{"report_id":"342d09d8-4096-41be-b2ac-d1dfa6c10da8","version":6,"status":"done","tags":[],"date":"2026-03-14T16:02:09Z","url":{"schema":"https","addr":"bestvid15.cfd/invite","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bestvid15.cfd/login","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"title":"Masuk - MAIVEST Elite","dom":{"size":7264,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3d998589308e8cefa32938b655755fd2","sha1":"cbaf0fe4a59b35e572d4044ed6775ca1352d816e","sha256":"179c282b0039be278815af9b257d9e2a36f3c78d451120164c2772e7220820cb","sha512":"57e3fcfbc0e70165a1b829040b1d495df08ee4b236ce62837e7256245fb89c3a551acb7d62775f20fd81cc074314744b265a741d5264e210cc3d274e04f0f467","ssdeep":"96:ZgoFRL3ikdhA/iFBoPEC+hL6/Fabh02KyJ5qN44qH+yPZNcscZ:xFhFFSPEC+h0Fih05yJHZPZNcscZ","tlshash":"18e1735764b30c227c17a9a92bfb96063a58d013c507ce657fdc5788cf82aa88662b5c","dom_hash":"domhash239854b22098023f8c161b69f8a42d70","first_seen":"2026-03-14T16:02:14.582641Z","last_seen":"2026-03-14T16:02:14.582641Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bestvid15.cfd/invite","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T16:02:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bestvid15.cfd","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":38063,"sent_data":4019,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":4,"received_data":154360,"sent_data":2192,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":218078,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":8394,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bestvid15.cfd/login","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"268f5896345264245d73f385818f5a63","sha1":"d7280a502d039c0c6b9d401478beeef39a000fa5","sha256":"1b5c100790e5b4174c7387c2bb8266b90ffb8220473789f7683fb1dbd34f3c68","sha512":"4d50f620f28576502e35b6172d9cf8d81f8817ebcccbb06d65eab89f16219cabd800e7d181f4e78ac90fe6bfb484ba933a2b7414391e47960833ea371b475361","ssdeep":"","tlshash":"c2f07d73702a5d318567a296632f4797341020471902c6723f6cc70d1fa3c615526dfa","size":612,"data":"","first_seen":"2026-03-14T16:02:14.591074Z","last_seen":"2026-03-14T16:05:30.93419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bestvid15.cfd/img/logou.jpg","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.bestvid15.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 00:34:32 GMT","end":"Tue, 09 Jun 2026 00:34:31 GMT"},"fingerprint":{"sha1":"AA:88:27:47:DD:1A:A7:FD:13:06:E6:FD:02:6B:45:0B:65:B4:54:F6","sha256":"01:EB:D5:FE:11:2B:7B:E4:5B:D6:CA:A2:D7:93:FB:DC:6F:48:D7:AC:53:9F:EE:AC:B1:7C:FE:C3:87:39:64:CA"}}},"request":{"raw":"GET /img/logou.jpg HTTP/1.1\r\nHost: bestvid15.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestvid15.cfd/login\r\nCookie: XSRF-TOKEN=eyJpdiI6InVWanpIQlNYbFJNb2swK3pYSFhpOWc9PSIsInZhbHVlIjoiSzlKSkJzUjlsZjZEbXlqQ3NvUXczSjh0bzZDVDc1WlV4Q1NhMlQyTE5EOUk2dWFQWG50R3FwZUNzd0xXNGs0REJ1VTZqbUxzamJlbUtFeTdlM1h1MU15UXVMRjFXNjFVUC9Ob2tCc2xMWnU3MU5JYTZzMGZaeUVCR3l2eDFWNHMiLCJtYWMiOiJmN2I0MWFlMGEwZmZiM2Q3MTMzZGViMTAwZmMzZGIwMTEyMDk2ZWQwYTlhYjhiMDkxYWUwMzEwYjNlOWI4ZGQyIiwidGFnIjoiIn0%3D; nimbus_session=eyJpdiI6ImhmMVc5b29TWEtuQzRzNTlLYS9nd2c9PSIsInZhbHVlIjoiUmxzdXcvMzNSalEzTjRGNjRuZXJzRkU3cytuejJoMTlXbkpkWS9EYjY0OFpoL3UvdTIzQklFQlNwOVpLQmlYYUR0ZG1aVjJEUUJvNldWOXlQc00wNzBwVUV3Q2tGdkJhUzlmR0o5ZlNTQ281dmhENVdJZFFPL2VydGd3NzhHZzUiLCJtYWMiOiIzNmY3ZDg3YTZlYTVmNzVhYzM2OTlmOGE3YjkyZmQ0NTZjN2MyMGIyZGU3NDk1NzViMmJmMzk3MDgxNDJmYjRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 16:01:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Mar 2026 