{"report_id":"3af7bad1-0d49-4e20-9781-74b8be5f1471","version":6,"status":"done","tags":[],"date":"2026-02-20T19:36:58Z","url":{"schema":"http","addr":"phantomworld242.top","fqdn":"phantomworld242.top","domain":"phantomworld242.top","tld":"top"},"ip":{"addr":"103.224.182.250","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"title":"Mamma.com Search - Trust Mamma to provide the best search results","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phantomworld242.top","fqdn":"phantomworld242.top","domain":"phantomworld242.top","tld":"top"},"ip":{"addr":"103.224.182.250","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T19:36:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T19:36:38Z","timestamp":1771616198,"ip_dst":{"addr":"103.224.182.250","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":45120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-02-20T19:36:38.034301+0000\",\"flow_id\":38391500853470,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":45120,\"dest_ip\":\"103.224.182.250\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"phantomworld242.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":528,\"start\":\"2026-02-20T19:36:37.676062+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T19:36:39Z","timestamp":1771616199,"ip_dst":{"addr":"Client IP","port":44704,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"52.45.196.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-02-20T19:36:39.378234+0000\",\"flow_id\":1722585616702269,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"52.45.196.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":44704,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.sd559908.js.rsocdomains.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"52:B6:98:6D:01:6C:36:05:DE:97:BF:E1:AA:7D:D0:67\",\"fingerprint\":\"ea:71:3d:ec:fb:1b:e3:ce:69:f9:00:4f:34:6e:df:3a:95:11:14:5a\",\"sni\":\"obs.sd559908.js.rsocdomains.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-14T00:00:00\",\"notafter\":\"2026-04-14T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1224,\"bytes_toclient\":3935,\"start\":\"2026-02-20T19:36:39.088893+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.no","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-02-15T22:26:20.2781Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":750,"comment":"","tags":null,"fingerprints":null},{"fqdn":"phantomworld242.top","ip":{"addr":"103.224.182.250","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":3053,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"expired.mamma.com","ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"1996-07-31","domain_rank":0,"first_seen":"2025-12-17T02:37:38.466476Z","last_seen":"2026-02-20T05:06:34.565994Z","alert_count":0,"request_count":22,"received_data":897547,"sent_data":25779,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-02-18T22:50:52.302268Z","alert_count":0,"request_count":2,"received_data":348399,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":2,"received_data":790758,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"obs.sd559908.js.rsocdomains.com","ip":{"addr":"52.45.196.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.715008Z","last_seen":"2026-02-14T21:07:10.447836Z","alert_count":9,"request_count":3,"received_data":4625,"sent_data":3633,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.contentsquare.net","ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-02-16","domain_rank":18964,"first_seen":"2017-11-15T12:53:17Z","last_seen":"2026-02-18T23:53:15.916918Z","alert_count":0,"request_count":2,"received_data":462472,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"dynadot.rsocdomains.com","ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2026-01-30T09:17:15.422663Z","last_seen":"2026-02-20T09:52:01.408431Z","alert_count":6,"request_count":3,"received_data":44641,"sent_data":1820,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-15T22:47:07.321489Z","alert_count":0,"request_count":3,"received_data":841276,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":3,"received_data":149358,"sent_data":1676,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2026-02-16T00:54:57.055729Z","alert_count":0,"request_count":2,"received_data":34547,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-02-15T22:34:15.115252Z","alert_count":0,"request_count":2,"received_data":1682,"sent_data":2188,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ob.sd559908.js.rsocdomains.com","ip":{"addr":"52.84.50.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-29T06:04:21.718439Z","last_seen":"2026-02-14T20:06:01.296485Z","alert_count":3,"request_count":1,"received_data":121278,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"172.217.19.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2026-02-15T23:12:54.138755Z","alert_count":0,"request_count":1,"received_data":11359,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.143.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-15T22:26:20.540622Z","alert_count":0,"request_count":1,"received_data":131975,"sent_data":426,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","size":19990,"data":"","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65aad1a3c3754e1c3bf1cb9150410530","sha1":"96be3aeef3ca3d5917ed22217b1333b177e5f160","sha256":"b2c2b5dd2ff9bbce54a11bd27e4ee24c6bec22cb18f901183448c15f0684273d","sha512":"7c956f38224af206e6b8f6174359d42d2116bd1b3322e07ab4bb93ec7c4bca1f8c04196f42ee6784fa5010ba8c433d7470320369ee0860a42c235ea467f33028","ssdeep":"1536:5wxeb5bdwL+pdFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+JzfVP9ftrdruZ5QZ3fao8r0","tlshash":"0dc3d6ddb2e27025439324a5157f410ae27b2e543c4b8290d17ee9d4ac7ce8e817bfac","size":120752,"data":"","first_seen":"2026-02-18T08:35:39.487036Z","last_seen":"2026-02-22T19:11:06.298194Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","size":1155,"data":"","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-05-23T23:19:54.899519Z","times_seen":3366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f27d78b1f47d5e8a5dc7c9779ff2ad","sha1":"161da2ee6e76f34fa4a959efd540ad171f9c9c1d","sha256":"6753e44c8aa3b471a2811e81da9ba6f8fe3fa4c347adf6330230c2dc9717468e","sha512":"d52b4093d8d4f2bf73d85cc84552d204057518e28b90aeae6341107621e1220059baedb32964c6d701ee7cea8a8d938bbf83348ebbbb92f66bea53d0c605dcfe","ssdeep":"","tlshash":"33c02bccf08351ea30722030cb7308070831937b08c4c0413009027d1f72c07024bb0c","size":137,"data":"","first_seen":"2024-08-21T07:24:10.333614Z","last_seen":"2026-05-23T23:19:54.910286Z","times_seen":3381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf1a0b319850914ec37db3662478aac8","sha1":"a01a3bd40e2b408259650ede8440f7250edfd635","sha256":"66e579dfdcb2d80a606bec2549a0b9bd17ea9dc3e44bcb4fa7902381ee723eb2","sha512":"7f9f089679a0ecb8a1e0323c879baedef1f5fb33ca073f58d4ce49eeaa9a623978b68c300f3b992fad938db4d4b18f7638d2a005aaeab64ba9c2137079089b74","ssdeep":"","tlshash":"56e0c0eb74164872629f85b633b5a1257253290d78091c22fdfd8c246e58687481719c","size":358,"data":"","first_seen":"2025-09-28T06:57:47.637874Z","last_seen":"2026-05-23T23:19:54.918573Z","times_seen":3370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0bb74b0b25b907f0209e865e6b5d8d4","sha1":"bdb2dcf8c447197fa53c0b075141126eeb1a89b6","sha256":"27d6832829b065f873b4f2268ed68e65bbf91b4c77b9fd015f4ec1f7f6990fce","sha512":"00b9d36b0bc4d8623f07907b1e409cc83cdf689195a19ce3999f67bae1b3dfac2118a1123649a73cd5e7502650e9ba44ab23877e66cbac26173edf18b24daf2a","ssdeep":"","tlshash":"63113a2fb4e1207741ab29f5b39b864d3b69890754c685323aacc70d6fa755008f3afc","size":1013,"data":"","first_seen":"2025-07-02T03:33:37.463951Z","last_seen":"2026-05-23T23:19:54.923029Z","times_seen":3358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25e6119e62d1ba8afd52ec0f623a82bd","sha1":"5a880ff68e376984e4bcd6a646026c67438ecbac","sha256":"dec2ecd2607f2e892cd7041307752b509b1ea8db61ec38cc3a5bb9664ac48f62","sha512":"31ca39bd744be12fc88109