{"report_id":"4322ebdf-b77f-4494-bf79-160826c11b66","version":6,"status":"done","tags":[],"date":"2025-08-31T02:05:54Z","url":{"schema":"http","addr":"cg.trackware.click/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"46.101.217.129","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"title":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847"},"submit":{"url":{"schema":"http","addr":"cg.trackware.click/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"46.101.217.129","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T02:05:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.764808+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":308,\"redirect\":\"http://cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"length\":417},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":755,\"bytes_toclient\":930,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.929247+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\",\"length\":473},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1371,\"bytes_toclient\":1791,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ng-app.com","ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"domain_registered":"2020-09-02","domain_rank":32500,"first_seen":"2017-06-27T16:53:08Z","last_seen":"2025-08-27T07:24:59.624116Z","alert_count":0,"request_count":14,"received_data":474073,"sent_data":27323,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cg.trackware.click","ip":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2024-12-05T23:55:52.427454Z","last_seen":"2025-08-26T15:47:06.726873Z","alert_count":4,"request_count":4,"received_data":28965,"sent_data":2102,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.764808+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":308,\"redirect\":\"http://cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"length\":417},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":755,\"bytes_toclient\":930,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.929247+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\",\"length\":473},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1371,\"bytes_toclient\":1791,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"219540904c0178c788f7876c475cf695","sha1":"34be8b20e8abc01ba107bb54f70c2319511043b7","sha256":"328ca9901193cec5051c6c7fe1404faf85e4ce1cfed2d9bb7bc429a8573d90ca","sha512":"a4b5eb802bcdf274f0a902abaee890a56b4d673141d65682804abf10e09c3057c4f182d1f494f194f2da890d94aea04173f580be4385b95bf7bd639b20656db6","ssdeep":"","tlshash":"b0a002f123139c5615e613ce8f714818d156a5436565d233facd688c0f51c26a5148ad","size":75,"data":"","first_seen":"2023-03-07T12:42:38Z","last_seen":"2026-01-20T15:37:07.085675Z","times_seen":1063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f02ed81c53ce981ea5d7a39053318091","sha1":"b4aa939bc5a8fbebd6c236d0bd50a1a59f9f609c","sha256":"1fe07007070f89f5c44dd4f619038f9c25d7b930a5ff8448c57a52b07328f24a","sha512":"473e52cbb1a8d2bdd207f6af8af010d0a25c852301667a0e92d8c6484ffa1f3151c6c641af19566ecafd450e37930280b1bd1edc2bd8227780abbe2fbbc0e0e2","ssdeep":"","tlshash":"ead0a9e676045a8ea842c1ccc9a833b471e01a6f4e00cc92b02c96a3cf0406884a98ee","size":231,"data":"","first_seen":"2025-08-07T03:26:52.199603Z","last_seen":"2025-12-01T00:32:10.326391Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dee08d2f52efe61b870a5e98dd63c85c","sha1":"702807ad8eda7e67715f64e87e37ef4a5cbae0f5","sha256":"718a06d37bc809f7203297c3e45fcc3f04af9f98528ebcab928cbaf0cb291a39","sha512":"ab9bcfb0516f8e12717152bf4b0e7050cf1f8e553b6356363e6d6451c30edc9c66e64ac0876638eb4a8a5ce8aed6e5df70b50f3ec9bb8fd10b70d1667ba27c0e","ssdeep":"","tlshash":"1261f13e4834137a1bfb91a95dca14ccbd28041b23105ac9b4bcc8150f64a58e7d3fcb","size":3252,"data":"","first_seen":"2024-09-24T16:21:28Z","last_seen":"2025-09-09T11:15:14.045181Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/ui/upstream.design.js?v=2.267.210","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":false,"md5":"07af9de9924d11886b0cf753a7b4a129","sha1":"97ad63aa5556920be8f2f6cafb63e4be26211a9d","sha256":"1bdc8fb7eaf6980408e7ff80230b7b9b6dd6f24b6fd38db769f7a08d3205886d","sha512":"875aac868011eaa5401d23a55d065865dcf4bfe18b249af38f1a4f5d5c805e99496b4f7a80412c33a403d53332ce6a69cf4f8455efbb993a3e06f0e668e0d6b8","ssdeep":"384:BbtF6R6QYSN3UANdkEUwVZ6Co0M21Wg35tTOkiEyLetwPHdjzMrz1FNf:ltF6RMunx6v4tik2LetwP1Mrz1Tf","tlshash":"97d2c9c52194b2410b9294e5c47b7123e2f3b67cb14de110e7919dd23cad89563beebc","size":29661,"data":"","first_seen":"2025-08-03T03:27:14.208703Z","last_seen":"2025-09-01T14:24:09.459061Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"24923a4580b6fb684c94a17e0004ceaa","sha1":"a3585fe50a42a5374ecc7558fa2c922b7b9c6e9c","sha256":"b82cc07b3cd4cae52c0b452c1e2b2ff00928bd230226913a4081545a94685b42","sha512":"f0a65b889f16213871fbb0511fe32efc568899d5811061039a2f2abf7b39cee9290cb2853f738c835855717b4430bb7b87792a76e5cb40f6f8b2cc8968fdf2ca","ssdeep":"","tlshash":"2b51a69d68f536364927b03846ef028e76b044034008bd003e6ca8c15fe2978a6fffe6","size":2587,"data":"","first_seen":"2025-07-16T08:57:39.144418Z","last_seen":"2025-09-09T11:15:14.046004Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d11e052bf0bc8ac691ff1e2e5e6972fe","sha1":"24c51fd767cc461150ff6987364ae00038b0ed3e","sha256":"5f0b4ace9a2b92cf595b44fda434c09189bd9da2964e26c06ce507ca0440dbaa","sha512":"cf3ab90e8b344486817d4848122db0e8222131cc58fd4d23