI7MOU","tlshash":"05f218a735ad781a5b1931a110ef2985f58c48c1304f1bb8e714fa3134d7ab689a7ff4","first_seen":"2025-11-18T21:44:33.427805Z","last_seen":"2025-11-18T21:44:33.427805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":141,"dns":55,"connect":41,"send":0,"wait":83,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@clappr/player@0.8/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@clappr/player@0.8/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 177874\r\ncf-ray: 9a0aa5a2d9fa23eb-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.8.0\r\nx-jsd-version-type: version\r\netag: W/\"9a048-VUE4kN104YCisqBJlMQIdr2LF2k\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230061-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 41969\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Cp0eDc9jxjmWeWV110G5TqG3r2sX7hQTJVppAdyx8L3I7XP6z8951yWTUgp2rGIErMS7%2BtWPNLRqcvt%2FfFz8eLlNRz1%2BjP3NstklDMqE3bSVWlsIzC3JYwkpJD%2BsIPTiNtY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630856,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f7ee162594292d8a7cd8c88a8e2318d","sha1":"55413890dd74e180a2b2a04994c40876bd8b1769","sha256":"f0243f6e2395c077f4ae46ae4b1d969090d64106387b45cb39a28bbdb07e6752","sha512":"8b0f5034c5c9260a98cdafab67457668a45c115679929c18eb3674470ce5b53c6238b9830627a7ffc125dfb8c115c548e734db0133174d889d11a8c643954933","ssdeep":"6144:e4tMAsCnJlgzoi3QaUS3+03cJibkLLQNjnMWWzr2EfpuXyEZloW/GHH0eOwuqyyv:rsPJxuijUQNjMWUrpuXRloWWuudhz","tlshash":"e4d44ca932d5603246d2a5d9503a4202a339b90b3045c1ecfa3efdd75fa5d4ab07bf78","first_seen":"2024-08-14T20:52:02Z","last_seen":"2026-04-30T01:42:53.549327Z","times_seen":625,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":33,"dns":22,"connect":1,"send":0,"wait":11,"receive":10,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madurird.com/tag.min.js","fqdn":"madurird.com","domain":"madurird.com","tld":"com"},"ip":{"addr":"104.21.19.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"madurird.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 03:46:48 GMT","end":"Mon, 09 Feb 2026 04:46:34 GMT"},"fingerprint":{"sha1":"DD:3C:7B:08:A9:53:FD:91:2C:90:E5:34:5B:98:A9:EA:BB:90:6C:4A","sha256":"0F:CA:6D:8A:6F:D4:2D:54:FD:B9:3D:44:7F:7A:AA:DA:90:24:56:84:3C:2D:3F:DF:9C:61:4C:CE:D5:5F:68:EA"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: madurird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 880a0688c26af828b14fa0f080846a73\r\ncache-control: public, max-age=14400, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *, *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 620\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 18 Nov 2025 21:33:43 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBvoLWstZXMQGEOJ68pq4M6HL0%2FhJW59qokOidU64K9%2BgudipQgvIshIluvFYLJcF64lay80LlQafUQNHX4vCwqvc1R4NHTFBzU%3D\"}]}\r\ncf-ray: 9a0aa5a319a2b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2615446a660a1f11d4fac7e015a7164b","sha1":"dac11891c2cd90337f1afa55bf7437d1b797fb7b","sha256":"d47788b41714a632c2191f80666ae3498110c83e313925b9edc41e7fed9f669a","sha512":"665f22e77e4b72c7a5a39868c59d3df00d977eb60cc589c9583c33e675e383e7fa0aa1760f9608b77839a1bcaa954d32780d89889d5f2661c621d8c55bf273c7","ssdeep":"1536:TX3SvSfBAcXOXtDRQ4+LNfU4IICZx6v8HN0SDhfkwdB7U4jMlDHQjN7Tc5tXQMS:TXC6J0xR1+LmdIOxP0SNzjN7Tc5tgZ","tlshash":"f2b32bd672667469126e90244597ec0db5be8c80048d8db8f0e5fc722d74b22e3f7be9","first_seen":"2025-11-18T15:53:50.195448Z","last_seen":"2025-11-19T08:05:49.134376Z","times_seen":9,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":57,"dns":20,"connect":1,"send":0,"wait":6,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"madurird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.48951301992354856\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:29:00 