f84a02d66290fb50829c5f41c31f938fabeb121eb2463366edfdf6ba4ef5898cc922b1bcda29658506e4162f4f3044428db4b5ca40","ssdeep":"","tlshash":"5911cbc577a2e441813615abd50f144bf575e47758acb410e6a1c4e4acb0abb443ab06","size":956,"data":"","first_seen":"2025-03-12T19:00:14.122018Z","last_seen":"2026-02-26T17:00:03.80743Z","times_seen":79470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T13:37:37.661541Z","times_seen":379470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-08T12:23:57.882502Z","times_seen":39810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","size":518995,"data":"","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-05-30T12:27:59.060315Z","times_seen":3539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-06-08T13:37:37.660809Z","times_seen":406226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-06-08T10:41:23.320975Z","times_seen":17368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa36bf288aecab0b2565f7b0a7b57a38","sha1":"47f9e54dcf6c8cd0522700135a9ac5640795e8e9","sha256":"e57438b29355a524e9f5d3180238850ee5d24a5ec18fcc0ef8bcaa9e4a52baec","sha512":"2315b52d9365e034730393f54ca0561fa2df54e5d76da2cc2ffc972b14daa5c30665373c73b177608337d71872c20650476b8d7c3ed87ecb36f8424c2336d2e8","ssdeep":"6144:4TfKxs9QuWk+YZ18uJhYXgHqb04jRyw/wgb6lsBPz:4TfN9FvP3YX4Tm/bPz","tlshash":"38a42bd973a6b0b647e9c1ead0360102b33974a97409003cf1adecfb35a5d4662f6b79","size":458600,"data":"","first_seen":"2026-02-19T13:36:11.697173Z","last_seen":"2026-02-20T21:57:00.297324Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dea2c5c16653f45bc701a6c89572569","sha1":"6821341e7ae89a45fdfab1a1a8e561a009f15bc0","sha256":"99bb498e48e1c1d7ae7ca15f17339f6654819937d4244d6564e101f16e9ac03e","sha512":"d8638efa4ff36cc240f40c753845a6d6781ecc69d4dd74abdcf01cd59a52ec2f11a69bd48b7e7ede80883970f05dea84f63ab2e138ffe268b03a7777304520d5","ssdeep":"6144:g4D83xaAJljxXU18kKDeDKJN5hSppv/UWOH3:xw3xaixk18CD/Ud","tlshash":"fc64f7cdb3d6742693a3a478403f118bb27b7992e84cc895f186d8d42d70a9a4277f7c","size":326961,"data":"","first_seen":"2026-02-20T09:52:07.713619Z","last_seen":"2026-02-20T21:51:52.550426Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62i1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0794f5b73ebd142291103fa714dce336","sha1":"1abb51445f8804807682dd93cce01ee50a5bc476","sha256":"4e2e27dbaa0fcb94c2feab101d07cbdbe0865486dcbd9d8fd73ce28b8d5253b4","sha512":"5baa756315b64d094a0e7b4ffbaa17263a86adce62dfbbdc1248131a7b3f2c249d648b652c7116cd1089d49d31dd44461f7397b4ca0ca61c4456fbb401257a96","ssdeep":"6144:gv4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UcEnQ/JYw:Hw5YxacxkJ78ZN/UG","tlshash":"9ea419ce73d674269396e078503f018ba57b25a2f45cc89af189cce42d74a9a4237f7c","size":462563,"data":"","first_seen":"2026-02-20T08:01:36.694294Z","last_seen":"2026-02-20T21:51:52.529814Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0b7be265f78e9f038811b7ed8943ec4","sha1":"ebcc172eb206504505f070ac0ff33f165c1e9af9","sha256":"b39e530ee1513394ca8179fc070ff617458e7ff44ebdde1a98c3ebf5ec904007","sha512":"ef52f0ec6eca4e773afb7636d77de6b3df94483423632bff6fa3e77a6d12478217fff9549ee8d1c65347aacb33b84bffba4f3b3d5d8ab3f263fa4d305cf9b0eb","ssdeep":"","tlshash":"2e01760a35f2d121599be03a473f3d1924beb20b190ad8513c1d4bcccfa069aa5226f5","size":797,"data":"","first_seen":"2026-02-20T19:37:07.246616Z","last_seen":"2026-02-20T19:37:07.246616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T13:37:37.662246Z","times_seen":379431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-06-08T13:37:37.660047Z","times_seen":379476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-06-08T12:44:00.39224Z","times_seen":23064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.143.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21f594c251abf66f2f7f145980ceacf4","sha1":"5c8c5997dffce14272236dcfb2ddf7c0bfef563b","sha256":"05f7d43b6f2493bc376dbc1dd1eb11d8a79ab04a4cf9306deaaa3eee59374c91","sha512":"50734f201b4c8922d9b60569cd8f8cdc28b06a0e2678f2eb9aef73ef5b1a0d51c8a8361af2bcca4b245b4bf0d0fe8e9b1613028028f2037da400cd25026fb5ca","ssdeep":"1536:31dZrBd5jp9ZlypQL6AreKdC/4bU0J5Eg2WJAcGuzarKZZtAXSS697af9j0FkZf+:lZLb3s/4BJ1BagACSblSRd","tlshash":"f4d32acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","size":131259,"data":"","first_seen":"2026-02-19T20:18:30.866484Z","last_seen":"2026-02-26T20:12:17.664603Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-06-07T08:16:34.757425Z","times_seen":27513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"phantomworld242.top/","fqdn":"phantomworld242.top","domain":"phantomworld242.top","tld":"top"},"ip":{"addr":"103.224.182.250","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T19:36:37.677Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomworld242.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Fri, 20 Feb 2026 19:36:37 GMT\r\nserver: Apache\r\nset-cookie: __tad=1771616197.1231707; expires=Mon, 18 Feb 2036 19:36:37 GMT; Max-Age=315360000\r\nlocation: https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2731,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":167,"dns":1,"connect":168,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T19:36:38Z","timestamp":1771616198,"ip_dst":{"addr":"103.224.182.250","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.24","port":45120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-02-20T19:36:38.034301+0000\",\"flow_id\":38391500853470,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":45120,\"dest_ip\":\"103.224.182.250\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"phantomworld242.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":528,\"start\":\"2026-02-20T19:36:37.676062+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-7eb53\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nage: 5573162\r\nx-served-by: cache-lga21936-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1208, 1233\r\nx-timer: S1771616201.698002,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 122789\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":518995,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"8b90421cbb9666fd2558c5b57b2994a4","sha1":"3cca9d56f9bb1f973dd3ec9212de21c296cd5e21","sha256":"bb42fc680e84bf76d8d87238cb4080cabf47f05456817e2167df8aec2da7cdd7","sha512":"731467ffb3be2564aabc138678e0da0bebfdc2bed1165944c1de92040b9be59b813c4cc1b586574f1e3a28d9e5cef11f1b8d82cdbc1fb1c6c161961c82b5ca34","ssdeep":"12288:/aemHFgymcpIyHCcmMY/W/EEMPlQRgkrVhDdRtn:WIyHCcmMY/W/EEMPt0hDdRtn","tlshash":"ebb4b7c9f39c265a867a32594c2e42cdb23d8075e600587fbc5d59dc29a883c43bbf79","first_seen":"2024-09-19T22:28:43.042948Z","last_seen":"2026-05-30T12:27:59.060315Z","times_seen":3539,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":41,"dns":1,"connect":14,"send":0,"wait":33,"receive":14,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/321-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/321-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"9f64-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 40804\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a1e62a109f4b95b599b96da0d04e0b","sha1":"7d5230d9e41a82dab1e5cd32f2c6894619d9c9bb","sha256":"74a8bb8966d37e73bdc9ece150de372b27f48130fcded4a309a7ccc33d5d4b41","sha512":"74620c60aa1e2becee3cf5b7b288daed4f69a8d8448da7756e11ec7b4e017db5d9f0f0a51c49b267cde974cf5af87e9fe95486195c61aa98d03de4fa42336ed0","ssdeep":"768:yIIUiReHQ4ooUsxPobEF2/liXZjQim9qC4+T2w+tE+MQrFPNVY/:dqc1hPobEAEkJy+CnC+XrNw/","tlshash":"8503e170513f6d8ec459843c5d95136250ecfa9abf702eb6a00ab0ca6d6b05f2773b1e","first_seen":"2025-09-28T06:57:47.543146Z","last_seen":"2026-03-04T08:57:10.893455Z","times_seen":3076,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/678-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/678-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"7fd4-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 32724\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11a821d91db99dd8a9f1d32c748b000d","sha1":"3a5370bb5c5e92cd43bbba2075ea2c33c3a20ef2","sha256":"a323e837951b2cecc330804cd34ce9aea859a3fc183a02581f6e1ff6cb9d5233","sha512":"80018ecfb520673cbbd5b7ec3cce7e470e6fac92be18eb22225f370b8c55062310c8d0de06573af0fd00bc46c35ebd1bbb3a16259c80de088a50a5159d94032a","ssdeep":"384:dw+jiZMS52RiBqFQMUu/1Z1/DqwhwC8xTH85QSvDjTfT69ZbCtfCP7lqkTnP9VDy:iZMDk2HF/H5YTc2SfW9ZbaaMST0MK15X","tlshash":"f3e2e176f3a12369fe558b743e8c483042e2ce3a6dd0381db71a42594de844dadaec78","first_seen":"2025-09-28T06:57:47.504222Z","last_seen":"2026-03-04T08:57:10.925009Z","times_seen":2973,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:41.