ce17d1c61f1cb077f9cf1a9253042010fe98c7f32bdb7ccfb348a197af35eecc3e409a26b614227d","ssdeep":"","tlshash":"f1e017a518bae7148a2e21b9d3959801e93440179ed941873aac1319cfeca3153fdb69","size":301,"data":"","first_seen":"2024-09-24T16:21:28Z","last_seen":"2025-12-10T04:51:26.778271Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d11e052bf0bc8ac691ff1e2e5e6972fe","sha1":"24c51fd767cc461150ff6987364ae00038b0ed3e","sha256":"5f0b4ace9a2b92cf595b44fda434c09189bd9da2964e26c06ce507ca0440dbaa","sha512":"cf3ab90e8b344486817d4848122db0e8222131cc58fd4d23ce17d1c61f1cb077f9cf1a9253042010fe98c7f32bdb7ccfb348a197af35eecc3e409a26b614227d","ssdeep":"","tlshash":"f1e017a518bae7148a2e21b9d3959801e93440179ed941873aac1319cfeca3153fdb69","size":301,"data":"","first_seen":"2024-09-24T16:21:28Z","last_seen":"2025-12-10T04:51:26.778271Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a04a5cab72b3257241986ec3590c5f25","sha1":"7a3fb955f7c6aa11be226800a1fd2fc541077390","sha256":"0eedac967c33f349e9af49004ccfd0524b25915f38ca95f3f18b1b650719a6ff","sha512":"7a52ea4265c6d958cd4361e6c18e12b143b1cc4c87b0dbd68f5af1530c1d704955399f84b3a9c5fb37ae41f5ad2782f3135f80c5a0eba8eb410bff2eb70a86cf","ssdeep":"","tlshash":"ad0146af31e235344eaf35b681db43883a704443080a3411386caac84f23a91907abe6","size":707,"data":"","first_seen":"2024-09-24T16:21:28Z","last_seen":"2026-05-13T12:31:16.154073Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e633aa08ae12366911d8e26c62df0ac7","sha1":"a16f61cc6d9dbd371d1111eaff9b8e9ab3532ad7","sha256":"4d9920d1b0a027e9d1e7994912dede5626a56cef010170b15fb45edc85f882ed","sha512":"fb14683b5dd05468843f805b64abe19a04a63f696af739109170ebe4d0e96f47467ad8f0948dbc2d9bd9fe6567ae46697d0014f32a037768cafdc00679275770","ssdeep":"","tlshash":"cc90024c29d96104d7a3b118a04b80e46114870301091d00745c96506f51578856164d","size":56,"data":"","first_seen":"2023-03-07T12:42:38Z","last_seen":"2026-05-23T09:35:44.948998Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/247Comcare-music-trivia-landing-otp-en-doi-web.css?ver=48","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/247Comcare-music-trivia-landing-otp-en-doi-web.css?ver=48 HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 02:05:24 GMT\r\nLast-Modified: Tue, 26 Aug 2025 11:03:56 GMT\r\nETag: \"7070-63d42a0e847ce-gzip\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3528\r\nContent-Type: text/css\r\nX-Varnish: 60335272910 60334175273\r\nAge: 8\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-pt4l9 (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=997\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":28784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ac33f9ef4da448394fbc58cbdd859535","sha1":"19d99cfeef07fb9988c63122f28bb8a2de8e707b","sha256":"b0bf0849e0472574d4df181d3c5e3c12897463c81d3fa0a3d8628bf3770e32cb","sha512":"78d8fc71f83f643f0482e0ae55ef802115d973838085ae87e07ab3b307f9464025713ffd2129ef65386dc70ee3bc02e31c74be2e34abc1d70e4351a052a39073","ssdeep":"192:1ycy2YDyJ1yWSyMQyxwyPRyGFbFfJKX3QUHAHSj13LuHyzyCgZiOE0mUkmGeoG0e:EFbFBVyOc2mUkIoszY2nl9F","tlshash":"c4d24e4885ef3101b4832c5eb35b2261985ac51f34cddc2db9bc7689cfe1a6586b0b7e","first_seen":"2025-08-03T10:39:18.478667Z","last_seen":"2025-10-10T04:29:33.055418Z","times_seen":34,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/ui/upstream.design.min.css?v=2.267.210","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/ui/upstream.design.min.css?v=2.267.210 HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 02:04:57 GMT\r\nLast-Modified: Tue, 26 Aug 2025 11:00:33 GMT\r\nETag: \"9bfe-63d4294c2f595-gzip\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6756\r\nContent-Type: text/css\r\nX-Varnish: 60335565544 60334788357\r\nAge: 36\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-pt4l9 (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39934), with no line terminators","md5":"fcedbf8535459f61eed480575900c8c5","sha1":"d2799b5af273848d9e322b1957d17364b26480e8","sha256":"627aefaaad993015e4cf96be6a0ce80425d5787044cb5d21a372cc7dc776c46a","sha512":"d5dba8a24ab65704cb7596667ab8453c66ca89217ae2286167c90afbdef7f11b3c0ac25ac24ff0cc06f2816873c99e3fd4a98278a85a1f50fe39d6edc0ffe36a","ssdeep":"384:tlaBRyZKOB6eYE6sdTsgd0eXPXYMGm2Sgiga++mwPaDOt/65IzF:tlaBRyPB6eYE6I4gdFQMGm2SgizaCl6C","tlshash":"530374219f225034f9ba823ef8d164bdba18c527d3574efef856d51acac24a7372160c","first_seen":"2024-10-14T18:03:57.258501Z","last_seen":"2025-12-10T04:51:26.7686Z","times_seen":73,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":131,"dns":0,"connect":63,"send":0,"wait":68,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/ui/upstream.design.js?v=2.267.210","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/ui/upstream.design.js?v=2.267.210 HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 26 Aug 2025 10:21:11 GMT\r\nLast-Modified: Tue, 29 Jul 2025 10:00:33 GMT\r\nETag: \"73dd-63b0e7aa49259-gzip\"\r\nCache-Control: max-age=604800\r\nExpires: Tue, 02 Sep 2025 10:21:11 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7445\r\nContent-Type: text/javascript\r\nX-Varnish: 60334359027 60287171897\r\nAge: 402261\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-pt4l9 (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=996\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":29661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21104), with NEL line terminators","md5":"50acdc52ec2ea771d4da283e0a6df94d","sha1":"086ad70877269b96694602beceb705f288289f7c","sha256":"a8a6faa6fda87679e5a36752d7f46d3c167571e95be1900ef6c2559643e1888b","sha512":"e4b0a233214ed1cc60fc2691b0d755256f81c0caf4ced37b7e88e4b278016b9220b4186d8e5c3ff16e15b1200738c378840acbe62a7c684d4169a03a16d23de6","ssdeep":"384:BbtF6R6QYSN3UANdkEUwVZ6Co0M21Wg35tTOkiEyLQtwPHdIS/X4H8eqOQnmVr1e:ltF6RMunx6v4tik2LQtwPR/X4Hgf","tlshash":"bfe2dbc62181714107b254f1d87b71b2e9b3f5b8e18ce822c751d6d528bcac193bdeb8","first_seen":"2025-08-03T03:27:14.189258Z","last_seen":"2025-09-01T14:24:09.421392Z","times_seen":27,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:30.870Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749 HTTP/1.1\r\nHost: cg.trackware.