GMT","end":"Sat, 10 Jan 2026 13:27:25 GMT"},"fingerprint":{"sha1":"2D:85:E1:CC:5C:69:E9:00:F0:2A:D7:4D:EC:27:FD:E4:0E:99:3F:1F","sha256":"FF:B8:FC:07:03:69:0B:74:AC:FD:81:98:21:29:56:B1:D8:28:5E:79:5B:0B:DF:E3:6B:94:DB:9F:B8:AF:5B:7F"}}},"request":{"raw":"POST /ut/hb.php?cb=0.48951301992354856\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 818\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQaenuKrwkToO10KVLhvdpuWzuNNgP76e2JULSuQqM9vTQuB4cpRK7OKq25GXEJbt7hiY0NqsOtfFtR5%2FqzwAp7iLZdo2Hrp7IJd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a0aa5a5e88d7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":36,"dns":20,"connect":1,"send":0,"wait":146,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/favicon.ico","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:05.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.streamtpmedia.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 21:23:08 GMT","end":"Mon, 19 Jan 2026 21:23:07 GMT"},"fingerprint":{"sha1":"03:72:F5:4C:81:D1:67:D2:9D:5B:12:35:A2:C1:A7:48:F7:01:68:F7","sha256":"9B:4B:6C:61:41:83:17:23:27:CA:A1:36:CB:57:BA:A1:A1:81:73:6F:4F:47:EC:CB:B6:63:84:51:80:69:2C:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: streamtpmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/global1.php?stream=espn\r\nCookie: PHPSESSID=tlde4jl80eglhpbf7dq6sm44ek\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 21:44:05 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"68f80754-e3b0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58288,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"b6305f53b4d3432d561eb748f4af25fd","sha1":"e01e5117f6fa0d6b1a82ae3c45839d8097d119b5","sha256":"dc676cc52046a252ee86c463e49bce5b517c932ab100f21cb62e231cb3d7ed7a","sha512":"18f3435e92ce082fc5d52e8c8b3e3186c86bd499afdf405b842d1b0aef771a4d14359bf39d142b591469cc4c4a2016c2f4c6fd646662318cee2ad0f966470b83","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdomx:cmDD6oeFUycwpk06hWp1b99c7Vz","tlshash":"0443021803de40a2cd9978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1ea","first_seen":"2024-05-06T13:26:20Z","last_seen":"2026-05-04T16:28:44.394931Z","times_seen":1770,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/mono.m3u8?ip=91.90.42.154\u0026token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/mono.m3u8?ip=91.90.42.154\u0026token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-length: 245\r\ncontent-type: application/vnd.apple.mpegurl\r\ndate: Tue, 18 Nov 2025 21:44:05 GMT\r\npragma: no-cache\r\nserver: Streamer 24.03\r\nx-cached: yes\r\nx-route-time: 214\r\nx-run-time: 96\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":823,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"53588f0d86764e64d02bc5a957909f5b","sha1":"7aee5e8e9dd76acca0b64bfb88ccc317cf99c6e6","sha256":"74d482bf236ef88439c1e3b7bf966327a15f0587aeed4560637ee5a14d38bc85","sha512":"25c8d9becd1539318b1b448336e7d2ff8badf010e28cfea5c80e857a048cc5ab59e0df379e5c47e4804f96fe5140116ee0e61e3f07070701330997708be45678","ssdeep":"","tlshash":"ad01ccff128d624df09f1de05c2c3171b121296e1f62ae8c56d3c8d16e73a6bf999184","first_seen":"2025-11-18T21:44:33.441788Z","last_seen":"2025-11-18T21:44:33.441788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 1170112\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 185\r\nx-run-time: 