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 01:01:36 GMT\r\nexpires: Sat, 20 Feb 2027 01:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66905\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T12:38:51.437715Z","times_seen":281188,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":93,"dns":0,"connect":20,"send":0,"wait":22,"receive":29,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/webfonts/fa-regular-400.woff2","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:41.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pro.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173220\r\ncf-ray: 9d10744dea591525-OSL\r\nx-amz-id-2: Kh5gud7Xsg+AkTq3RE1Kr/4tkGxXkOMrRlfte4H/xKiRGA66hUwt/vDu4NKAzhAi/AFr+CXb/Qk=\r\nx-amz-request-id: E2CGREY3TFTHGWN4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:14:37 GMT\r\netag: \"3e332211899360ab9380df4d50e1c33a\"\r\ncache-control: max-age=31556926\r\ncf-cache-status: HIT\r\nage: 843013\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173220, version 331.17301","md5":"3e332211899360ab9380df4d50e1c33a","sha1":"a4c6413bb7f7549b4fa37f22829e4d09f9de6817","sha256":"58f76b0b684536fbea8ae9ae7177607e81a261407916e9a86e063b02948e9adc","sha512":"697a1a3c6517f93d280d47ec93871aadb9e0d6576d2966ed2a296f2764d9b2bfd39a4b4854c6fa445965545dda72a4656de96ca3f8497c041749791c0f3c682e","ssdeep":"3072:AsJ+WJ7ekhVohiHZSPzAIc0NmYgt4Qmp60OPzGYDpBXa:B0UekhVoUZSPkIJVQ3PzZTXa","tlshash":"e904121023ee60e0327d969b5374e34e770b4789c656e99dcac7b2e1d8d44af41c2d2e","first_seen":"2023-04-05T13:40:29Z","last_seen":"2026-06-08T01:01:23.054648Z","times_seen":4913,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":43,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:41.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:53:50 GMT\r\nexpires: Sat, 20 Feb 2027 02:53:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60171\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-06-08T11:52:03.295485Z","times_seen":47166,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.14.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.14.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: n52Bf3LWRDaOcX+G2RPVwx8SEDZUCJ0AyfUgjGPvYVNyQUafB/LdFOPd3sfuEtvf+8L1+JbisB/iLAkorEypR6t9a9Lmjg9G\r\nx-amz-request-id: XZ1VFYBQX2EYTN8Q\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 17:12:47 GMT\r\netag: W/\"1dfe138ae594553bc5ddec1f1f1ef389\"\r\ncache-control: max-age=31556926\r\nage: 2646010\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9d107445f9671525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":173842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"1dfe138ae594553bc5ddec1f1f1ef389","sha1":"7cc21d0873893a2ef4f9ad06962d8b32cb62d24d","sha256":"e7de3b4b49089f8cdd8267eda652f35806cb2b70f7c5cec0351f6d129263e52b","sha512":"95aa51536dd8c8075b1ce64b8424884e91d8f1718115295d2d9c4a9b5faccb1a7b5675f9a8a0db6a2c458fb5519cf47872247f01ea2c3616919449f20f5de6b9","ssdeep":"1536:mLv1E8SIklJ/ZHUADlnzZ+mqX5l5dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmh9:61E1Ik3/S2ln9+1vlbqMAXHP","tlshash":"e4046eb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-11T10:03:25Z","last_seen":"2026-06-08T09:14:07.814773Z","times_seen":3861,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":46,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-favicon.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-favicon.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"37d-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 893\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cab9de44eae12465ff29b6a664f9375","sha1":"adbe537227d33660ea063248f10579b0b04cdb24","sha256":"507fe22603f5670f685c8170fc9b69fcd1c7619533dad12260b6245e04420ca1","sha512":"2eae91f47cc74bf070ac483ca7be63772f73137a976c60657d2024a96300b71f18822c075ac5c71576ba7583f8e1ac284b4879430f7b07cb7a0d9481f34eb498","ssdeep":"","tlshash":"f21123964318d87bfdd9460987f075e633e0349ae29414ec6c9b347ae15d8e8e1092dc","first_seen":"2025-07-02T03:33:37.440576Z","last_seen":"2026-05-23T23:19:54.687844Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/search/ads.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.143.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /adsense/search/ads.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\nexpires: Fri, 20 Feb 2026 19:36:42 GMT\r\ncache-control: private, max-age=3600\r\netag: \"2044940082103226529\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131259,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2505)","md5":"21f594c251abf66f2f7f145980ceacf4","sha1":"5c8c5997dffce14272236dcfb2ddf7c0bfef563b","sha256":"05f7d43b6f2493bc376dbc1dd1eb11d8a79ab04a4cf9306deaaa3eee59374c91","sha512":"50734f201b4c8922d9b60569cd8f8cdc28b06a0e2678f2eb9aef73ef5b1a0d51c8a8361af2bcca4b245b4bf0d0fe8e9b1613028028f2037da400cd25026fb5ca","ssdeep":"1536:31dZrBd5jp9ZlypQL6AreKdC/4bU0J5Eg2WJAcGuzarKZZtAXSS697af9j0FkZf+:lZLb3s/4BJ1BagACSblSRd","tlshash":"f4d32acdb6a1742243a3a1f5603f014fb139b96aa40c84a4f199d8e47cb4dad4277fbd","first_seen":"2026-02-19T20:18:30.866484Z","last_seen":"2026-02-26T20:12:17.664603Z","times_seen":177,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":79,"dns":29,"connect":8,"send":0,"wait":19,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/stockX.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/stockX.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"711-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1809\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1809,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"3a74e3bc367eca73b987c062d3cc121c","sha1":"a4dd42327e27f6f5b015173c166ea31330aafdb8","sha256":"2b589c966d50e480e5c1e9966c5305f00b63be2b28b83be271ef4a96483da903","sha512":"095664247fcc501d6f766a749ea030ec324d3943511ed9a214b8e47456b6b952ad40d13337285d0980f811349ffb4c8f1d811138e4a16117b07e230ee8809d6c","ssdeep":"","tlshash":"fb31e65f24443d2cc645fa3ace6033b81a129840bb7913454dcbf43e0b0e1873fe9992","first_seen":"2025-07-02T03:33:37.403661Z","last_seen":"2026-05-23T23:19:54.69941Z","times_seen":3311,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/panda-law-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/panda-law-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Tue, 23 Dec 2025 04:28:18 GMT\r\netag: \"13d8-64696f914e1d1\"\r\naccept-ranges: bytes\r\ncontent-length: 5080\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec064536e0578bd642a1665c97852bd6","sha1":"d64828283d007e79e3efac25fc4f1e2c5edc89c0","sha256":"bdbefb53a9e974dbedbce9b54c6a910e1beb214a6147d92ccedf3dc7fc5f89e0","sha512":"e9e0801687b429067636b0424c97be934030d7ac7ba6c6643253855557e03d81c9799a3f0cb77ea344a4d6c3ab8d29258891f15395f3a47378090afcf89e1d82","ssdeep":"96:ZElbw+iRmYQds+19i+qxfWSAbaglSkncehxae1WL0sUulil8z:0wF3+HqKaXkcez+L0sUuln","tlshash":"46a18e607f5a67ecf04228785066a35387491c370d69691c1e08086b36f84e634a83b5","first_seen":"2026-01-01T02:13:49.3117Z","last_seen":"2026-03-04T08:57:10.905428Z","times_seen":2927,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62i1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-9WGW9SCFVP\u0026cx=c\u0026gtm=4e62i1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\nexpires: Fri, 20 Feb 2026 19:36:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 