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 FOUND\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 31 Aug 2025 02:05:30 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 473\r\nConnection: keep-alive\r\nLocation: http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"FOUND","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.929247+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\",\"length\":473},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1371,\"bytes_toclient\":1791,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:30.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: no-cache, private\r\nLocation: http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\r\nContent-Type: text/html; charset=utf-8\r\nX-Varnish: 60168071225\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:32 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6IkJBMlpXZWxiNnoycmF6UmNycm1xVlE9PSIsInZhbHVlIjoicFBoalNOZjBSTjNaOTkrMTZLWm4rcmpNU25iMVZzQ3lKbnhrQW5kNUcrZVB0MVJtOU5RL3ZBVWFwcjNHd3IrQ2xvQTcwTXFmL2xFVjN0b2RyRGxRSWN3MGpLaUMvMTFIZjFXRU51S2k1OFhPajNPL3VMVHpMSlJudkZBcWVPUFMiLCJtYWMiOiIyNzA4ZDg1OWQ1Zjg1Y2E5NmQ1ZjExYTQxZDRjNDM1NTA4MDMyMjQxOTI1ZDVhMDAzNGUxYThiODE1YzY4Nzk0IiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:32 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nctxid=eyJpdiI6IlF0ZkE0VUVaZFA5bmFqQlFwNEhLbXc9PSIsInZhbHVlIjoicmhuRzlvOWRkYjQ3RFNjRWRuQWxnT000UXFkNklhdjdvd21NRVRKdUY1USs2NGYraUp6dEd1U0JwWnRKUmJ6eDNUUkpsU2lyTzMyTWZQRVlEU2RFZ2I0LzJKNHJTbVRMZUlBQk00cm5JNWs9IiwibWFjIjoiZGMyMzhlNGM5N2RhMDEzNDA2ODU1ZDAxMmY1YjNlZThmOWRhNjk5YTE2MTRkNTc1OTExYzUwMWI0OTIzOGYwZiIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:31 GMT; Max-Age=0; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6IkV1UDMyRFdkb01lY09vaDRDdkdYUFE9PSIsInZhbHVlIjoidlppNE5HVVJEalloMTFBZWs0cE5NaDdYYlFSOG9LZUp5aDdRd3Z1NFFBSUUxOUJYZSsvTDQ5QklmOWExOXhPM0tLRWNicjFXOUFHSGxpMnZwcDRFKzlQQ2xINVZlREZVYlI0ODFuSW1seDg9IiwibWFjIjoiOTUyNzI1ZjliNjkzNTViMmU3MzYyODExZDkwMjYxMjRiMjc3ZmQzNzViMGZiZDQ3OWJhNjViNTcyNWQwMDYwNSIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:32 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6InVrNWY4S0RaOHMydS9hTGZpU2x0ZXc9PSIsInZhbHVlIjoiemw3L29RVTd6TEtBbVpCLzVwY3Q4SVBMOFJhLzRYaFNvNFN6SlBSaWJxcVN2V1RVL1V2VXh1QkhDSHM0Q2pxWkVhckpCOFlzYmpoQzZEMFFmeGxXM0VDcE1yckt6ZEZDOS9UTTd4MTkyR0E9IiwibWFjIjoiNWVlMDliODdjYTE2M2UzZWE0NzE0OTZlYzBhZmZhMGQ3MGI0NzU3OTI5Njk2ODM5Y2NhYTNkZjQ3MDU3NDQ1NCIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":2462,"timings":{"blocked":1171,"dns":23,"connect":66,"send":0,"wait":119,"receive":1,"ssl":1078},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":80,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:32.567Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjV4aGNKV25qS2dSTmdROG9JVy9PZnc9PSIsInZhbHVlIjoia203aGQ1b1JwYVlVc0NQYkJtbGZpN0xZa2dLei9MampPVmsrVjdDR0hpMXkwVGF2d0w0N05hd0sxY21OZkZkR2pLQlVvWk5Jb0Q0WFN0OFU1YnQ2WDlmQjFoaFB3M2RaWm1qZDlKRzg0cTdYWk4wOHZ3REZiUEIrNTdoTHA4aTIiLCJtYWMiOiIxYWIxNzNjOTVjYmRkOThlOTU3MWIzZmFhNjVmYTIyMDRlYmIzOTIyMWZmNTFlNjAzN2ExZjBlMmQ4Yjc4NDBhIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6Im5IU1ZZZ2M0QnNZTGRIaTRqWjhSckE9PSIsInZhbHVlIjoiT0tWYWs5QlIvMkpxZ1ZXb3MvV1ArcDhqblFqT1MzeWlIQTRTZFZUMW9XSm1Oc0FqREtPcEd6NCtuNWYrcElSK0pZWWwrL29hQTlKK0pqMDZhc0Y1dkp5bTRGc1I2ekxxM1pqY2FNSXRUNGM9IiwibWFjIjoiMmVkMjJlNDYxZmVhMjRjYTdmYWJiY2RjMDU2ZTFmZjU0YzYyYzIwN2E0ZWMwOWQ1NTc0OGZjZjAwODVjNmM4NyIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IlZTZjdLSXh2Z05KRmFOT1haUTNCZnc9PSIsInZhbHVlIjoiMWVrVmRURDd3MW5WL2h3QjdyQzJYZXpBWmtXYW9ZcU12OUJ0QWFhMmRqSkV6ZmpRT2pVYXRuckZUc1FLUENBTjBCOEplSWxMVk9kRVBqYW9jMlRRSXJGSUhJZ0VmSERYRnhGQmdLMFFOM3c9IiwibWFjIjoiZGIzZjRlYWU4NjQ0MDkyMDU5OTg3NjRkYzU1MzI4Y2Y5MjExMmRhNDQxNjlhN2NhMTM5ZDE1MmEyMDZiMWNiMyIsInRhZyI6IiJ9; userPermID=eyJpdiI6IkFOSTJHYS9pS1pEUjkwWHdSUS90R1E9PSIsInZhbHVlIjoiWHhQcXBhRW52NGJLWmw1aTZIQmoxdDB6ZDl1VEM2NmVVam9ZYnpjeWFSWkNjT0NMeTdHdStTbzZxYzZUUmw2VjZLOEYybTZHelF1cDRIdHFDd3RySkFWSjhSb1YxeEZmQ052NHBhTUJzN0E9IiwibWFjIjoiMGVlN2NlMDRhZmEzNzEyOTU0NDBmYjg1OTk1NmU3MzhhMDA2Mjc1YjAyYjdkMjJhMTJkZDYxZTQ3MzQ5ZDhlYSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: no-cache, private\r\nLocation: https://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\r\nContent-Type: text/html; charset=utf-8\r\nX-Varnish: 60168071227\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:32 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6ImYrRUhhbW5wT3FBSUdhWUQ2UzJkMEE9PSIsInZhbHVlIjoiUEcxdkwzV2hidzh0Q2dva2NoWU9kdmtUcTJKa3RyUE9RZXBpYmY1bmZVcXh1ZzlmNUd2WEY0N0hwZU1OdGNLZUdOcVNaTU1pV2orMWtCZVZYeVo4MlFIMGtUczBhdlVTVTk1RTVrMjI1YytsbWJvSHVkcDNBK2pwOW5hTVRRU0EiLCJtYWMiOiIzOGVjOGNjZDRjNTM4Y2ZjMmFlOGM5ZDFlZDU5MTZhZmE4NDE4Mjk2YmUxNWY4ZjU2MmYzZGRlMjc1NjVkMjU2IiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:32 