56\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170112,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"8fd761f40a2ac8c3cd95f3dbcc053cbd","sha1":"b93acf08cbad25717d1fd3e0d085a830c0da02a1","sha256":"f1162a2ba056b58a00d8eee87b2a07a8f7cc6b877a19609744167b792acec4cf","sha512":"397ea45a4fef785d0e2f61896ce442331ef2301dd33e402c6a362a1a7a39ea79282cd82dd940e9d1a095472a95c9ca44f748ba1a54c0ad77f25d09518676dd86","ssdeep":"24576:GVLlzwVL9HpfCqPEjAfRtPjYOsXEsGJgK1mS/cSxOim9TsvoCz:GVLlzGFpCjAZ+hMgh7WxWPA","tlshash":"132523a09b822c6de45753db190703b5a3010c467b9eae2fa9173fdd64bb4d18c7aec4","first_seen":"2025-11-18T21:44:33.442928Z","last_seen":"2025-11-18T21:44:33.442928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.ip-api.com/json?fields=2181826\u0026key=XOpiansRgYxGTho","fqdn":"pro.ip-api.com","domain":"ip-api.com","tld":"com"},"ip":{"addr":"51.77.64.70","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ip-api.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Jan 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB","sha256":"FF:25:55:B8:41:38:7D:AE:EB:04:48:46:DD:23:F2:43:68:93:68:3C:73:9B:04:7E:77:12:B4:EE:77:ED:C6:52"}}},"request":{"raw":"GET /json?fields=2181826\u0026key=XOpiansRgYxGTho HTTP/1.1\r\nHost: pro.ip-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://streamtpmedia.com/\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: application/json; charset=utf-8\r\nDate: Tue, 18 Nov 2025 21:44:06 GMT\r\nContent-Length: 159\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"49f5ee7bd5dfb9147df54e7556d4e3e8","sha1":"171f4464af072efc72d41de1e06593f094f2cb2d","sha256":"f1a38c99b0f5946320b7f3398019026608852f91c693b5ce13b7cff7136193c1","sha512":"477b62d70185a16d178f681e95b925cf5f735f58a425115034b9a0e40b9cad2cf8384bc7209409fc1d963afb44151dc2bf8e170cc34803fb3f6d80631308fe18","ssdeep":"","tlshash":"33c08ce9085c234574136688920a5d3a37f99040c34688e48da87c6caac2aafb4169af","first_seen":"2025-04-15T19:14:35.767199Z","last_seen":"2025-11-26T17:58:36.912576Z","times_seen":98,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":119,"dns":19,"connect":33,"send":0,"wait":33,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"99a1.crackstreamslivehd.com/global/espn/index.m3u8?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244\u0026ip=91.90.42.154","fqdn":"99a1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.242","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"99a1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:32:33 GMT","end":"Wed, 31 Dec 2025 18:32:32 GMT"},"fingerprint":{"sha1":"EA:56:71:5C:29:58:84:8E:35:E9:44:9B:8E:AC:BD:D3:2F:4C:2F:EE","sha256":"11:17:96:B0:7A:1A:EB:0C:22:8C:FF:A3:E3:82:B4:C3:93:88:02:D6:10:55:82:8D:10:12:C6:E6:B1:D2:51:91"}}},"request":{"raw":"GET /global/espn/index.m3u8?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244\u0026ip=91.90.42.154 HTTP/1.1\r\nHost: 99a1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 154\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\nlocation: https://doc1.crackstreamslivehd.com:443/espn/index.m3u8?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244\u0026ip=91.90.42.154\r\nserver: Streamer 24.03\r\nx-route-time: 146\r\nx-run-time: 89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":269,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":215,"dns":32,"connect":57,"send":0,"wait":60,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=9191366\u0026cbur=0.5464629681091131\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=\u0026cbpage=https%3A%2F%2Fstreamtpmedia.com%2Fglobal1.php%3Fstream%3Despn\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=rpyztjadsbonh.store\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763502244637\u0026srs=16f2bd528038c24ddc7ab43e99bd3fe2\u0026atv=71.2-a\u0026abtg=1\u0026adbv=3-cdn-js","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/suurl5.php?r=9191366\u0026cbur=0.5464629681091131\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=\u0026cbpage=https%3A%2F%2Fstreamtpmedia.com%2Fglobal1.php%3Fstream%3Despn\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=rpyztjadsbonh.store\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763502244637\u0026srs=16f2bd528038c24ddc7ab43e99bd3fe2\u0026atv=71.2-a\u0026abtg=1\u0026adbv=3-cdn-js HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://streamtpmedia.com/\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85SYuVtENEGabaAZGgHcQdXgLq7DaIGnK4PFAH9tx%2BsA6pLE16WOwosGivQFrdjhfpFBfvQdttG8%2BcOjWrvphqzqLB0BWYymhLTOA3w1aic6JOs%3D\"}]}\r\ncf-ray: 9a0aa5a51897dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cab868e3b976b4e511c838310cac2f5c","sha1":"e5842afbcb5c0911e1756600424263f3e43b2c30","sha256":"be2e8ed88fde8329e5e6e7476aa2b8e6841f8f44985d4b88c9fcc08720ce2773","sha512":"3f8d7d42bd72dfae8b5d3c97e56910bcd61695cf0cc6acab05bf22a4082e5c7b148e35eb922ca8e48989a58e253b065e5dbef1e28525ae40f4ea85f26d982905","ssdeep":"","tlshash":"ec11a8906ac8d81096ff14c4593dfc348f4138166c25e59491d5bcb2d6094c9557d453","first_seen":"2025-11-18T21:44:33.444476Z","last_seen":"2025-11-18T21:44:33.444476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":37,"dns":20,"connect":1,"send":0,"wait":250,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"streamtpmedia.com/global1.php?stream=espn","fqdn":"streamtpmedia.com","domain":"streamtpmedia.com","tld":"com"},"ip":{"addr":"176.97.122.176","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.streamtpmedia.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 21:23:08 GMT","end":"Mon, 19 Jan 2026 21:23:07 GMT"},"fingerprint":{"sha1":"03:72:F5:4C:81:D1:67:D2:9D:5B:12:35:A2:C1:A7:48:F7:01:68:F7","sha256":"9B:4B:6C:61:41:83:17:23:27:CA:A1:36:CB:57:BA:A1:A1:81:73:6F:4F:47:EC:CB:B6:63:84:51:80:69:2C:40"}}},"request":{"raw":"HEAD /global1.php?stream=espn HTTP/1.1\r\nHost: streamtpmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/global1.php?stream=espn\r\nCookie: PHPSESSID=tlde4jl80eglhpbf7dq6sm44ek\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"streamtpmedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://streamtpmedia.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=080285edb5204c89f906a481549223ec; expires=Wed, 18 Nov 2026 21:44:04 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9a0aa5a65d38b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"791365c5c3a3b22ad5b9256469405152","sha1":"9fcf258408136c2e5b055e93282f82f218a36ceb","sha256":"656445b2f91e945695b110007ee5ed4868c4989b3aca8bd2bbcc90791fe13bd6","sha512":"189f0a031893c439efb576c6c7abca162aead05c24c55f59c5942ab7dd9e6a7e4d892afae3443cdadce74575ed388444720da44a1cf5c15e2cb19192c90da665","ssdeep":"","tlshash":"8da022c8022c22c280000008088383000008808238088a00e0c0c8002ec3a0c0002280","first_seen":"2025-11-18T21:44:33.445468Z","last_seen":"2025-11-18T21:44:33.445468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":36,"dns":21,"connect":1,"send":0,"wait":54,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 785088\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 202\r\nx-run-time: 46\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":785088,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"c5810b4d33167a2a19f1e6830591b2da","sha1":"6dc06fc3d7d1ade2d3961ca932151cd01d5cd0af","sha256":"d586e15e62f5c538343d1a70a80597326ecf3b6f7efd1dd7377c44480357dc35","sha512":"889c1098fa09e82ac556e5cb83d3545741b0fab5807f98a350c4dc114d82e8daaaef78d6fd111599bf35f613414f5f0b9aaa6bfd070d838be2cba2ed349996f7","ssdeep":"12288:zGZ50ny1Fu9YPL5cppFeHb0TZpAqndV5dmSymj2N+sRQY4afKkLieXJS/6vBrJhk:OSnYwYz5Ae7ofAMdVjmSp2Np5dKkZS4M","tlshash":"19f423d12f4309efa2139196080b03f5cb090c896e5c6f26694abb5e58f74e98d7ede4","first_seen":"2025-11-18T21:44:33.446411Z","last_seen":"2025-11-18T21:44:33.446411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swarmcloud-hls@latest/dist/p2p-engine.