152724\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462563,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"0794f5b73ebd142291103fa714dce336","sha1":"1abb51445f8804807682dd93cce01ee50a5bc476","sha256":"4e2e27dbaa0fcb94c2feab101d07cbdbe0865486dcbd9d8fd73ce28b8d5253b4","sha512":"5baa756315b64d094a0e7b4ffbaa17263a86adce62dfbbdc1248131a7b3f2c249d648b652c7116cd1089d49d31dd44461f7397b4ca0ca61c4456fbb401257a96","ssdeep":"6144:gv4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UcEnQ/JYw:Hw5YxacxkJ78ZN/UG","tlshash":"9ea419ce73d674269396e078503f018ba57b25a2f45cc89af189cce42d74a9a4237f7c","first_seen":"2026-02-20T08:01:36.694294Z","last_seen":"2026-02-20T21:51:52.529814Z","times_seen":5,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":38,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/198-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/198-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"d12a-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 53546\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61ae9e66234d66119cbfacb0eafec866","sha1":"53057c751e24261d97178b049daf655317f8882b","sha256":"702a147b22750f37febdfef14dd3c9bd1a509aa7d15223381fc310e16cd2328c","sha512":"0e07148887837f2a8cf236760b661992c63b9c576e911260798f27a52703ab9d2309738d0cb6211fe93c8c152e211803ef79c639ce49deadb8222b4c9da9389e","ssdeep":"1536:JFWd9qZL3jY06Vktf040xhVVvYiqVLeWEVU/ZV:JFauLg2GVVv3q5eWim/","tlshash":"6133f29b7c947d89d09bf7b508ee539676580707902cc9f72d1a3a1e528c83adb2e170","first_seen":"2025-09-28T06:57:47.567664Z","last_seen":"2026-03-04T08:57:10.894198Z","times_seen":3075,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/sams-club.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/sams-club.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"12db-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 4827\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"772f2fd78bfb39c468fe810628a49dd8","sha1":"a2954af1ffb3e977e70b430d40d35d4355cf9dc2","sha256":"05e62c55992587f973cbfd930165b34d67e8665635e75575dac8b3738bf01c45","sha512":"d7ec04451d609e21d9cbb86c4261e218ac6b607a2a08ad76c9a5c637c0aafa8389510041cbabe3954e3ac2d459f0e64455fddbe0603b5a450c57ca498a88baf6","ssdeep":"96:jkPCFhYNmLZcLNMrNk+f62cS674veBtkVuJQkUPSwp+U:QPGhYNm1P53yP4veBWVu0boU","tlshash":"a6a1ae6861492395a000eeccb46f0caa16416d4e2e9b4ad3d730aaf4fdd3dbc95f834c","first_seen":"2025-07-02T03:33:37.45503Z","last_seen":"2026-05-23T23:19:54.789182Z","times_seen":3315,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/ct","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.45.196.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top","date":"2026-02-20T19:36:39.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4351\r\nOrigin: https://dynadot.rsocdomains.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=1.1771616199.I38MFYTahigJpxDE; _cq_suid=1.1771616199.Rctgf2d1dHZ2b1eU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4351,"data":"id=93106\u0026url=https%3A%2F%2Fdynadot.rsocdomains.com%2Fexpired%3Fd%3Dphantomworld242.top\u0026sf=0\u0026tpi=\u0026ch=phantomworld242.top\u0026uvid=\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1771616199084\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=73717015217622720798786529270175507868702610907667882222621025691198228652102149189807120187\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=m2qbr41Fan\u0026pto=1419\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1771616199.I38MFYTahigJpxDE\u0026suid=1.1771616199.Rctgf2d1dHZ2b1eU\u0026tuid=1.1771616199.L2fLTy83JF9YFaX7\u0026fbc=-\u0026gtm=-\u0026it=3%2C1020%2C59\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.1%3B\u0026sck=-\u0026io=aGA%2FNjotaGA2Og%3D%3D"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://dynadot.rsocdomains.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 20 Feb 2026 19:36:39 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=0fb5bfbb9bb97b34f2b9034552ae3ec4; Max-Age=29030400; Path=/; Expires=Fri, 22 Jan 2027 19:36:39 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-length: 1154\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3432,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0241bbff7140ab8a51840a27a19221c2","sha1":"36353560494010cb51fe1d230d5af41cd7528e53","sha256":"4020cb50a5263fc91f1bb607acf53e3b940844998db047bfeee42881e2d8ead3","sha512":"1de15036a8c2175487ccb04fccdc6e4b746c69682dc9a0bb1e802bf8b3248ca82af42bb0273a9848f10ef551dd3b245bf78b87b0936836d86061d6365eb921ba","ssdeep":"","tlshash":"c561ea37baabaee5afad67e29a051c8103922634540f580c306bb58a0cef3987d12409","first_seen":"2026-02-20T19:37:07.206471Z","last_seen":"2026-02-20T19:37:07.206471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":290,"dns":0,"connect":94,"send":0,"wait":151,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/walmart.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/walmart.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 25 Oct 2024 07:41:48 GMT\r\netag: \"8be-62548405d6700\"\r\naccept-ranges: bytes\r\ncontent-length: 2238\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c55dead6c1f0b6dcc6881facc0944fc5","sha1":"2fa841a393a2381632a362c2db2623c56be3aab5","sha256":"753b210ea1db70579a22911976c61c21490d239d18994268cce03af0fd8d7c78","sha512":"4df5152d646327f3f1aac2c9cd5502acc8cc125222f82fcfb24e663dc07b5207ef2732c4e2030438ef6e94c5602721d8bbccec8b6e4c187c09e364a04d222585","ssdeep":"","tlshash":"244109c118e16e1bd916363d7feb1b402a26636f500652043b11b827db87610e4ab2c7","first_seen":"2025-03-15T23:41:14.383382Z","last_seen":"2026-05-23T23:19:54.750592Z","times_seen":3319,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/doordash.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/doordash.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"7a8-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1960\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1960,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"a2aa24db9097058ecddf0c21616dc32b","sha1":"8507e1b050de8427ddc817bd414fcab8b057e7e1","sha256":"4ceee7903b0ff3777b243339047fc545a66d52122b1e14166cf92b432864d96e","sha512":"d0a0c4b8edcc7065d0cad188a2b87218c0c5c987022e0976af61e5977d0693ad11011d643b4cb11643387a997782a71c6a6dcb12ef5c5826a56a2b7d9f7b537a","ssdeep":"","tlshash":"c4413d99f3593d47cbd997f4c3700e91194c5c6926d04044b2431b7a60fbf67d648c01","first_seen":"2025-07-02T03:33:37.417807Z","last_seen":"2026-05-23T23:19:54.861044Z","times_seen":3316,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/samsung.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/samsung.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"1ec6-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 7878\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"dce623707b3632f8e0b5d1b222e54f31","sha1":"917107118b9e2437a08d5d65b2944f2402af635c","sha256":"c59f8b204e7a80a9f7863b11393da254a801feaee3108d1afadef0431644c2a0","sha512":"9c9dd63cba86a8ca5a401b30d41a1e9b76a61c3005f50cc0a9d82823815e6c2b3ca2b538ac016d2ccb3e6b64e55979dd758adeaf4ac35ddf0814a0cff9ebe3bd","ssdeep":"192:se90ywTuMWvsb4Da/wK+jrVKBiMWhX5l0X+U:sN3uMWEbvwK+fkRWl5lFU","tlshash":"99f17df23f10ad0ac21c17715ca04b45cb876d05b874a36fe5d9642af7be8b851884db","first_seen":"2025-07-02T03:33:37.453175Z","last_seen":"2026-05-23T23:19:54.901727Z","times_seen":3316,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /sodar/sodar2/237/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 19:08:39 GMT\r\nexpires: Fri, 20 Feb 2026 19:58:39 GMT\r\ncache-control: public, max-age=3000\r\nage: 1683\r\nlast-modified: Tue, 13 May 2025 23:17:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2024)","md5":"0120a1d624ff8fc3ec792d93a7133947","sha1":"1e3bd23df78ff2c60b187b40a0c6505be9ab889f","sha256":"14b660a511e14a9a481c6fe43c576f36c61b656cfd379728c54f1128e1855966","sha512":"84286e299ebc6690ee904b5581cd6aaf6b59d06200b61156923301484d1b75fa517894167c4f4777553ba09c840a2d74a723e3ff112448f00514d910dfd172c5","ssdeep":"192:pl/6xS2OASROqI3wgh5MXDc9EAOaK3qzfaGDCiMgIcTa1mx:rz2NQJIVsTiMH3qzfcOIr1mx","tlshash":"4842a7ccbad2b0210353b4f1a13f400ff13ea8aae44c9954b181e8e17cb56a94667f7d","first_seen":"2025-05-19T23:59:48.478548Z","last_seen":"2026-02-26T18:27:55.136579Z","times_seen":169945,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/mon","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.45.196.