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6ImNzdk9ZQ2hxYkp5c2pkR01qRzM2MlE9PSIsInZhbHVlIjoiWjhzYytnSFlaVWlMS3ZHdDZBenlvcHV3Tm4xK3VNSWRjc0tZUWpuU1pRSU1yQnpwU2p5NCt5SG1RRkduQ1d1eCtkMFRwQ1NiL25icUhVY2RiZFdCcXRqejZCRjRpclRtYW85QUJ5SzBRcG89IiwibWFjIjoiYTA3MDM0NDRlOTg4MjM1ZmE4NzlkZDQzZjA5YWZmN2VjMjE3MjAzMDUyYjIyM2FkNmM1YmI5YzEwMTY3OTMyZSIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6InBVTm1FQ1JRcHkxeUViV01OM3o4dlE9PSIsInZhbHVlIjoiL05zdllCb2xwZUVDaUVRajM1RDRnQ1J4aWxyWFhPK2toWnRReWd6cE80N0U4N24wa2VXVjdMUzEvb3hsSUFGSXhTMTVPU2xaWjFFUlVtTmliYmc0aEJzTko2eWIrbXJNcTlqanZ4Qm9paGs9IiwibWFjIjoiMzExMzY4M2IzNjQwYTdiYTM0OWIwMmUzNjQ3YWE1NjQyMWJjOGIwNjNlMzg3OWM2ZTcxZTBmMzgxZGRhMWUxMCIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:32 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nctxid=eyJpdiI6IkVaaFBrdG1hdkpwNkpJVG9MeTRuaVE9PSIsInZhbHVlIjoiaUFMS3h1dWtUL3ZLaU92RXJyNDM0TVd6YTdxSmdncWZ4aHd2em5XYzk5eksxSUtPZzdwUExGUFhRTmhmNlZYa1J2N3dBWDlHMEVtYVZucW4xY2FsWjF1M2o4cHNSNjhNaitoWERsc2pJUTA9IiwibWFjIjoiMTI3OGZlZmQxZjUzZDBlYTY5OTQxZDhhMTc4NTNiYWMzYTMxMGRhYzUwNWEyNzg3YjNiNjdiNWVmOTBiZDI5NCIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:31 GMT; Max-Age=0; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=998\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:32.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6ImYrRUhhbW5wT3FBSUdhWUQ2UzJkMEE9PSIsInZhbHVlIjoiUEcxdkwzV2hidzh0Q2dva2NoWU9kdmtUcTJKa3RyUE9RZXBpYmY1bmZVcXh1ZzlmNUd2WEY0N0hwZU1OdGNLZUdOcVNaTU1pV2orMWtCZVZYeVo4MlFIMGtUczBhdlVTVTk1RTVrMjI1YytsbWJvSHVkcDNBK2pwOW5hTVRRU0EiLCJtYWMiOiIzOGVjOGNjZDRjNTM4Y2ZjMmFlOGM5ZDFlZDU5MTZhZmE4NDE4Mjk2YmUxNWY4ZjU2MmYzZGRlMjc1NjVkMjU2IiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IkVaaFBrdG1hdkpwNkpJVG9MeTRuaVE9PSIsInZhbHVlIjoiaUFMS3h1dWtUL3ZLaU92RXJyNDM0TVd6YTdxSmdncWZ4aHd2em5XYzk5eksxSUtPZzdwUExGUFhRTmhmNlZYa1J2N3dBWDlHMEVtYVZucW4xY2FsWjF1M2o4cHNSNjhNaitoWERsc2pJUTA9IiwibWFjIjoiMTI3OGZlZmQxZjUzZDBlYTY5OTQxZDhhMTc4NTNiYWMzYTMxMGRhYzUwNWEyNzg3YjNiNjdiNWVmOTBiZDI5NCIsInRhZyI6IiJ9; userSessionID=eyJpdiI6InBVTm1FQ1JRcHkxeUViV01OM3o4dlE9PSIsInZhbHVlIjoiL05zdllCb2xwZUVDaUVRajM1RDRnQ1J4aWxyWFhPK2toWnRReWd6cE80N0U4N24wa2VXVjdMUzEvb3hsSUFGSXhTMTVPU2xaWjFFUlVtTmliYmc0aEJzTko2eWIrbXJNcTlqanZ4Qm9paGs9IiwibWFjIjoiMzExMzY4M2IzNjQwYTdiYTM0OWIwMmUzNjQ3YWE1NjQyMWJjOGIwNjNlMzg3OWM2ZTcxZTBmMzgxZGRhMWUxMCIsInRhZyI6IiJ9; userPermID=eyJpdiI6ImNzdk9ZQ2hxYkp5c2pkR01qRzM2MlE9PSIsInZhbHVlIjoiWjhzYytnSFlaVWlMS3ZHdDZBenlvcHV3Tm4xK3VNSWRjc0tZUWpuU1pRSU1yQnpwU2p5NCt5SG1RRkduQ1d1eCtkMFRwQ1NiL25icUhVY2RiZFdCcXRqejZCRjRpclRtYW85QUJ5SzBRcG89IiwibWFjIjoiYTA3MDM0NDRlOTg4MjM1ZmE4NzlkZDQzZjA5YWZmN2VjMjE3MjAzMDUyYjIyM2FkNmM1YmI5YzEwMTY3OTMyZSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: no-cache, private\r\nLocation: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nContent-Type: text/html; charset=utf-8\r\nX-Varnish: 60169655331\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 838\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:32 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6IjdMOXZGYUY2aHNJMld3c0Ryb0d0UVE9PSIsInZhbHVlIjoiQi95ZGxGNk9ZdjhkaGo3VDdiRnczTDROUlZsZ0JPMGo1Yys5ZXJHOXJsSzF0ZDdjdDRxUmxtN0dZR0JxVlJac3VCTVZMWHY2eU4xMVhlOEpVWFJzT2oyVFNRSFEvYUZ3WHc3V0Q0dWRhQ3FDalo2eFA4ZlB2WE5Sb25paG9nblMiLCJtYWMiOiJlNTU5YTEzYTA2YjRjMjRiMWFlZmJkNWJhMDk5ZTA2NmRkZWJiNDZlN2YyZWI0ZTBjYTVhODAyOTBiMjI0OGRjIiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:32 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6IlVPV0tmNzVvNFpmQlcrbGpOYlVBRVE9PSIsInZhbHVlIjoiTHNwUkVsUFRSZzZXKzkxbTkwWUt4MkRSa3FHSGZhREVEMk5oNkh3YU9aUGVlbmlLTGlFZ0tCTERSS0ErTTErbTlKWGFCZDJMMWk3WUw5elk2L3hyRWVLd0piWFJtZ0lDRVB2bWlwVmhTSjQ9IiwibWFjIjoiMWVlMTA5N2ExNzk1MDI3MDdkZTJhZjE0ZmRlYTdjYTcyN2NjNjg3MzMyNWI2MWVkYWY5M2U2NTJjMDExMjQwMSIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6IlFqcFN2Nk5Rbk8zUUJjNklObkNFRHc9PSIsInZhbHVlIjoiL2kzS2w1VVQ5UExIY042RUovS3lUaHlYZ0VkcFhEcmpNcnYvaTArOHZRMlU0N2RNSThUaU9kMmVsT2RVUlh1YWs3dXZUTHNhYTdMREwzc1RpYzFqTTlKdVNKK2w4VTQxcTV6aCtWNm1oRlk9IiwibWFjIjoiZDJjMDU4YmYzZGQzMjQ5ZjVlMzMzMjY4Y2NhMGU3ODEwYjhmOWZkZGI1YTgzOWI0MjlhNzk1ZTZhNjdiYTg3OCIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:32 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nctxid=eyJpdiI6IkJWLzJZcENLSmk4QkU1SXZZSmRCSkE9PSIsInZhbHVlIjoiemhwM29VbFZnRTRGY0xWay8vSkxyUHNLcFNVU2h4NEFJeFZDSkdncGplaGJWOVkvc3IvangvQjIwOHZ4OWt4elVxb08xdm5SQ1g1UWovaG9rRGRCWEpaWmR0TXFTckJsaGJiRlZUR2syVVU9IiwibWFjIjoiYzQ2Y2E1YjA1MTVkOWRmMWQzZjhjMDEzNWQ3ZTJmZWRmYjgzYTIxYzlkZGExNzQ4YzVhNmE5ZGI5ZjY4NDhlMiIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:31 GMT; Max-Age=0; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=999\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/assets/fonts/mtnbrightersans-regular-webfont.ttf","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/assets/fonts/mtnbrightersans-regular-webfont.ttf HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/assets/247Comcare-music-trivia-landing-otp-en-doi-web.css?ver=48\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 02:03:53 GMT\r\nLast-Modified: Tue, 26 Aug 2025 11:00:32 GMT\r\nETag: \"d0d8-63d4294be61b4-gzip\"\r\nContent-Type: font/ttf\r\nX-Varnish: 60169655337 60169426246\r\nAge: 100\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 28400\r\nKeep-Alive: timeout=5, max=995\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":53464,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"FFTM\", 18 names, Microsoft, language 0x409, Copyright � 2017 Newlyn Works Limited. All rights reserved.MTN Brighter SansRegular1.100;NEWL;MT","md5":"a67bc096b92acd50796fe0fe861d4d8c","sha1":"3722aef8bd4afd250292b13b52718275b32b15e2","sha256":"f915681f266ccd3b4e80e13d3e541b2462d2ce6be4564835f1466fad0d2884be","sha512":"d222c64000e6fc5451fdb84431a3a395e85f6d750a0729b899558c45da7f250735e348bfb4a29e6bf2642e9f2a9e72de204324734041316e8b117c87c64b2d7d","ssdeep":"1536:o6Q4XoYiK1QWml2vj9b8uvo2u+3cZVdqasFmhB:ZrYG1QWmwvju8bcZVdqasU7","tlshash":"75336c02f381a76fca931d395937d2269ee3f61fdf968771b4482820948a1f52e70dd8","first_seen":"2023-05-15T16:59:15Z","last_seen":"2026-05-19T13:30:40.636263Z","times_seen":162,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/assets/images/mutli-sub-btn-icon-right.png","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/assets/images/mutli-sub-btn-icon-right.png HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/assets/247Comcare-music-trivia-landing-otp-en-doi-web.css?ver=48\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 28 Jul 2025 15:51:14 GMT\r\nLast-Modified: Mon, 18 Sep 2023 11:45:26 GMT\r\nETag: \"14c-605a0ada57e91\"\r\nContent-Length: 332\r\nCache-Control: max-age=5184000\r\nExpires: Fri, 26 Sep 2025 15:51:14 GMT\r\nContent-Type: image/png\r\nX-Varnish: 60168071229 59645781712\r\nAge: 2888059\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=999\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 22, 8-bit/color RGBA, non-interlaced","md5":"e6a3aaad0e0ec403ff38e5f9f1478676","sha1":"c7775840226261abdfafde4d504800ba330bb2a9","sha256":"380f4ac34b3997d1bb019aac71e29bbcf1a3d7afc6a230881f040a28f1b1fceb","sha512":"918f021df643914fc8e36bf3de2724bb5b2b6b3a9d69c298936c7d48b06021dd7f3aa56cbd56113ef281cb9c67cf108d983d4895f793295a5bcae1f37023de64","ssdeep":"","tlshash":"abe02dca319e943bd10eda82d23e923078863880731261bc0c0ba82e341db83c0ac350","first_seen":"2024-09-24T16:21:29Z","last_seen":"2025-12-10T04:51:26.770559Z","times_seen":75,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:32.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847 HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjdMOXZGYUY2aHNJMld3c0Ryb0d0UVE9PSIsInZhbHVlIjoiQi95ZGxGNk9ZdjhkaGo3VDdiRnczTDROUlZsZ0JPMGo1Yys5ZXJHOXJsSzF0ZDdjdDRxUmxtN0dZR0JxVlJac3VCTVZMWHY2eU4xMVhlOEpVWFJzT2oyVFNRSFEvYUZ3WHc3V0Q0dWRhQ3FDalo2eFA4ZlB2WE5Sb25paG9nblMiLCJtYWMiOiJlNTU5YTEzYTA2YjRjMjRiMWFlZmJkNWJhMDk5ZTA2NmRkZWJiNDZlN2YyZWI0ZTBjYTVhODAyOTBiMjI0OGRjIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IkJWLzJZcENLSmk4QkU1SXZZSmRCSkE9PSIsInZhbHVlIjoiemhwM29VbFZnRTRGY0xWay8vSkxyUHNLcFNVU2h4NEFJeFZDSkdncGplaGJWOVkvc3IvangvQjIwOHZ4OWt4elVxb08xdm5SQ1g1UWovaG9rRGRCWEpaWmR0TXFTckJsaGJiRlZUR2syVVU9IiwibWFjIjoiYzQ2Y2E1YjA1MTVkOWRmMWQzZjhjMDEzNWQ3ZTJmZWRmYjgzYTIxYzlkZGExNzQ4YzVhNmE5ZGI5ZjY4NDhlMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IlFqcFN2Nk5Rbk8zUUJjNklObkNFRHc9PSIsInZhbHVlIjoiL2kzS2w1VVQ5UExIY042RUovS3lUaHlYZ0VkcFhEcmpNcnYvaTArOHZRMlU0N2RNSThUaU9kMmVsT2RVUlh1YWs3dXZUTHNhYTdMREwzc1RpYzFqTTlKdVNKK2w4VTQxcTV6aCtWNm1oRlk9IiwibWFjIjoiZDJjMDU4YmYzZGQzMjQ5ZjVlMzMzMjY4Y2NhMGU3ODEwYjhmOWZkZGI1YTgzOWI0MjlhNzk1ZTZhNjdiYTg3OCIsInRhZyI6IiJ9; userPermID=eyJpdiI6IlVPV0tmNzVvNFpmQlcrbGpOYlVBRVE9PSIsInZhbHVlIjoiTHNwUkVsUFRSZzZXKzkxbTkwWUt4MkRSa3FHSGZhREVEMk5oNkh3YU9aUGVlbmlLTGlFZ0tCTERSS0ErTTErbTlKWGFCZDJMMWk3WUw5elk2L3hyRWVLd0piWFJtZ0lDRVB2bWlwVmhTSjQ9IiwibWFjIjoiMWVlMTA5N2ExNzk1MDI3MDdkZTJhZjE0ZmRlYTdjYTcyN2NjNjg3MzMyNWI2MWVkYWY5M2U2NTJjMDExMjQwMSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: max-age=0, must-revalidate, no-cache, no-store, private\r\nX-Frame-Options: DENY\r\nPragma: no-cache\r\nExpires: Wed, 21 Oct 2015 07:28:00 GMT\r\nStrict-Transport-Security: max-age=0; includeSubDomains\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nX-Varnish: 60335434715\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-pt4l9 (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:33 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:33 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:33 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:33 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:33 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:32 GMT; Max-Age=0; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=998\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6836)","md5":"2457cb097257d3a4463ab4dcfa6603b1","sha1":"bd446a0760aabb0ff97ecc0017f48a4143d85b0b","sha256":"084918f93654a003b091c2f7309ba2fd5b66a6584b10240de3efe882eee09d5f","sha512":"cb6cacec2eed4ca24b5782c40552c3aea90ed0cf339f3efa9a2603e75a9c1cf08ebc643668d9f7a939e1fd21b42e47a0dba12618fa6b8871cbb9dde4b5618a30","ssdeep":"384:hCTnZGzRdMMrBM6F7W9whyrFYgLN9HcYJPHmEouCUBQu:8XSyrFfg4+EX","tlshash":"94d20abe9de163615913a3f0dfe7534a3a6c80278a01c8447adc8a54dfc2998c5dbbdc","first_seen":"2025-08-31T02:05:56.10115Z","last_seen":"2025-08-31T02:05:56.10115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/assets/fonts/roboto-regular-webfont.ttf","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/assets/fonts/roboto-regular-webfont.ttf HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/assets/247Comcare-music-trivia-landing-otp-en-doi-web.css?ver=48\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 