09:34:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18750\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18750,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 192 x 137, 8-bit/color RGBA, non-interlaced","md5":"6d1e505cdb4d2cf0c3cd210a259b88d9","sha1":"a3b58595c0ed15b91cc3ab5ade1698624082bd93","sha256":"f1e4882b45294cf994d526abf488022f134ced46be28f9b5a90c9bf19a8059aa","sha512":"da84500461fb2a345d09f36c2f7322147c2519a2014350f76ab85449ab5f8b257c560e36c674ae6d604fe2aea61bc607177e51515c3169373a8ebe5590667e7d","ssdeep":"384:089eQ48o25F2mHVuOA18deBpZ2e6WiP/8DpdUbAEfRMn54j:Fn/5F2wd0j2e6vQUbAEfRM54j","tlshash":"f382c00d0fe2a6cf006d612d0e9ed2fdc587c06a55a5015a387a3b2e8c7bd69a52f648","first_seen":"2026-03-14T16:02:14.584448Z","last_seen":"2026-03-14T16:05:30.93043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestvid15.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 38649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T15:54:36.814151Z","times_seen":548463,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":102,"dns":3,"connect":21,"send":0,"wait":14,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestvid15.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 38649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T15:54:36.814151Z","times_seen":548463,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":100,"dns":0,"connect":24,"send":0,"wait":15,"receive":3,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestvid15.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 38649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T15:54:36.814151Z","times_seen":548463,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":82,"dns":1,"connect":8,"send":0,"wait":10,"receive":9,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestvid15.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 38649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T15:54:36.814151Z","times_seen":548463,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestvid15.cfd/login","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T16:01:48.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.bestvid15.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 00:34:32 GMT","end":"Tue, 09 Jun 2026 00:34:31 GMT"},"fingerprint":{"sha1":"AA:88:27:47:DD:1A:A7:FD:13:06:E6:FD:02:6B:45:0B:65:B4:54:F6","sha256":"01:EB:D5:FE:11:2B:7B:E4:5B:D6:CA:A2:D7:93:FB:DC:6F:48:D7:AC:53:9F:EE:AC:B1:7C:FE:C3:87:39:64:CA"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: bestvid15.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJTbCswSmhITDdwNHk1QjlkdlpaSWc9PSIsInZhbHVlIjoibTlKK1NaY0dzVHl2SGE3MnovNHZ4SE9BVTNHRTFJZWQvR0xWemZUOWhacldpY281TnZMeHNHeW9kKzk4c09rVGd6TGNXYm55OVVQTEVNZUJvdnR1Sms3Ym00WGNrWm0xZGNMS1FFckgzVmQ2bDE0cUNaaWpVd2JwMU1iemNqQ00iLCJtYWMiOiI3ZjIwMTAxOGZmNjAxMzU2NWI3ZDI5NDM1ZGM5NWY3NTllNjU1NjY3YTA5OGYzZmM3NDYzZjIzMmE5MmFiYWI3IiwidGFnIjoiIn0%3D; nimbus_session=eyJpdiI6Iml3VWxiSHE2UmU1aU55bHh3ZCtRbUE9PSIsInZhbHVlIjoiSmZCek8zVzZZeWtPdkNXaG8rc3NIU3NXM25KeTNvcWhORWtZamtZc0h5UUdOZ0tmSjVkcHFtZm5PUnhxeTRYSzgwWDZyTVd6Y2ZTOXVCVXhmbTBNK2p5bTZvcW52WTg5eGxVbUZkazZrdFZQN2JUSTlKK3hnc0pvNW11aHhybjYiLCJtYWMiOiI2MDBmYmVkNmExYzI5ZTQ4NmY5OTkyMzBkYWMxYjIwODg5ZmZhZTgxYjMyNWQ2ZDZlYzNiZDE5ZTEwYzJkMTZmIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-methods: *, GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: *, Accept,Content-Type,Authorizations\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InVWanpIQlNYbFJNb2swK3pYSFhpOWc9PSIsInZhbHVlIjoiSzlKSkJzUjlsZjZEbXlqQ3NvUXczSjh0bzZDVDc1WlV4Q1NhMlQyTE5EOUk2dWFQWG50R3FwZUNzd0xXNGs0REJ1VTZqbUxzamJlbUtFeTdlM1h1MU15UXVMRjFXNjFVUC9Ob2tCc2xMWnU3MU5JYTZzMGZaeUVCR3l2eDFWNHMiLCJtYWMiOiJmN2I0MWFlMGEwZmZiM2Q3MTMzZGViMTAwZmMzZGIwMTEyMDk2ZWQwYTlhYjhiMDkxYWUwMzEwYjNlOWI4ZGQyIiwidGFnIjoiIn0%3D; expires=Sat, 14-Mar-2026 18:01:48 GMT; Max-Age=7199; path=/; samesite=lax; secure\nnimbus_session=eyJpdiI6ImhmMVc5b29TWEtuQzRzNTlLYS9nd2c9PSIsInZhbHVlIjoiUmxzdXcvMzNSalEzTjRGNjRuZXJzRkU3cytuejJoMTlXbkpkWS9EYjY0OFpoL3UvdTIzQklFQlNwOVpLQmlYYUR0ZG1aVjJEUUJvNldWOXlQc00wNzBwVUV3Q2tGdkJhUzlmR0o5ZlNTQ281dmhENVdJZFFPL2VydGd3NzhHZzUiLCJtYWMiOiIzNmY3ZDg3YTZlYTVmNzVhYzM2OTlmOGE3YjkyZmQ0NTZjN2MyMGIyZGU3NDk1NzViMmJmMzk3MDgxNDJmYjRjIiwidGFnIjoiIn0%3D; expires=Sat, 14-Mar-2026 18:01:48 GMT; Max-Age=7199; path=/; httponly; samesite=lax; secure\r\ncontent-length: 2062\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9ee890bc7b8673bf6579426477b57148","sha1":"79982b380836670e16398a1853191681dd1d3e24","sha256":"ffbf7d7842e3f2ddded54ea5249a764211ea99b74ee6baba8fb68ea0a564a23f","sha512":"b5394f0e22ab5c64ee4678db5855ebae0ab066646be0ff1415d933f6b3f2005dca8145e13cd5d077793b4da9b66c14a927b4b6e312bc3037e920a8d268763e8b","ssdeep":"96:ngvFRL3ikdhA/iFBoPEC+hL6/Fabh02KyJ5qN4jxH+yPZNcscjz:gFhFFSPEC+h0Fih05yJHJPZNcscjz","tlshash":"eae1745764b30c227817a9b92bfb97063658d013c507ce657fdc5788cf83ae88662b5c","first_seen":"2026-03-14T16:02:14.586953Z","last_seen":"2026-03-14T16:02:14.586953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestvid15.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-ray: 9dc47fcb89248b20-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1281547\r\nexpires: Thu, 04 Mar 2027 16:01:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UgTe5Zww77Cg3Z%2Fv7iTn%2B3G33HGBuxSxUghYMRCtYXoyIxiuBpXQ8dbH4%2F5HeeZSNW7pIJMRnAgCMJnKO6N0F0N%2FYrthjrb3EYmGWoBYJObQgUkke66AZS1FJJpixNgp1ctD%2FTea\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-08-11T14:39:52.021986Z","times_seen":13391,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":13,"dns":1,"connect":8,"send":0,"wait":19,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestvid15.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 126828\r\ncf-ray: 9dc47fcd5e65b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-1ef6c\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 136460\r\nexpires: Thu, 04 Mar 2027 16:01:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=78PPjqWJ3t5kNsB6HlWY94eKaW4Uxe5mp2CkcDuQvBIc8015YuA2ymdo4ychw4tDOZRhBWZQP1SQlMlFcBbPrIwEVT%2BCtBA3o2iSjDZzEDjxHzhDubLI2%2F21Usbs5yk2uW8p4j9X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-11T11:42:35.269039Z","times_seen":10928,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":38,"dns":1,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestvid15.cfd/favicon.ico","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.bestvid15.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 00:34:32 GMT","end":"Tue, 09 Jun 2026 00:34:31 GMT"},"fingerprint":{"sha1":"AA:88:27:47:DD:1A:A7:FD:13:06:E6:FD:02:6B:45:0B:65:B4:54:F6","sha256":"01:EB:D5:FE:11:2B:7B:E4:5B:D6:CA:A2:D7:93:FB:DC:6F:48:D7:AC:53:9F:EE:AC:B1:7C:FE:C3:87:39:64:CA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bestvid15.