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top","date":"2026-02-20T19:36:40.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2593\r\nOrigin: https://dynadot.rsocdomains.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.d3150c1617d1f8852691d44454b54db4; _cq_suid=1.1771616199.Rctgf2d1dHZ2b1eU; cg_uuid=0fb5bfbb9bb97b34f2b9034552ae3ec4; _cq_pvid=4.beaf48a0958198370c7e197b51006f73\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2593,"data":"e=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\u0026cri=m2qbr41Fan\u0026sf=0\u0026dc=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%3D%3D\u0026ule=pagehide\u0026cp=unload\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=909\u0026mo=0\u0026pn=2799\u0026spn=1888\u0026fp=1899"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://dynadot.rsocdomains.com\r\ncontent-type: application/json\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nage: 5132356\r\nx-served-by: cache-lga21929-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 34113\r\nx-timer: S1771616201.695855,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-06-08T10:41:23.320975Z","times_seen":17368,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":46,"dns":1,"connect":14,"send":0,"wait":14,"receive":21,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771616201432\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=704618993.1771616202\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026sid=1771616202\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dphantomworld242.top\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2844","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771616201432\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=704618993.1771616202\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026sid=1771616202\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dphantomworld242.top\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=2844 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":34,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7188\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\nexpires: Fri, 20 Feb 2026 19:36:42 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1747411493688989\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19990,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":62,"dns":1,"connect":21,"send":0,"wait":30,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/234-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/234-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"b22c-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 45612\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":45612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0fa1e2cd3198ac909b31aed1d8842ad7","sha1":"4a0a7e3bac645fe7b71a266f29229cdb5c1a4316","sha256":"14ec2e784f6a04f738f7c7370533d7a9ccf9db899e9d47f39674baff93c9dcb4","sha512":"020dd7e64c52a49a0190c80f3d1aab3321a9d64ddb2b3617cc93cdb8239e02f54f254fdbce2694728aae6635d83eeb5e434aedcbfce73aa01667edc82835da20","ssdeep":"768:9YcqhZs9788c1RNz79A27BP1NmZFCxEvRlTwsCx0rHkYLaAWiPMW:YZs9Iz9P22lP31AbTwtx0bkY1","tlshash":"c12302491b89799ddd0675f348d303741e9c38fe6471f224bb646207b6f1ac9798b243","first_seen":"2025-09-28T06:57:47.6212Z","last_seen":"2026-03-04T08:57:10.90871Z","times_seen":3082,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/settings/556112.json?r=1968462","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /settings/556112.json?r=1968462 HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\ncontent-type: application/json\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 26 Jan 2026 03:15:18 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JYKgQ.CljoWi5DC9vLiKSKVo6bEEQ7xn\r\ncontent-encoding: gzip\r\netag: W/\"2c0114ac7a91de05d645d19a8349b347\"\r\nvary: Origin,accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 0\r\nx-amz-cf-id: LJdRUUXb9m_ekQqqnW1c2vDDmmSEoWHwVN_NJ1SU0OiMqJoJvXLheA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2445,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c0114ac7a91de05d645d19a8349b347","sha1":"ad7deb9a027cc507c6163dcb8b5cd2a57ca27b98","sha256":"37e9685e252238a002a7f5d547beace4bdc279a484011d98c55aeb04d262bac6","sha512":"2dc7460fce58d120b5452a1b7a8332a541873fedac5a9f622878e67ed6f7fe4c17db06f95496d17621a4b1e3c88c457e47fb66f6e2cfdbb306953101399e4ca3","ssdeep":"","tlshash":"7b51cc61115c28fa5b8ac56ad6527a434568ca3719d80bfce5ce4acca1f89b05703d27","first_seen":"2026-01-26T14:57:02.998855Z","last_seen":"2026-04-04T09:28:43.685813Z","times_seen":3068,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":14,"dns":2,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired?d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T19:36:38.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired?d=phantomworld242.top HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2731\r\ncontent-type: text/html\r\ndate: Fri, 20 Feb 2026 19:36:38 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":2731,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"85a8d571585513ae2f4c68518dd9a533","sha1":"3a1517ef2c0972e99522804268c4b7768513c8c2","sha256":"622977f437e12e9d8dc555d4e4eed0bf7d94a3e5d9ffcf55405af9e7414d0517","sha512":"b7bbb3754cb05bbda749a140deac9324b6ed6a0945373a32f980619cf494dfa403212385c078b1dd559509f9c2ff3839c610d0f3c723576e0c89934e906d0e45","ssdeep":"","tlshash":"d851435669e380025457c0655bbb7e083abaf507460acd913e9d13cccfc53da99937e8","first_seen":"2026-02-20T19:37:07.21647Z","last_seen":"2026-02-20T19:37:07.21647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":349,"dns":1,"connect":168,"send":0,"wait":172,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/kohls.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/kohls.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"5ea-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 1514\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"f6460f7fcdc8f7eb154a550c288b5cab","sha1":"7a166d72f5a212f40a512b8a6ffa92ed5753dc20","sha256":"f830f7710726f1d905411ed23c357fd22d163b9a859dc910323051d94ec74427","sha512":"92660ccdddc6751a5d3541db9847662a78a01b634f2062a28bd68e87590c4027a3e023858a5e1d19d5b10a5edff9cfa2476431508a1f60ac1833b6ce31132892","ssdeep":"","tlshash":"ce31ebd52aa594aed1fef83bd655512716acb3350b5ccd07276d08dd2ea0b30d50603a","first_seen":"2025-07-02T03:33:37.447297Z","last_seen":"2026-05-23T23:19:54.760352Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomworld242.top/","fqdn":"phantomworld242.top","domain":"phantomworld242.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T19:36:36.523Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomworld242.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":807,"dns":0,"connect":158,"send":0,"wait":0,"receive":0,"ssl":175},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T19:36:38Z","timestamp":1771616198,"ip_dst":{"addr":"103.224.182.250","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.24","port":45120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-02-20T19:36:38.034301+0000\",\"flow_id\":38391500853470,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":45120,\"dest_ip\":\"103.224.182.250\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"phantomworld242.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":676,\"bytes_toclient\":528,\"start\":\"2026-02-20T19:36:37.676062+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/favicon.ico","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top","date":"2026-02-20T19:36:38.