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/swarmcloud-hls@latest/dist/p2p-engine.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 62879\r\ncf-ray: 9a0aa5a2ea0223eb-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.16.4\r\nx-jsd-version-type: version\r\netag: W/\"318f3-aJK2E8tkr4MiiyqAukx9c5N3VEo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220188-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 18029\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VJlNZHlsWQKtbV8MNfK4VLa089dboPRFpRFcdK0oKZIGAOas3QEB5%2FEjigV6GLlD3rE8Uye8VUoQF8Ns%2BymaquANAhLu9mo0WlT3VjZqbZykZ5C0N04tA18MLdlJGzu1xyc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4fc876e1d87bc4ee708d60a929bc0fbf","sha1":"6892b613cb64af83228b2a80ba4c7d739377544a","sha256":"909c3f8fa30df10e71d5b55ce3da224c8d2c1345459879d6bdbb8896b3e62678","sha512":"57e221970dcbcb46ef3fc6ced722402af480caf03ad00491b7fa26043d91e9a2306adc04d7d0e2082238b162143a7b6cccbe942da68be8320f42aeeac4a5f61c","ssdeep":"3072:8+4CM+d0U8RlqKBaH7ROSE6E3kVgvp/u3Zca9AGX2Qf:kC1KM1LMUVQ/u3ZcatX2Qf","tlshash":"89142bd77396902383d5a9d6a4740303a335a94e3808c06cb67cbddfad2ae89b175f74","first_seen":"2025-11-09T15:29:56.008297Z","last_seen":"2025-12-05T22:28:51.818567Z","times_seen":42,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":30,"dns":18,"connect":3,"send":0,"wait":15,"receive":12,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alwaysdomain01.online/ads/lib7.js","fqdn":"alwaysdomain01.online","domain":"alwaysdomain01.online","tld":"online"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alwaysdomain01.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 08:28:56 GMT","end":"Sun, 15 Feb 2026 09:26:32 GMT"},"fingerprint":{"sha1":"BA:B9:8A:E6:62:EA:CC:77:10:01:25:7F:BF:34:E6:37:92:5C:27:68","sha256":"A9:81:7C:B9:9F:91:44:AC:9C:2B:06:F6:13:2C:D7:20:AC:57:0D:1E:F5:7D:3C:72:D6:3E:D7:66:37:C8:B1:81"}}},"request":{"raw":"GET /ads/lib7.js HTTP/1.1\r\nHost: alwaysdomain01.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 21:43:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691ce89f-394c6\"\r\nexpires: Wed, 19 Nov 2025 09:44:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRqn4OFp1PPNRdGzMe%2FSgqrzg8Iy5sZaVeVhTfQDl%2BrBTLp9EBFw%2FDW%2BPuhY8O44vKGgwkP%2FRWkHo3ztrjBxHHueguBpqyIswqEp6umlc8JEt20%3D\"}]}\r\ncf-ray: 9a0aa5a30a4b569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234694,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ab7e8659cef5b564d705c43a14aa5a2","sha1":"c1061d4a14a7333586ff2637bf2b4bbde27d0d44","sha256":"3781c1e972bcdeebc746dcb034f931c2c614a0beb59e4f9fe4e9c8b26243f42c","sha512":"2ee1b7f7f80764479620d11c3c5965043af454d2cf3f944fbfc1017412e7776d23810850d83b2c9e25561fcdb97fe8e42e801b3a14d725abf744998c6d45fb4a","ssdeep":"6144:6O3Dj+1jn3BFVBC4jscT1bji/FUKOxsRUyhZnHVkj:6O3DjQj3BFVBC4dlji/FUKOSRhnmj","tlshash":"b7345c153352773a7695809aac3a5330b335019a760ac02cb1ddcde376afdc97636bb8","first_seen":"2025-11-18T21:44:33.447961Z","last_seen":"2025-11-18T21:44:33.447961Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":57,"dns":21,"connect":1,"send":0,"wait":96,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/7943094/?oo=1\u0026js_build=iclick-v1.1622.0\u0026userId=080285edb5204c89f906a481549223ec\u0026dmn=madurird.com\u0026tt=2\u0026ix=0","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:05.