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestvid15.cfd/login\r\nCookie: XSRF-TOKEN=eyJpdiI6InVWanpIQlNYbFJNb2swK3pYSFhpOWc9PSIsInZhbHVlIjoiSzlKSkJzUjlsZjZEbXlqQ3NvUXczSjh0bzZDVDc1WlV4Q1NhMlQyTE5EOUk2dWFQWG50R3FwZUNzd0xXNGs0REJ1VTZqbUxzamJlbUtFeTdlM1h1MU15UXVMRjFXNjFVUC9Ob2tCc2xMWnU3MU5JYTZzMGZaeUVCR3l2eDFWNHMiLCJtYWMiOiJmN2I0MWFlMGEwZmZiM2Q3MTMzZGViMTAwZmMzZGIwMTEyMDk2ZWQwYTlhYjhiMDkxYWUwMzEwYjNlOWI4ZGQyIiwidGFnIjoiIn0%3D; nimbus_session=eyJpdiI6ImhmMVc5b29TWEtuQzRzNTlLYS9nd2c9PSIsInZhbHVlIjoiUmxzdXcvMzNSalEzTjRGNjRuZXJzRkU3cytuejJoMTlXbkpkWS9EYjY0OFpoL3UvdTIzQklFQlNwOVpLQmlYYUR0ZG1aVjJEUUJvNldWOXlQc00wNzBwVUV3Q2tGdkJhUzlmR0o5ZlNTQ281dmhENVdJZFFPL2VydGd3NzhHZzUiLCJtYWMiOiIzNmY3ZDg3YTZlYTVmNzVhYzM2OTlmOGE3YjkyZmQ0NTZjN2MyMGIyZGU3NDk1NzViMmJmMzk3MDgxNDJmYjRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T15:52:50.20692Z","times_seen":148892,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestvid15.cfd/invite","fqdn":"bestvid15.cfd","domain":"bestvid15.cfd","tld":"cfd"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T16:01:48.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.bestvid15.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 00:34:32 GMT","end":"Tue, 09 Jun 2026 00:34:31 GMT"},"fingerprint":{"sha1":"AA:88:27:47:DD:1A:A7:FD:13:06:E6:FD:02:6B:45:0B:65:B4:54:F6","sha256":"01:EB:D5:FE:11:2B:7B:E4:5B:D6:CA:A2:D7:93:FB:DC:6F:48:D7:AC:53:9F:EE:AC:B1:7C:FE:C3:87:39:64:CA"}}},"request":{"raw":"GET /invite HTTP/1.1\r\nHost: bestvid15.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://bestvid15.cfd/login\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-methods: *, GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: *, Accept,Content-Type,Authorizations\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjJTbCswSmhITDdwNHk1QjlkdlpaSWc9PSIsInZhbHVlIjoibTlKK1NaY0dzVHl2SGE3MnovNHZ4SE9BVTNHRTFJZWQvR0xWemZUOWhacldpY281TnZMeHNHeW9kKzk4c09rVGd6TGNXYm55OVVQTEVNZUJvdnR1Sms3Ym00WGNrWm0xZGNMS1FFckgzVmQ2bDE0cUNaaWpVd2JwMU1iemNqQ00iLCJtYWMiOiI3ZjIwMTAxOGZmNjAxMzU2NWI3ZDI5NDM1ZGM5NWY3NTllNjU1NjY3YTA5OGYzZmM3NDYzZjIzMmE5MmFiYWI3IiwidGFnIjoiIn0%3D; expires=Sat, 14-Mar-2026 18:01:48 GMT; Max-Age=7200; path=/; samesite=lax; secure\nnimbus_session=eyJpdiI6Iml3VWxiSHE2UmU1aU55bHh3ZCtRbUE9PSIsInZhbHVlIjoiSmZCek8zVzZZeWtPdkNXaG8rc3NIU3NXM25KeTNvcWhORWtZamtZc0h5UUdOZ0tmSjVkcHFtZm5PUnhxeTRYSzgwWDZyTVd6Y2ZTOXVCVXhmbTBNK2p5bTZvcW52WTg5eGxVbUZkazZrdFZQN2JUSTlKK3hnc0pvNW11aHhybjYiLCJtYWMiOiI2MDBmYmVkNmExYzI5ZTQ4NmY5OTkyMzBkYWMxYjIwODg5ZmZhZTgxYjMyNWQ2ZDZlYzNiZDE5ZTEwYzJkMTZmIiwidGFnIjoiIn0%3D; expires=Sat, 14-Mar-2026 18:01:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 169\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 16:01:48 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T15:57:26.494444Z","times_seen":17839182,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":198,"dns":97,"connect":55,"send":0,"wait":387,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestvid15.cfd/login","date":"2026-03-14T16:01:49.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestvid15.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 16:01:49 GMT\r\ndate: Sat, 14 Mar 2026 16:01:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba9b02c400b0c4bbe374b3c0867dcbdc","sha1":"53e074fc58e025847cab9e65083ed3d1ab6c94ec","sha256":"fea970f7997b0a11b97e45ceab613c64d5604ec0a004dc902359e6c12e4a55c4","sha512":"428b51528d83cc1ca55b7833dae267dbbc5d820b78452ecbe7ae62288dae0bb03365acdf4701b065316a236ff5aa0ee9f6261547073362e1addfb3a2d1053c87","ssdeep":"192:YRo7TbOmupRS719Ocu6RB7W+OjuTRU7XPOKu8:4Q4ajdfMh","tlshash":"72f1ac91105ba500e6472cc923cf7e26dd4e61627494c579bffe2ca8adeac224325b3d","first_seen":"2025-09-05T22:49:21.328616Z","last_seen":"2026-08-11T13:19:28.42173Z","times_seen":420,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":155,"dns":1,"connect":22,"send":0,"wait":31,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