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 0\r\ndate: Fri, 20 Feb 2026 19:36:38 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs.sd559908.js.rsocdomains.com/tracker/tc_imp.gif?e=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\u0026cri=m2qbr41Fan\u0026ts=476\u0026cb=1771616199560","fqdn":"obs.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.45.196.192","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top","date":"2026-02-20T19:36:39.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 14 Jan 2026 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:71:3D:EC:FB:1B:E3:CE:69:F9:00:4F:34:6E:DF:3A:95:11:14:5A","sha256":"CF:05:9C:6B:30:C3:EB:68:09:12:7B:D1:4B:58:DA:50:88:70:45:EA:95:61:8F:B8:03:FA:78:BA:E3:80:C6:A3"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=m2qbr41Fan\u0026ts=476\u0026cb=1771616199560 HTTP/1.1\r\nHost: obs.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nCookie: _cq_duid=4.d3150c1617d1f8852691d44454b54db4; _cq_suid=1.1771616199.Rctgf2d1dHZ2b1eU; cg_uuid=0fb5bfbb9bb97b34f2b9034552ae3ec4; _cq_pvid=4.beaf48a0958198370c7e197b51006f73\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Fri, 20 Feb 2026 19:36:39 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T13:37:37.649214Z","times_seen":394700,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"obs.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/mamma-logo.svg","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/mamma-logo.svg HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 26 May 2025 11:56:08 GMT\r\netag: \"7f8-63608a2216600\"\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ncontent-type: image/svg+xml\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cec769dd78f575508f8e4c2fc6b1552","sha1":"b542a31312251bfb5e48815297c5f829be295908","sha256":"1d6df4ff0aaf1c9c6c240e29983b7a6c226776b3637f787afe1b7f72076e4005","sha512":"1628a41902ff99c9737c74137b6914306d03c9b5723faf5fbf656f67b3596835bd384745b0f41f076649dc12597dd30474042c01aaf7369a1de9a06f232693b6","ssdeep":"","tlshash":"6a41dda74269cbbd5ffe96388e49bd1a32d17cc2e433d2c53ae61049c2250f1a01d5aa","first_seen":"2025-07-02T03:33:37.451098Z","last_seen":"2026-05-23T23:19:54.657953Z","times_seen":3360,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/255-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/255-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"3f88-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 16264\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df43024e930518dbe24f01ca9f0d7a4f","sha1":"fef8c32a2b13527aeec06be387cc93f9cf8ce11f","sha256":"adcec55151a06dd31610758e1407d81a1ad35a7ab2e04d092b85b3c4da891264","sha512":"39610ec08ca69d51210dee9ab31c927f14231b16f4156810f55758fa561a87ee7834429331996eb9da1963eae8a20f20a2955e3c3e3d462b6015e747922693dd","ssdeep":"384:ZwnXEClW8Rg7n/MQe7Vptoeh+uzJPPc3wCFGAE6/q4TdgZQSw:Gn0D71sv03wCFGAF/bpSw","tlshash":"6d72d00303761994e9cebf36654f8612fb2a2f6d034a104246d263df4528e5947d77fe","first_seen":"2025-09-28T06:57:47.512171Z","last_seen":"2026-03-04T08:57:10.87768Z","times_seen":3021,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.sd559908.js.rsocdomains.com/i/58518ef7cff0c8433a35a3a4a06ac5dd.js","fqdn":"ob.sd559908.js.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"52.84.50.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dynadot.rsocdomains.com/expired?d=phantomworld242.top","date":"2026-02-20T19:36:38.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sd559908.js.rsocdomains.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Thu, 24 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:BF:CA:57:4B:F8:E0:A8:F2:21:31:99:0C:8C:18:40:E5:CD:00:F6","sha256":"AC:AC:4F:5E:FC:5A:BF:23:4B:FB:96:F1:BD:C6:59:2F:FF:13:DE:12:47:1C:3B:14:64:0C:C4:EC:A2:AA:7F:3D"}}},"request":{"raw":"GET /i/58518ef7cff0c8433a35a3a4a06ac5dd.js HTTP/1.1\r\nHost: ob.sd559908.js.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44668\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Fri, 20 Feb 2026 08:29:14 GMT\r\ncache-control: max-age=43200\r\nexpires: Fri, 20 Feb 2026 20:29:14 GMT\r\netag: \"1d7b0-lr467vPKPVkX7SIhexMzsXfl8WA\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ePdOhjqpjtQzV3BRIBOBGmyNSt-GwuL4GNdsw7oI7ndRd8-eL39Y2Q==\r\nage: 40044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":120752,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"65aad1a3c3754e1c3bf1cb9150410530","sha1":"96be3aeef3ca3d5917ed22217b1333b177e5f160","sha256":"b2c2b5dd2ff9bbce54a11bd27e4ee24c6bec22cb18f901183448c15f0684273d","sha512":"7c956f38224af206e6b8f6174359d42d2116bd1b3322e07ab4bb93ec7c4bca1f8c04196f42ee6784fa5010ba8c433d7470320369ee0860a42c235ea467f33028","ssdeep":"1536:5wxeb5bdwL+pdFz9FSUsqLon8NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiZ:5m5+JzfVP9ftrdruZ5QZ3fao8r0","tlshash":"0dc3d6ddb2e27025439324a5157f410ae27b2e543c4b8290d17ee9d4ac7ce8e817bfac","first_seen":"2026-02-18T08:35:39.487036Z","last_seen":"2026-02-22T19:11:06.298194Z","times_seen":298,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":2,"receive":3,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"ob.sd559908.js.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/tailwindcss.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/tailwindcss.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Thu, 31 Jul 2025 06:05:50 GMT\r\netag: \"636ef-63b336ee2eb80\"\r\naccept-ranges: bytes\r\ncontent-length: 407279\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-08T12:23:57.882502Z","times_seen":39810,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/paramountplus.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/paramountplus.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"1e076-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 122998\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":122998,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 950 x 950, 8-bit/color RGBA, non-interlaced","md5":"56258cd30601041a360e3a721edb7129","sha1":"2f29d7342998911bdd6f8ca58484548e6d363b32","sha256":"1c13d46b591e6846eaeea09d1d505bb2ac264f4edddca3f4eda06024277750be","sha512":"b7497db239188cfb2e2b32ff81135eb8fdf55d1568dcaec92c7084580795d69ca7aac6f139fa4c33ee416d249a984d146c38c37de58a156790cacbf08efa9b78","ssdeep":"3072:bIJbnu1qWtyhu83Aa2t9pWsjkMVnPq3ny8o6DC+mMH4486XGZNQJVEF0:ccquTR9/j5nGo6DsMfnQGJV7","tlshash":"83c31282a9c25e20d27f727e65cb58498393ce25b367b6b835896512fc1dfc8383413b","first_seen":"2025-07-02T03:33:37.428722Z","last_seen":"2026-05-23T23:19:54.849275Z","times_seen":3313,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:41.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 01:01:36 GMT\r\nexpires: Sat, 20 Feb 2027 01:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66905\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-08T12:38:51.437715Z","times_seen":281188,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=hpoOOTNZQbW/ogR21WvAew==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"172.217.19.226","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:59 GMT","end":"Mon, 20 Apr 2026 08:42:58 GMT"},"fingerprint":{"sha1":"15:CE:C5:40:B1:1C:81:89:79:FE:E0:85:C3:1E:B3:B4:CE:A4:9A:70","sha256":"BC:07:8A:DB:6F:DC:86:2F:F2:DD:B0:88:B5:0F:1C:73:71:13:71:4F:CC:A4:A5:8A:54:18:D4:51:00:AD:F1:32"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=hpoOOTNZQbW/ogR21WvAew==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\nserver: cafe\r\ncontent-length: 8163\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10802,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5a37b120449f743551b664b7b5f4fd56","sha1":"1b9bad2e785d0129741b3345c9b938fa99ec8670","sha256":"c937c7c20316b7d77c12dd9f926806f88f429d737578055c9741a0d8bb1f0b73","sha512":"1de56d756e2b82a686c8b3d536bb162668be5a8969dd0c79b9c32b612e948ef52e61fb40a5346f8f0ce4359520c79fc83dd3637ae15bd4d9c582a8b2c06adfa6","ssdeep":"192:COt3gqjYUMILeoXTPvmRExlG3K0e4l9pWzB7RKnPKaFy749z/xL:CEtrMIqonG6jACzhRKnPKIJ7xL","tlshash":"ee22cf541779bbc38861d7c1f2fc8f2ebf656542838855bf0d2852a9a1ab88c19e4035","first_seen":"2026-02-20T19:37:07.223743Z","last_seen":"2026-02-20T19:37:07.223743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":98,"dns":3,"connect":20,"send":0,"wait":35,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/js/app.js","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Thu, 