31 Aug 2025 02:04:58 GMT\r\nLast-Modified: Tue, 26 Aug 2025 11:00:33 GMT\r\nETag: \"b5b0-63d4294c14fb4-gzip\"\r\nContent-Type: font/ttf\r\nX-Varnish: 60167781074 60169717884\r\nAge: 35\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 26004\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":46512,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"b6acf19171231c3477c8e367f8b3fc90","sha1":"8ee63b95ec6c9b1e3e05f9a11af38b818bbedb45","sha256":"6cd6241ffd12efbbfe72a44df8582720333bf60f768fdeb191da5ebae7888a78","sha512":"0b0e1941eb287521ce2d46f20181442af0e6a55d5355053551ccfe7340ecf99bc2590ebe08f28f32b20021d635944da3f65050ffc7e7589e50284e01edc2e1bc","ssdeep":"768:1W6EfQy+gtXqBzAkmguGFKaDe9gMGQIUfCuQEHh43YQqgr9SfPikNH:I6EfBtXezvmguGnMGQRfA3YQqE9sPiq","tlshash":"40236c15f286a37fcf639c3d46239298e956d72fcf858272908c28a194060f96ff5cd8","first_seen":"2023-08-06T09:21:37Z","last_seen":"2026-05-13T12:31:16.143576Z","times_seen":90,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cg.trackware.click/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:30.583Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749 HTTP/1.1\r\nHost: cg.trackware.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":18,"connect":34,"send":0,"wait":0,"receive":0,"ssl":42},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.764808+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":308,\"redirect\":\"http://cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"length\":417},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":755,\"bytes_toclient\":930,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cg.trackware.click/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:30.691Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749 HTTP/1.1\r\nHost: cg.trackware.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 308 PERMANENT REDIRECT\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 31 Aug 2025 02:05:30 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 417\r\nConnection: keep-alive\r\nLocation: http://cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"PERMANENT REDIRECT","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":37,"dns":1,"connect":36,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.764808+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":308,\"redirect\":\"http://cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"length\":417},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":755,\"bytes_toclient\":930,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cg.trackware.click/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749","fqdn":"cg.trackware.click","domain":"trackware.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:30.779Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749 HTTP/1.1\r\nHost: cg.trackware.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":2,"connect":34,"send":0,"wait":0,"receive":0,"ssl":44},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T02:05:30Z","timestamp":1756605930,"ip_dst":{"addr":"46.101.217.129","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.21","port":52032,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-08-31T02:05:30.929247+0000\",\"flow_id\":1168856792599185,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52032,\"dest_ip\":\"46.101.217.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"cg.trackware.click\",\"url\":\"/routers/?pub=CEREZA\u0026serv=13\u0026click_id=D-21764174-1756605909-34G10G68G122-MSQDV5749\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\",\"length\":473},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1371,\"bytes_toclient\":1791,\"start\":\"2025-08-31T02:05:30.690833+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":80,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:32.237Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IkJBMlpXZWxiNnoycmF6UmNycm1xVlE9PSIsInZhbHVlIjoicFBoalNOZjBSTjNaOTkrMTZLWm4rcmpNU25iMVZzQ3lKbnhrQW5kNUcrZVB0MVJtOU5RL3ZBVWFwcjNHd3IrQ2xvQTcwTXFmL2xFVjN0b2RyRGxRSWN3MGpLaUMvMTFIZjFXRU51S2k1OFhPajNPL3VMVHpMSlJudkZBcWVPUFMiLCJtYWMiOiIyNzA4ZDg1OWQ1Zjg1Y2E5NmQ1ZjExYTQxZDRjNDM1NTA4MDMyMjQxOTI1ZDVhMDAzNGUxYThiODE1YzY4Nzk0IiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IlF0ZkE0VUVaZFA5bmFqQlFwNEhLbXc9PSIsInZhbHVlIjoicmhuRzlvOWRkYjQ3RFNjRWRuQWxnT000UXFkNklhdjdvd21NRVRKdUY1USs2NGYraUp6dEd1U0JwWnRKUmJ6eDNUUkpsU2lyTzMyTWZQRVlEU2RFZ2I0LzJKNHJTbVRMZUlBQk00cm5JNWs9IiwibWFjIjoiZGMyMzhlNGM5N2RhMDEzNDA2ODU1ZDAxMmY1YjNlZThmOWRhNjk5YTE2MTRkNTc1OTExYzUwMWI0OTIzOGYwZiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6IkV1UDMyRFdkb01lY09vaDRDdkdYUFE9PSIsInZhbHVlIjoidlppNE5HVVJEalloMTFBZWs0cE5NaDdYYlFSOG9LZUp5aDdRd3Z1NFFBSUUxOUJYZSsvTDQ5QklmOWExOXhPM0tLRWNicjFXOUFHSGxpMnZwcDRFKzlQQ2xINVZlREZVYlI0ODFuSW1seDg9IiwibWFjIjoiOTUyNzI1ZjliNjkzNTViMmU3MzYyODExZDkwMjYxMjRiMjc3ZmQzNzViMGZiZDQ3OWJhNjViNTcyNWQwMDYwNSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InVrNWY4S0RaOHMydS9hTGZpU2x0ZXc9PSIsInZhbHVlIjoiemw3L29RVTd6TEtBbVpCLzVwY3Q4SVBMOFJhLzRYaFNvNFN6SlBSaWJxcVN2V1RVL1V2VXh1QkhDSHM0Q2pxWkVhckpCOFlzYmpoQzZEMFFmeGxXM0VDcE1yckt6ZEZDOS9UTTd4MTkyR0E9IiwibWFjIjoiNWVlMDliODdjYTE2M2UzZWE0NzE0OTZlYzBhZmZhMGQ3MGI0NzU3OTI5Njk2ODM5Y2NhYTNkZjQ3MDU3NDQ1NCIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: no-cache, private\r\nLocation: http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\r\nContent-Type: text/html; charset=utf-8\r\nX-Varnish: 