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 05:07:35 GMT","end":"Sun, 18 Jan 2026 05:07:34 GMT"},"fingerprint":{"sha1":"7E:66:A3:16:7D:47:BC:6E:0F:31:AE:FA:65:A3:03:19:9B:0B:42:93","sha256":"49:F7:10:A4:75:B7:7C:34:65:80:9D:77:29:42:C6:F5:F9:80:CA:7B:2B:A7:5B:D6:12:3A:D7:1C:39:16:7F:65"}}},"request":{"raw":"POST /5/7943094/?oo=1\u0026js_build=iclick-v1.1622.0\u0026userId=080285edb5204c89f906a481549223ec\u0026dmn=madurird.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2629\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 21:44:05 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://streamtpmedia.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":99,"dns":14,"connect":26,"send":0,"wait":29,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:05.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 1170112\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:05 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 221\r\nx-run-time: 74\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170112,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"8fd761f40a2ac8c3cd95f3dbcc053cbd","sha1":"b93acf08cbad25717d1fd3e0d085a830c0da02a1","sha256":"f1162a2ba056b58a00d8eee87b2a07a8f7cc6b877a19609744167b792acec4cf","sha512":"397ea45a4fef785d0e2f61896ce442331ef2301dd33e402c6a362a1a7a39ea79282cd82dd940e9d1a095472a95c9ca44f748ba1a54c0ad77f25d09518676dd86","ssdeep":"24576:GVLlzwVL9HpfCqPEjAfRtPjYOsXEsGJgK1mS/cSxOim9TsvoCz:GVLlzGFpCjAZ+hMgh7WxWPA","tlshash":"132523a09b822c6de45753db190703b5a3010c467b9eae2fa9173fdd64bb4d18c7aec4","first_seen":"2025-11-18T21:44:33.442928Z","last_seen":"2025-11-18T21:44:33.442928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 785088\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 208\r\nx-run-time: 50\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":785088,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"c5810b4d33167a2a19f1e6830591b2da","sha1":"6dc06fc3d7d1ade2d3961ca932151cd01d5cd0af","sha256":"d586e15e62f5c538343d1a70a80597326ecf3b6f7efd1dd7377c44480357dc35","sha512":"889c1098fa09e82ac556e5cb83d3545741b0fab5807f98a350c4dc114d82e8daaaef78d6fd111599bf35f613414f5f0b9aaa6bfd070d838be2cba2ed349996f7","ssdeep":"12288:zGZ50ny1Fu9YPL5cppFeHb0TZpAqndV5dmSymj2N+sRQY4afKkLieXJS/6vBrJhk:OSnYwYz5Ae7ofAMdVjmSp2Np5dKkZS4M","tlshash":"19f423d12f4309efa2139196080b03f5cb090c896e5c6f26694abb5e58f74e98d7ede4","first_seen":"2025-11-18T21:44:33.446411Z","last_seen":"2025-11-18T21:44:33.446411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 1170112\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 248\r\nx-run-time: 53\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170112,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"8fd761f40a2ac8c3cd95f3dbcc053cbd","sha1":"b93acf08cbad25717d1fd3e0d085a830c0da02a1","sha256":"f1162a2ba056b58a00d8eee87b2a07a8f7cc6b877a19609744167b792acec4cf","sha512":"397ea45a4fef785d0e2f61896ce442331ef2301dd33e402c6a362a1a7a39ea79282cd82dd940e9d1a095472a95c9ca44f748ba1a54c0ad77f25d09518676dd86","ssdeep":"24576:GVLlzwVL9HpfCqPEjAfRtPjYOsXEsGJgK1mS/cSxOim9TsvoCz:GVLlzGFpCjAZ+hMgh7WxWPA","tlshash":"132523a09b822c6de45753db190703b5a3010c467b9eae2fa9173fdd64bb4d18c7aec4","first_seen":"2025-11-18T21:44:33.442928Z","last_seen":"2025-11-18T21:44:33.442928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/tracks-v1a1/2025/11/18/21/44/06-05806.