22 May 2025 08:13:45 GMT\r\netag: \"483-635b50f75e040\"\r\naccept-ranges: bytes\r\ncontent-length: 1155\r\ncontent-type: text/javascript\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"6afc09e7619e556d54d1cb17a5a70022","sha1":"173e9d33730b6732ab48f87575fafccc1997254c","sha256":"6cd89b0651a4a6584cc98859b12e37d3df207ecf7ac621c4ade4e4c6b7469f3e","sha512":"93f964b9280cd93d8cfe439f13eeefac92d8590a6c3a286a9c667ec3f67bf870d3b652347705724b68e0f3d447b169400e4738b2ab3fa6174e252a688719f03e","ssdeep":"","tlshash":"1121eef8c87390d144b7206f86ae21a425a1197baa48f883388db5927fd8f7e15306f4","first_seen":"2025-07-02T03:33:37.427114Z","last_seen":"2026-05-23T23:19:54.899519Z","times_seen":3366,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/132-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/132-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"b77a-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 46970\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":46970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bd63976804b547b59a7004dd8a86c24","sha1":"2cef9ad3434ce3fee08b716b86a77bfd60aac798","sha256":"e0cda1c7cb36dc4dbf7522d0a53a12da55ad7878d87615407455cbb2cf22c1cb","sha512":"e4ca0e9da8e5b383a8ac8012f0e1e3ce72472d31cfa59fd2fecf6debe1eb026089045fb88c18067f3fa25befe1f8b234b740c6a15010ae93773626aa93909474","ssdeep":"768:4ytQcc+oiCYHehD9yKpAL8GG1A48VOE5Ty0KmMDJlb1mKrJxm2IA:ZQccXDYHhIGGlEtlAjb1/rt","tlshash":"da230217331b8febe5b8a6ba88950b2561e02b76d04c3722d20a2c119dd7619cf1c4df","first_seen":"2025-09-28T06:57:47.517056Z","last_seen":"2026-03-04T08:57:10.888053Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.14.0/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.14.0/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-8941\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 1424055\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nx-served-by: cache-lga21941-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4098, 0\r\nx-timer: S1771616201.712080,VS0,VE1\r\nvary: Accept-Encoding\r\ncontent-length: 8095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c7adb32928265c74cd2756b2e671e514","sha1":"29bd82afaa8d25afc01224193d02f917ab6ed244","sha256":"91f3e161d59796ce95f79439670ef5c752fa6c0d2100c5da5d037c400026dcd3","sha512":"2f7d90dd65dc3369a2ef5860bdde7a59c0f89756c5d736aa8cf803896e8027bdf365ebc967e33f1872ba37946fef65a6fa2fa9d36788364582ab8b3eb830d602","ssdeep":"192:70OW0NANbrj6ltnJbUetUQnSMfps3+emQY+h572hk/grQY5Y6BjSmMErEURHllPR:UrjUJo0W1eX3/PiF5fypDS25H","tlshash":"faf2ec316b432919ba1bd1a425a11bf7e32f1342ee1b6e7f64aa345cc3d54e080bf5b4","first_seen":"2024-08-16T22:22:29Z","last_seen":"2026-06-06T10:06:22.131446Z","times_seen":3574,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":65,"dns":1,"connect":14,"send":0,"wait":33,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.contentsquare.net/uxa/3e73dd2905556.js","fqdn":"t.contentsquare.net","domain":"contentsquare.net","tld":"net"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.contentsquare.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"81:2B:A5:F7:FB:66:FE:5E:22:95:03:AA:23:47:B5:B5:C4:CA:4A:32","sha256":"3E:1E:4A:F5:7D:7B:01:5C:C6:B4:23:70:7E:11:42:0A:A0:37:55:B6:A1:8A:40:62:29:2F:FE:21:59:3C:F4:60"}}},"request":{"raw":"GET /uxa/3e73dd2905556.js HTTP/1.1\r\nHost: t.contentsquare.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\ncontent-type: application/javascript\r\nx-tag-target: es2019\r\nx-amzn-trace-id: Root=1-69970fc3-58cb916b4b8cbd792f6d40b2;Parent=37d8e471069040cb;Sampled=0;Lineage=1:d10704b2:0\r\nx-amzn-requestid: 638fee43-dd55-4edd-bca0-4995ddc704ea\r\nx-date: 2026-02-19T13:27:33.847Z\r\nx-tag-version: 15.186.3\r\ncontent-encoding: br\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: zUyrwwdJKVeRYT_2vjk8naWYzrc6ZIjILl9URaJJQ-qajpVPXRI8tg==\r\nage: 0\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":458600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44591)","md5":"fa36bf288aecab0b2565f7b0a7b57a38","sha1":"47f9e54dcf6c8cd0522700135a9ac5640795e8e9","sha256":"e57438b29355a524e9f5d3180238850ee5d24a5ec18fcc0ef8bcaa9e4a52baec","sha512":"2315b52d9365e034730393f54ca0561fa2df54e5d76da2cc2ffc972b14daa5c30665373c73b177608337d71872c20650476b8d7c3ed87ecb36f8424c2336d2e8","ssdeep":"6144:4TfKxs9QuWk+YZ18uJhYXgHqb04jRyw/wgb6lsBPz:4TfN9FvP3YX4Tm/bPz","tlshash":"38a42bd973a6b0b647e9c1ead0360102b33974a97409003cf1adecfb35a5d4662f6b79","first_seen":"2026-02-19T13:36:11.697173Z","last_seen":"2026-02-20T21:57:00.297324Z","times_seen":61,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":37,"dns":23,"connect":1,"send":0,"wait":2,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/fiverr.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/fiverr.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Fri, 18 Apr 2025 05:50:45 GMT\r\netag: \"8b8-633071972b740\"\r\naccept-ranges: bytes\r\ncontent-length: 2232\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d7c86e0082be875ab9e502d8f63a560a","sha1":"7465b9a5a77881507eeb6356b5f4c04ea4921093","sha256":"dbab65716f1d5e9dc9ce6a17614ad1e015be9b49a23d78f48a042a9d2e5b5dc0","sha512":"311b5ffb7eeb21c8494a1fe91da9c8c735d247663a9b303aa0975d1cc70c2743716d16866fd3e21e51b7aab9177b6b0d9599cfa72540586ae446084bb790afc7","ssdeep":"","tlshash":"e3413a86b6441918e5a2c77417a8f87075eb199dd07099e73bca08a6314ee2a70163dd","first_seen":"2025-07-02T03:33:37.459148Z","last_seen":"2026-05-23T23:19:54.88022Z","times_seen":3308,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NKZMCM7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:41.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-NKZMCM7F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 20 Feb 2026 19:36:41 GMT\r\nexpires: Fri, 20 Feb 2026 19:36:41 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 20 Feb 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 112372\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"8dea2c5c16653f45bc701a6c89572569","sha1":"6821341e7ae89a45fdfab1a1a8e561a009f15bc0","sha256":"99bb498e48e1c1d7ae7ca15f17339f6654819937d4244d6564e101f16e9ac03e","sha512":"d8638efa4ff36cc240f40c753845a6d6781ecc69d4dd74abdcf01cd59a52ec2f11a69bd48b7e7ede80883970f05dea84f63ab2e138ffe268b03a7777304520d5","ssdeep":"6144:g4D83xaAJljxXU18kKDeDKJN5hSppv/UWOH3:xw3xaixk18CD/Ud","tlshash":"fc64f7cdb3d6742693a3a478403f118bb27b7992e84cc895f186d8d42d70a9a4277f7c","first_seen":"2026-02-20T09:52:07.713619Z","last_seen":"2026-02-20T21:51:52.550426Z","times_seen":4,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":75,"dns":2,"connect":8,"send":0,"wait":26,"receive":22,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=704618993.1771616202\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026z=1674280947","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:42.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:42:44 GMT","end":"Mon, 20 Apr 2026 08:42:43 GMT"},"fingerprint":{"sha1":"F4:E5:BB:F4:C6:49:BF:FE:1F:8E:CA:B5:6E:31:1B:21:49:9E:F4:ED","sha256":"F5:84:6C:89:F1:15:EB:18:A7:93:94:EA:72:B8:78:5A:EB:19:BA:8A:28:33:40:EF:E8:C3:8C:89:D8:0D:F7:61"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-9WGW9SCFVP\u0026cid=704618993.1771616202\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026z=1674280947 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 20 Feb 2026 19:36:42 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T13:34:09.264495Z","times_seen":941193,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":95,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T19:36:39.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /?cid=99998\u0026d=phantomworld242.top HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dynadot.rsocdomains.