60169426331\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:32 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6IkpaaUYvbVhDMU5HOUpYL2FtY1pjZ2c9PSIsInZhbHVlIjoiODFVL2tralBUaWZLNU1MZ2ZDTFBldmZPOUo5RGtlejMrdmVpWGxzNzFxNjdrYWYrdnA4V2tORlJqQkhrUXgwSm1LelFiaXR2eTFldGI5THBZeS9maVlreDk4RFAvM2h4OFNQeU1qZysvQi9qS3FGSXRPc0l6WG9adUJoYkpIZFEiLCJtYWMiOiIyYzllODliYmU3YTc2OTNhNDAzODJkNzgwMWNkZjM5NGE2ZWFmMDkwZTc2NzkwMjk5OGIwYmZjNWJhZjRjMjE5IiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:32 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6IklNdzByNFI4eFQrTGc3eGp6U1lTOUE9PSIsInZhbHVlIjoidExvaXNGWGhMQUVNU1dNd0REbVJscEJLa1ZKdmZzc1lEcEJ6Z2ROblYzMVNleGtYbHQzK2FQV1hVT3Jzckl4V2JSRkRhK0J6WGJIZGprMGpiNFRqaE9EUkU1UHRISElpeXZwTXc1Y3BXR2c9IiwibWFjIjoiNjU3ODVkYWQ2ODBkYzYyNjY2Zjc4ZmRjMDc1ZDQ5OGE4NmU0OGIwODE1MDBlNjJlNDk1ZDFlYjNlOGI3ZThiZSIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6Im1UaWJHVXRKaGh6NzJlSnlKZENPNUE9PSIsInZhbHVlIjoidnhJMGhhOE5pbno1OEhDcGdxenVXK2t4S0U3am1VRFBmNElzQXU1TkhWdlF5MUpndTJMSC9rbFVBQ3dUTTVhVW1pNVFUUzVZMHBZSmUvRldCWFA1eE9CN0xZMHUvS01QUFVpaEh6eUs3ZWM9IiwibWFjIjoiYTA5ZDZiYmJiZGEwZjYxNDJlMGUzZGU4Y2U0NDQ3NzZkZTFkOGIwOWFmMDdkMDc1NzA0YjliMjMyOTJlOGE3YSIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:32 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nctxid=eyJpdiI6IjN6ZTV0eGhWOWhuTXgzZnFjVXc5YWc9PSIsInZhbHVlIjoiZzNHQ1RVV2JSN2pSK1ZGejdEVnJKN0FYZGVlcmxzcG9rQitPRlBIUThDalVrNUNrNml5bU5kU0k5eUtiYVpXM29CSWZWTENxcGh1SW5pemQ4TFQ5MHdlTkFna3VnSjA5dW5aZ3gyMUtYSFk9IiwibWFjIjoiYzk4NzMxMjg0NzFjNjUxODZkMmJkNWEyYWM1ZDBkMzA5NWNmZDVkMmI5MzkwYTA2Nzk3MDllY2E3YWU2N2RlOCIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:31 GMT; Max-Age=0; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":66,"dns":1,"connect":65,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":80,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T02:05:32.433Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IkpaaUYvbVhDMU5HOUpYL2FtY1pjZ2c9PSIsInZhbHVlIjoiODFVL2tralBUaWZLNU1MZ2ZDTFBldmZPOUo5RGtlejMrdmVpWGxzNzFxNjdrYWYrdnA4V2tORlJqQkhrUXgwSm1LelFiaXR2eTFldGI5THBZeS9maVlreDk4RFAvM2h4OFNQeU1qZysvQi9qS3FGSXRPc0l6WG9adUJoYkpIZFEiLCJtYWMiOiIyYzllODliYmU3YTc2OTNhNDAzODJkNzgwMWNkZjM5NGE2ZWFmMDkwZTc2NzkwMjk5OGIwYmZjNWJhZjRjMjE5IiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjN6ZTV0eGhWOWhuTXgzZnFjVXc5YWc9PSIsInZhbHVlIjoiZzNHQ1RVV2JSN2pSK1ZGejdEVnJKN0FYZGVlcmxzcG9rQitPRlBIUThDalVrNUNrNml5bU5kU0k5eUtiYVpXM29CSWZWTENxcGh1SW5pemQ4TFQ5MHdlTkFna3VnSjA5dW5aZ3gyMUtYSFk9IiwibWFjIjoiYzk4NzMxMjg0NzFjNjUxODZkMmJkNWEyYWM1ZDBkMzA5NWNmZDVkMmI5MzkwYTA2Nzk3MDllY2E3YWU2N2RlOCIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Im1UaWJHVXRKaGh6NzJlSnlKZENPNUE9PSIsInZhbHVlIjoidnhJMGhhOE5pbno1OEhDcGdxenVXK2t4S0U3am1VRFBmNElzQXU1TkhWdlF5MUpndTJMSC9rbFVBQ3dUTTVhVW1pNVFUUzVZMHBZSmUvRldCWFA1eE9CN0xZMHUvS01QUFVpaEh6eUs3ZWM9IiwibWFjIjoiYTA5ZDZiYmJiZGEwZjYxNDJlMGUzZGU4Y2U0NDQ3NzZkZTFkOGIwOWFmMDdkMDc1NzA0YjliMjMyOTJlOGE3YSIsInRhZyI6IiJ9; userPermID=eyJpdiI6IklNdzByNFI4eFQrTGc3eGp6U1lTOUE9PSIsInZhbHVlIjoidExvaXNGWGhMQUVNU1dNd0REbVJscEJLa1ZKdmZzc1lEcEJ6Z2ROblYzMVNleGtYbHQzK2FQV1hVT3Jzckl4V2JSRkRhK0J6WGJIZGprMGpiNFRqaE9EUkU1UHRISElpeXZwTXc1Y3BXR2c9IiwibWFjIjoiNjU3ODVkYWQ2ODBkYzYyNjY2Zjc4ZmRjMDc1ZDQ5OGE4NmU0OGIwODE1MDBlNjJlNDk1ZDFlYjNlOGI3ZThiZSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 31 Aug 2025 02:05:32 GMT\r\nCache-Control: no-cache, private\r\nLocation: http://ng-app.com/247Comcare/music-trivia-landing-en-doi-web?origin_banner=1\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\u0026trfsrc=CEREZA\r\nContent-Type: text/html; charset=utf-8\r\nX-Varnish: 60168335484\r\nAge: 0\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nX-Cache: MISS\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: _ga=GA1.2.7512032258.1756605932; expires=Fri, 27 Feb 2026 02:05:32 GMT; Max-Age=15552000; path=/\nng_session=eyJpdiI6IjV4aGNKV25qS2dSTmdROG9JVy9PZnc9PSIsInZhbHVlIjoia203aGQ1b1JwYVlVc0NQYkJtbGZpN0xZa2dLei9MampPVmsrVjdDR0hpMXkwVGF2d0w0N05hd0sxY21OZkZkR2pLQlVvWk5Jb0Q0WFN0OFU1YnQ2WDlmQjFoaFB3M2RaWm1qZDlKRzg0cTdYWk4wOHZ3REZiUEIrNTdoTHA4aTIiLCJtYWMiOiIxYWIxNzNjOTVjYmRkOThlOTU3MWIzZmFhNjVmYTIyMDRlYmIzOTIyMWZmNTFlNjAzN2ExZjBlMmQ4Yjc4NDBhIiwidGFnIjoiIn0%3D; expires=Sun, 31 Aug 2025 08:05:32 GMT; Max-Age=21600; path=/; httponly; samesite=lax\nuserPermID=eyJpdiI6IkFOSTJHYS9pS1pEUjkwWHdSUS90R1E9PSIsInZhbHVlIjoiWHhQcXBhRW52NGJLWmw1aTZIQmoxdDB6ZDl1VEM2NmVVam9ZYnpjeWFSWkNjT0NMeTdHdStTbzZxYzZUUmw2VjZLOEYybTZHelF1cDRIdHFDd3RySkFWSjhSb1YxeEZmQ052NHBhTUJzN0E9IiwibWFjIjoiMGVlN2NlMDRhZmEzNzEyOTU0NDBmYjg1OTk1NmU3MzhhMDA2Mjc1YjAyYjdkMjJhMTJkZDYxZTQ3MzQ5ZDhlYSIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nuserSessionID=eyJpdiI6IlZTZjdLSXh2Z05KRmFOT1haUTNCZnc9PSIsInZhbHVlIjoiMWVrVmRURDd3MW5WL2h3QjdyQzJYZXpBWmtXYW9ZcU12OUJ0QWFhMmRqSkV6ZmpRT2pVYXRuckZUc1FLUENBTjBCOEplSWxMVk9kRVBqYW9jMlRRSXJGSUhJZ0VmSERYRnhGQmdLMFFOM3c9IiwibWFjIjoiZGIzZjRlYWU4NjQ0MDkyMDU5OTg3NjRkYzU1MzI4Y2Y5MjExMmRhNDQxNjlhN2NhMTM5ZDE1MmEyMDZiMWNiMyIsInRhZyI6IiJ9; expires=Sun, 31 Aug 2025 02:35:32 GMT; Max-Age=1800; path=/; httponly; samesite=lax\nctxid=eyJpdiI6Im5IU1ZZZ2M0QnNZTGRIaTRqWjhSckE9PSIsInZhbHVlIjoiT0tWYWs5QlIvMkpxZ1ZXb3MvV1ArcDhqblFqT1MzeWlIQTRTZFZUMW9XSm1Oc0FqREtPcEd6NCtuNWYrcElSK0pZWWwrL29hQTlKK0pqMDZhc0Y1dkp5bTRGc1I2ekxxM1pqY2FNSXRUNGM9IiwibWFjIjoiMmVkMjJlNDYxZmVhMjRjYTdmYWJiY2RjMDU2ZTFmZjU0YzYyYzIwN2E0ZWMwOWQ1NTc0OGZjZjAwODVjNmM4NyIsInRhZyI6IiJ9; expires=Wed, 29 