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://streamtpmedia.com/\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 785088\r\ncontent-type: video/MP2T\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-just-generated: false\r\nx-memory: yes\r\nx-route-time: 199\r\nx-run-time: 48\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":785088,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"c5810b4d33167a2a19f1e6830591b2da","sha1":"6dc06fc3d7d1ade2d3961ca932151cd01d5cd0af","sha256":"d586e15e62f5c538343d1a70a80597326ecf3b6f7efd1dd7377c44480357dc35","sha512":"889c1098fa09e82ac556e5cb83d3545741b0fab5807f98a350c4dc114d82e8daaaef78d6fd111599bf35f613414f5f0b9aaa6bfd070d838be2cba2ed349996f7","ssdeep":"12288:zGZ50ny1Fu9YPL5cppFeHb0TZpAqndV5dmSymj2N+sRQY4afKkLieXJS/6vBrJhk:OSnYwYz5Ae7ofAMdVjmSp2Np5dKkZS4M","tlshash":"19f423d12f4309efa2139196080b03f5cb090c896e5c6f26694abb5e58f74e98d7ede4","first_seen":"2025-11-18T21:44:33.446411Z","last_seen":"2025-11-18T21:44:33.446411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.meshify.cloud/v1/channel","fqdn":"us.meshify.cloud","domain":"meshify.cloud","tld":"cloud"},"ip":{"addr":"104.21.17.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meshify.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 17:59:10 GMT","end":"Sun, 15 Feb 2026 18:57:49 GMT"},"fingerprint":{"sha1":"34:34:25:29:19:66:B5:89:F2:67:43:20:F5:8C:62:EB:4C:3C:2A:CA","sha256":"F6:8A:A3:18:77:07:0F:2E:59:B8:1A:BC:F2:59:44:01:1F:EE:44:27:7D:79:A2:90:4A:D3:15:85:CC:10:1F:3B"}}},"request":{"raw":"POST /v1/channel HTTP/1.1\r\nHost: us.meshify.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://streamtpmedia.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 410\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSFNQUZtqX6cuxRP6N%2BzWHilYZk6yFdslPMAu3QNbiwgbGb5dwzTgho0hGCM%2FG3LfaWtcnby1UljwVPblqMf%2FjzGzG%2BJVBD2vmUPLezCRpw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a0aa5b31cfd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dc2266f0f1b472109e5053916f48b4a7","sha1":"f7143b94ff75b97773fc6f451d7e497b803d115b","sha256":"7d3fde837e3809ab32eeca697e184a18ccb7e0767c041cc5db9e491cce91247e","sha512":"25e1407c5085977c7675295ecd5691d112347a60afcf4c754e893f849c241ed7506a523e42943eb7f7a60030873c82f51569c7b15c475476554b91dae387096f","ssdeep":"","tlshash":"1db01226364d0c30ae4417d316432d2681cc7433990e0c04c617bf4cc9f24fc835599e","first_seen":"2025-11-18T21:44:33.448711Z","last_seen":"2026-04-13T02:21:48.900057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":121,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swarmcloud-hls@latest/dist/clappr-p2p-plugin.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/swarmcloud-hls@latest/dist/clappr-p2p-plugin.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://streamtpmedia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 21:44:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1256\r\ncf-ray: 9a0aa5a2d9fd23eb-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.15.13\r\nx-jsd-version-type: version\r\netag: W/\"cbc-srYOuvk7KjepqB4L/JRmrHznPEo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220068-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 9280\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K4WO4K%2F%2BNqQ%2FB6pchTwgYM6ha8IaMKz69qUYIdIumM1cIbwrsR59cgtZUV3WxDASs7GAp8NFCWfcOX7Xn%2BIXb5e0tMylXYUEzBwMWs%2FYeHAj30dNiHZMt%2FZaMRNQN6wAo4Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3260,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3260), with no line terminators","md5":"f9acfffb9ca4835e965ec668f00b0096","sha1":"b2b60ebaf93b2a37a9a81e0bfc9466ac7ce73c4a","sha256":"60d7095c2958ace3a1d1038e94616f856feb0d7906c42a6e8e33941481cd6ddd","sha512":"9abeb7320521a93beb16145d15824b6e662e94cb4713d70728f409b026cb041d843452a3a15d495f4efea8e89b43558460eacffa82fa114e84e0a68e87adaec1","ssdeep":"","tlshash":"1d6162897da0b4b253e3a694c13f010af33d857a8198c140a2a9e9f4acf505f96a7f1c","first_seen":"2024-09-14T18:55:50Z","last_seen":"2026-04-21T12:26:47.12014Z","times_seen":184,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":28,"dns":17,"connect":3,"send":0,"wait":16,"receive":4,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/index.m3u8?