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; expires=Fri, 20 Feb 2026 21:36:40 GMT; Max-Age=7200; path=/; samesite=lax\nwwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D; expires=Fri, 20 Feb 2026 21:36:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.14.0","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"873001824c6f81da43fa03ade0be294a","sha1":"694e3cead882c04b95b65d710475e4293f823afb","sha256":"a5141d3bb5923107171ce7e2ffd43b6b1a7d12d6f63e5d80ad3e1da4ad70e42e","sha512":"bc845c8f22e5f6f9d0bf6f1458ebc51c1faaba199915b3226a09f715776a377379f382075dfc3fc0a6f19b64806e1288df06e8b9f4b2ac846810a3b162a422b7","ssdeep":"192:u8xD4wxmppiV7+g3d6lfliEyzRbMRQNnL2aofXu3hNljCqDgmwRBRxOJLz2fTPAv:uTQ7gKySUaEW2fTPAbf/y2Hbn7x","tlshash":"ae030fb3b5f034ef1347829e19227a2c9982705fd603a98cf9bcc55adfd1d4e8a13169","first_seen":"2026-02-20T19:37:07.236604Z","last_seen":"2026-02-20T19:39:09.123634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":340,"dns":8,"connect":158,"send":0,"wait":246,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/storage/uploads/hero_image/music-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /storage/uploads/hero_image/music-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Wed, 17 Dec 2025 09:42:07 GMT\r\netag: \"487a-64622a85534d9\"\r\naccept-ranges: bytes\r\ncontent-length: 18554\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4aa7aca4d11ccf6561a2c495bee3dabc","sha1":"e1e8ebaed23d62a59f024b2cfab2f9d37d28c3f0","sha256":"5ca12a75440fc12401421f3635237fd59aded8d5a901295e75670753f810941e","sha512":"04101d2329b761ac21936f7563e83e226730c3a4526a932fceb13a28fd98f094e2fca5b914a0ec569334f86cfb0afbcb20b17fbe5ba75ee2cb2291ce79f21e95","ssdeep":"384:Vwg4ZSCQHrnJBXkXu2ozsCgmqs+90thUL8F7XZDIthLsl8AZqkdUvV:KgaSCQHrnHmTJsUs7Jcwl8IqkdWV","tlshash":"0282e1bca3e7ce02e83855fc859e7b9d510ef256ae7c404d3298722291090ee21674dd","first_seen":"2025-12-17T10:34:42.032489Z","last_seen":"2026-03-04T08:57:10.912727Z","times_seen":2995,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynadot.rsocdomains.com/expired/result?rid=beaf48a0958198370c7e197b51006f73\u0026cid=5b7e90fc-0169-46c1-942d-691127df61f1\u0026d=phantomworld242.top","fqdn":"dynadot.rsocdomains.com","domain":"rsocdomains.com","tld":"com"},"ip":{"addr":"103.224.182.66","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T19:36:39.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test.rsocdomains.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 21:41:33 GMT","end":"Sat, 09 May 2026 21:41:32 GMT"},"fingerprint":{"sha1":"1E:C9:08:BA:B6:E8:CD:70:8B:24:03:1B:31:6A:69:AD:0D:CC:6A:BA","sha256":"10:8C:2B:1B:06:D5:06:01:C4:9A:24:79:29:29:8B:FA:99:0D:5D:12:50:5D:35:E1:79:1F:10:C7:18:31:D5:E0"}}},"request":{"raw":"GET /expired/result?rid=beaf48a0958198370c7e197b51006f73\u0026cid=5b7e90fc-0169-46c1-942d-691127df61f1\u0026d=phantomworld242.top HTTP/1.1\r\nHost: dynadot.rsocdomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dynadot.rsocdomains.com/expired?d=phantomworld242.top\r\nCookie: _cq_duid=4.d3150c1617d1f8852691d44454b54db4; _cq_suid=1.1771616199.Rctgf2d1dHZ2b1eU; _cq_pvid=4.beaf48a0958198370c7e197b51006f73\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\ndate: Fri, 20 Feb 2026 19:36:39 GMT\r\nserver: Kestrel\r\ncache-control: no-cache\r\nlocation: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":41310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"dynadot.rsocdomains.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 19:36:40 GMT\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"fc4d1e8341532e72b100662c8d5cd00b","sha1":"9fb1cdb5aa0fbacb008b309cad0c3f15cb77aee3","sha256":"9d0d749d352bfe34562d871e060ad504c4c2e3f26fac903b7c64751eacab220e","sha512":"06a816f0e8acea46f483fdcdb92063c14a95397cbcf94b6df0fc1947de44d364b21f47021e7df34468ca1b4058128d0cc0d8cb36d1b12c21dfe4ac82da175494","ssdeep":"384:+bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5v7qY49Un1AnOPEgtHmN:kiCAgkgHL8OOnL3JbcI/z","tlshash":"57231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-18T17:37:33.475534Z","last_seen":"2026-06-06T12:33:58.858274Z","times_seen":3665,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":203,"dns":0,"connect":24,"send":0,"wait":36,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771616201432\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=704618993.1771616202\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026sid=1771616202\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dphantomworld242.top\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7856","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:47.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-9WGW9SCFVP\u0026gtm=45je62i1h1v876558862z89192081961za20gzb9192081961zd9192081961\u0026_p=1771616201432\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=704618993.1771616202\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~115938466~115938469~117455676~117455678\u0026sid=1771616202\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fexpired.mamma.com%2F%3Fcid%3D99998%26d%3Dphantomworld242.top\u0026dr=https%3A%2F%2Fdynadot.rsocdomains.com%2F\u0026dt=Mamma.com%20Search%20-%20Trust%20Mamma%20to%20provide%20the%20best%20search%20results\u0026en=page_view\u0026tfd=7856 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://expired.mamma.com/\r\nOrigin: https://expired.mamma.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://expired.mamma.com\r\ndate: Fri, 20 Feb 2026 19:36:47 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"expired.mamma.com/images/231-4.webp","fqdn":"expired.mamma.com","domain":"mamma.com","tld":"com"},"ip":{"addr":"103.224.182.15","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top","date":"2026-02-20T19:36:40.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mamma.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 22:23:56 GMT","end":"Sat, 04 Apr 2026 22:23:55 GMT"},"fingerprint":{"sha1":"8B:3C:A4:EB:05:0F:CF:6E:D6:FE:AE:89:6D:4F:51:C1:DC:79:00:B7","sha256":"92:E7:BB:35:AF:BC:D7:B9:5D:D0:58:3C:81:2C:60:E7:7A:AF:E0:B6:73:0D:9C:FF:15:AD:D7:DB:BD:80:D8:2A"}}},"request":{"raw":"GET /images/231-4.webp HTTP/1.1\r\nHost: expired.mamma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://expired.mamma.com/?cid=99998\u0026d=phantomworld242.top\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFUWm82bGFRdWRFY0EwN2ZJZUdmdXc9PSIsInZhbHVlIjoiV2hPdUlZYzIwVUIvTm1TT3BHamNGT29XR2FDSTN0LzlpbU9BMzVXMUNKUGh5WDRPaEJnZW9RY0wvVGIrc2VTZ3BwRFdyS0hLUW1UZ0w1dGU5VEhKT2ZBWkcwMEJHTXhqM0NGR3pJMjZsVVJjd0tHOGVPL0FiM3I5aEljdndkUDIiLCJtYWMiOiJjZDNhYTZiMTRlNjI0ZWZiMWQ5ODIwYjlkYzI5ODMzYTU0MTFiMDczMWZiYTkzYjMyZTQ0MTJmZDM2YmI1YWUzIiwidGFnIjoiIn0%3D; wwwmammacom_session=eyJpdiI6ImE2SkI4cnlLVmo4OWJZOFJFUExDakE9PSIsInZhbHVlIjoiUk1oMkZodmtRcEJTRFhzcUJWWFd5YTNQR1FpQVpONTJ0QzRZdkNpU2NsenJOb1grUlRUN1FLd1VLcjZuYVEwbktkUlRRRG5neXY5ZFFjU04yYVRHOThXaWRkZVB5allSeHRNYUh6d0lLOEp5Z2tHcWlIWW1GOTRaUEYwcEJwbEEiLCJtYWMiOiJjOGM1ZWIwNzhlNTI5NDJhZGYzMTZhOTIxODY5NGEzM2NiZjFhNTJlODI4ZTg1ODNlY2FlZmVmODczZDEwYTM4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 19:36:40 GMT\r\nserver: Apache\r\nlast-modified: Mon, 21 Jul 2025 06:47:52 GMT\r\netag: \"8188-63a6adacbd600\"\r\naccept-ranges: bytes\r\ncontent-length: 33160\r\ncontent-type: image/webp\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef40c42b96a47242b52338bb98ede227","sha1":"48ca23b340cfd519c105bfcc824ba2d5742900f7","sha256":"aa1fdef6533652c99b0ddec88475ba75eff15f0869f1dfaa7f035c8283ee7098","sha512":"950562cc0b20737231e79b6689346b20c06fbfe3852281192675b0befb24706108204a86986cc2c4c8334cfa134ad411653c70804b9894003bf815ffef7ed4f8","ssdeep":"768:49KWPdGboJZUu1bl7TcaBQOn7deI6EHgKhjEhr/Q:dWobMUur7THde6AK+No","tlshash":"27e2e1fc272a3bb4e8b387f156a1faa05681297e8248772c14709c879c6d6cf09546cb","first_seen":"2025-10-24T03:34:30.908124Z","last_seen":"2026-04-04T09:28:43.674282Z","times_seen":3065,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}