Aug 2035 02:05:32 GMT; Max-Age=315360000; path=/; httponly; samesite=lax\nrd=deleted; expires=Sat, 31 Aug 2024 02:05:31 GMT; Max-Age=0; path=/; httponly; samesite=lax\nTS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804; Path=/; Domain=.ng-app.com;\r\nKeep-Alive: timeout=5, max=999\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/assets/images/NMD/MusicTriviaBanner.png","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /assets/images/NMD/MusicTriviaBanner.png HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 28 Jul 2025 15:51:07 GMT\r\nLast-Modified: Thu, 05 Dec 2024 14:20:30 GMT\r\nETag: \"14d21-6288699c2b6d3\"\r\nContent-Length: 85281\r\nCache-Control: max-age=5184000\r\nExpires: Fri, 26 Sep 2025 15:51:07 GMT\r\nContent-Type: image/png\r\nX-Varnish: 60169426348 59669324673\r\nAge: 2888066\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":85281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 160, 8-bit/color RGBA, non-interlaced","md5":"4abe7880d1e112e073dad9bc18e4b236","sha1":"c939568176953d4a3705dee65c158c89a4b17541","sha256":"1398643ca11b7ddd16ec960e17fd6f550656c70dd5e730b18854135504850be6","sha512":"97a25f86224f99f201da3e03b0efb3efece891e8b454cbe39c0276b4db140df8a1901b875dfa3f4693c73f5b2f40d9a27bce94702839f3278d9ff63cc115f51a","ssdeep":"1536:+enAPvsf4WBOKqXXfRDFOiqWTQY9h8SF3piKF2TLkRig7dZx1Z:NAPEf4VH5BFzH3prFmLkR9fx1Z","tlshash":"3e83129e510820ef07039b2c7e6716f9d2147bad974c1f211b4ccae32ed5e85cc76aa9","first_seen":"2025-08-06T18:10:04.256264Z","last_seen":"2025-12-01T00:32:10.317988Z","times_seen":16,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":201,"dns":1,"connect":69,"send":0,"wait":69,"receive":133,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ng-app.com/247Comcare/assets/images/mutli-sub-footer-logo.png","fqdn":"ng-app.com","domain":"ng-app.com","tld":"com"},"ip":{"addr":"91.241.95.201","port":443,"asn":49582,"as":"Upstream Software And Telecommunications Systems S.m.s.a","country":"Greece","country_code":"GR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847","date":"2025-08-31T02:05:33.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ng-app.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 20 Jan 2025 15:13:41 GMT","end":"Sat, 21 Feb 2026 15:13:41 GMT"},"fingerprint":{"sha1":"FD:D9:50:03:65:EF:FA:9B:AE:80:A0:D2:15:E6:AA:7B:9D:2E:3E:01","sha256":"A4:08:5A:67:C2:0A:63:3E:E4:6C:6B:34:7E:DE:97:08:73:C6:96:A4:04:24:5E:F4:7E:94:19:25:F1:EA:A7:61"}}},"request":{"raw":"GET /247Comcare/assets/images/mutli-sub-footer-logo.png HTTP/1.1\r\nHost: ng-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ng-app.com/247Comcare/music-trivia-landing-otp-en-doi-web?origin_banner=1\u0026trfsrc=CEREZA\u0026trxId=CE66aa2c88-506a-48f5-9afa-883832db5847\r\nCookie: _ga=GA1.2.7512032258.1756605932; ng_session=eyJpdiI6IjRlRFZ5dXhnQklTSHNQSHl0ZXdZWWc9PSIsInZhbHVlIjoiSnJkT3FzMzY5enovSHQ5SDRHTWRoUG8vQVNOWmdVK2FXME1tQ25QdWFhSFFjVTRrM3Vzb1BrTDUrUk1vZnhCNTJDaUVSWnRPRkI4V3VXQnRMY3hnY0NteG1GN0pwT1Urb3ZmdVdIbTR6bEJ5ZWNnNzUzWHRVZ3Y5SktKN3BvbEYiLCJtYWMiOiIzNzRhMWNmMWFhNGNjNGE4OWFhNjZkYzE3ZmI1NGJhMWRjNzYxYjMxZGI4NTY4MzQyYzM5OTg3ZWM3NDEwMWJiIiwidGFnIjoiIn0%3D; ctxid=eyJpdiI6IjVORXBVSmZrY1pHWnNkL0EvN3ZBQWc9PSIsInZhbHVlIjoiRXhrT1c0TFhYWWFqWUJtMldCUWJaTFRDaVlFbXdzNHpmVVowVkp5NWhHR0RqRlhBd0pPSTNBNzNqK0xqcjlRUkhBK01XVEovOGtDVm9QQXFUaG8yK3FVNXY0ZG9uSFZ4WEZEaXhmY2JnZ0E9IiwibWFjIjoiZGE5YTA0M2Y0YmUxYTk2M2MwYmM1NjYzZDhiZTcwNGQ5YTA1ZGY5ODk4OTBhNzNmMGUyMDlmMDk0ZmFkNGIyMiIsInRhZyI6IiJ9; userSessionID=eyJpdiI6Img5UHdidFRIUm5sYXZ3djhvajdjZ2c9PSIsInZhbHVlIjoiMHIxM0NmcWN4YjV4S0RqRGk5UzhHYXhSZDdxaTJ4YWs2SXVWWVRCOHF6bEVmOXlGdHpISmV3RUF5aFdqU01Jb3EydTRkMEM3SVZ6bEVGcyt4b3RQY25KMGpxekxLYW9NVThYS1JwYXVVams9IiwibWFjIjoiYjNkOGQ4YzcxZDg3NzJiNDJjNjQ3ZWNjYTZiN2I0YTZiNWMzMGJjM2JmNzc2NTZhZDkwY2FhZmRlNGJiOGY2ZSIsInRhZyI6IiJ9; userPermID=eyJpdiI6InBuakZxY2syTGJCYURMZTg2ZTJ2U3c9PSIsInZhbHVlIjoiSkpYTmx4Y1RqdTJIVXR2MmhBcWM2citHZHFldmkreHJKTmhqNkhabytCOWk3WUxYbkNGejBzZTAzTm9DSjJDcDRkdDFoWjJKTm42d0RBYzBzWWhkMTNjSWtBSUtnUFpUMmhvUllpdS9Fak09IiwibWFjIjoiODVmNDAyODlmOWJiOTdjYmYxMTc0OGI5NDEzNGEzNTA5ZjdiNGEzZGIyNjYyYzg3NzIyZDRjMmI2ZmVhNDE0YSIsInRhZyI6IiJ9; TS01e2a186=01b02e3e899db5b32b9864667bbb59a03f62ffa3f34e306e6d0c451a72ccf4f4479ec3720e2767dc95000f5cc7ed6094bb5693b804\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 28 Jul 2025 23:24:26 GMT\r\nLast-Modified: Mon, 18 Sep 2023 11:45:07 GMT\r\nETag: \"424-605a0ac83a0e2\"\r\nContent-Length: 1060\r\nCache-Control: max-age=5184000\r\nExpires: Fri, 26 Sep 2025 23:24:26 GMT\r\nContent-Type: image/png\r\nX-Varnish: 60167781073 59674344070\r\nAge: 2860867\r\nVia: 1.1 ngmtn1-varnish-65c8f4f546-xqcgq (Varnish/7.4)\r\nAccept-Ranges: bytes\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 30, 8-bit/color RGBA, non-interlaced","md5":"055198bf1d8920db44a97022404ec249","sha1":"796e6657649f83782d46007bc5e8cd632ee92b87","sha256":"8341efcee9fe5efff6c44776fb74d8c135a3dbf1cd293d01d37c00b57fae1496","sha512":"dcfeb39edf64f781ae8a78b396549c15fda0d561e75f15732f96db37b2ad592522b623129496cf02be00432c8ae10594a19e8740522311be5f5f23b88de61e90","ssdeep":"","tlshash":"d91186c7ea0bd671cc25416adf4a7f75c8d2195bf1000c2e49219caa8cee45b06657bf","first_seen":"2024-09-24T16:21:29Z","last_seen":"2026-05-23T09:24:05.542806Z","times_seen":531,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":196,"dns":1,"connect":68,"send":0,"wait":71,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}