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244\u0026ip=91.90.42.154","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:04.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"GET /espn/index.m3u8?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244\u0026ip=91.90.42.154 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nReferer: https://streamtpmedia.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-length: 241\r\ncontent-type: application/vnd.apple.mpegurl\r\ndate: Tue, 18 Nov 2025 21:44:05 GMT\r\npragma: no-cache\r\nserver: Streamer 24.03\r\nx-media-info-time: 36\r\nx-prepare-time: 75\r\nx-route-time: 582\r\nx-run-time: 117\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":269,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"3f45405fc47b04dc758fb466e38cd0ae","sha1":"91ad7da3f886743e8e4ced41516231dbae13a258","sha256":"4584642dec26383c0c3683834bdfc8d4302f0e599ac7445d3b3ef606e0d9e962","sha512":"98cb3608e435f3e8932e3d8f8ecb9f2b336b5339ae264a3954802ae0d7d366e931305f7149cf453e11e4ee892762273d1a6f53f4b00cc69b393795ec59ed4d48","ssdeep":"","tlshash":"74d02b94a15fd34ffc846ba45f1422327444b49a9157265aa2d7c4b044d7a00ba2a294","first_seen":"2025-11-18T21:44:33.454635Z","last_seen":"2025-11-18T21:44:33.454635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":222,"dns":20,"connect":64,"send":0,"wait":67,"receive":1,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doc1.crackstreamslivehd.com/espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244","fqdn":"doc1.crackstreamslivehd.com","domain":"crackstreamslivehd.com","tld":"com"},"ip":{"addr":"93.123.109.239","port":443,"asn":401116,"as":"NYBULA","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://streamtpmedia.com/global1.php?stream=espn","date":"2025-11-18T21:44:06.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doc1.crackstreamslivehd.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:08:14 GMT","end":"Wed, 31 Dec 2025 18:08:13 GMT"},"fingerprint":{"sha1":"0A:24:82:8E:E2:2A:D0:A3:30:F8:09:75:98:6F:7B:9A:26:43:4F:37","sha256":"73:C9:17:B5:88:5C:3A:2C:6A:A9:D8:A5:DB:2C:FB:36:FF:17:24:E7:74:BF:05:43:C1:3F:F6:EE:FF:AF:AA:32"}}},"request":{"raw":"OPTIONS /espn/tracks-v1a1/2025/11/18/21/44/00-06006.ts?token=203249762eb61632f45a467abfd28e58de300dc9-5f-1763547244-1763493244 HTTP/1.1\r\nHost: doc1.crackstreamslivehd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: range\r\nReferer: https://streamtpmedia.com/\r\nOrigin: https://streamtpmedia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: x-vsaas-session, x-no-redirect, origin, authorization, accept, range, content-type, x-add-effective, session, x-originator, x-sid\r\naccess-control-allow-methods: GET, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server, range, X-Run-Time, X-Sid, Content-Length, Location\r\ncontent-length: 3\r\ndate: Tue, 18 Nov 2025 21:44:06 GMT\r\nserver: Streamer 24.03\r\nx-route-time: 165\r\nx-run-time: 3\r\nx-sid: 691ce8a5-3ac3-4b13-aaff-def287343b3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"text/vnd.trolltech.linguist","magic":"ASCII text","md5":"d36f8f9425c4a8000ad9c4a97185aca5","sha1":"09fb654c17cc05b11ef53bd35aa701f6d550e8e1","sha256":"a12b7cb43c9d9134b5bb1b35e9096b66775d9e92e7611d1cc92b02edd6782a87","sha512":"1ac2864063a612b045c2120602b2a88994ae9500021788f0755928f4a4c0a206a035c806facb3470e7186a117105ed8a63d18d9143d0cb11ea0969f374e82655","ssdeep":"","tlshash":"c7200000000000000000000003000000300000000000000000000000c0000000000000","first_seen":"2023-04-14T15:11:50Z","last_seen":"2026-05-05T00:48:44.605144Z","times_seen":1577,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}