{"report_id":"44295687-6418-4509-beef-61517652e742","version":6,"status":"done","tags":[],"date":"2025-03-05T19:48:32Z","url":{"schema":"http","addr":"wwddd.buzz","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":0,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"wwddd.buzz/","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"title":"Purenudism,Petite Nudists,Family nudism, NUDISM,nudist"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-14T19:48:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"c9c90f0ffa.5fc96ec3c7.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-02-03","domain_rank":0,"first_seen":"2025-03-05T03:02:05.959384Z","last_seen":"2025-03-05T03:02:05.959384Z","alert_count":5,"request_count":5,"received_data":1725,"sent_data":4145,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.mbidadm.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":0,"first_seen":"2023-02-21T18:08:24Z","last_seen":"2025-03-03T17:06:53.678533Z","alert_count":0,"request_count":1,"received_data":2118,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"storage.multstorage.com","ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-22","domain_rank":0,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2025-03-02T03:45:33.327602Z","alert_count":0,"request_count":5,"received_data":9010,"sent_data":2665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":0,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-02-28T20:40:54.404411Z","alert_count":0,"request_count":10,"received_data":3753,"sent_data":5276,"comment":"","tags":null,"fingerprints":null},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":38563,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2025-03-05T03:02:06.730118Z","alert_count":0,"request_count":5,"received_data":2545,"sent_data":2320,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":316718,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-03-02T03:45:33.706167Z","alert_count":0,"request_count":5,"received_data":1995,"sent_data":2050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":25762,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2025-03-05T03:02:06.369431Z","alert_count":0,"request_count":9,"received_data":622334,"sent_data":3763,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wwddd.buzz","ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"domain_registered":"2025-02-19","domain_rank":0,"first_seen":"2025-03-05T19:48:32.569711Z","last_seen":"2025-03-05T19:48:32.569711Z","alert_count":7,"request_count":7,"received_data":72061,"sent_data":3096,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.490790+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":679,\"bytes_toclient\":7590,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.648023+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/1.gif\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":11,\"pkts_toclient\":10,\"bytes_toserver\":1598,\"bytes_toclient\":9300,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.676943+0000\",\"flow_id\":1773094209097443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59528,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/2.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":717,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.626403+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59544,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.681742+0000\",\"flow_id\":665817280456312,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59544,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/33.gif\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":718,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.632440+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59542,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.681502+0000\",\"flow_id\":990761621169581,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59542,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/22.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":718,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.632237+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:13Z","timestamp":1741204093,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:13.260060+0000\",\"flow_id\":1773094209097443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59528,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1289,\"bytes_toclient\":860,\"start\":\"2025-03-05T19:48:12.626403+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e936cad37e18ba5bc2f07acd57447d6","sha1":"f55969248208bb6871e28b9478761ffb25207c35","sha256":"e98e6a93ea15df4d4fe1e38c890f29512d739f493428436defb914775df550f8","sha512":"87a585718ff8099836a389311a8997bc11ac650b376132332ef3a233fb40744df3ec5a89cc6a7e755482f4d048e98c21088c646f2f6f695f2e9b918c36632408","ssdeep":"","tlshash":"ed3112ebb4e9873b229c51c5f436ddc02c9cd926ea14060692bdc84e18c8c971ccf83d","size":1735,"data":"","first_seen":"2024-04-09T16:57:02Z","last_seen":"2025-09-01T09:10:36.758837Z","times_seen":4847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16e1f9022fa537a6a2ec170949397376","sha1":"341d27b7ac1bb5f22f032ab4c14f7589e452bea9","sha256":"440204bc5125e5ffb0fa553c188a3640f1d0f6779bd0a11076133b1d20f1926b","sha512":"2e398418af3f928f36e49d5632d118c61b10e8a01c8234e69fb6aefc56e1c850fc8c663ba33512e50b1537cd4acfdcfa2df272f4cf3c34b2d5386550e2f2c883","ssdeep":"","tlshash":"c2014c0eb2542c9c5850817e796b3e2179b57064803f6d617536f9c23b90cce8293fc2","size":693,"data":"","first_seen":"2025-03-03T17:07:02.778421Z","last_seen":"2025-11-06T10:55:58.221542Z","times_seen":8126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53fce41a407de491fcde2dd0ac9ae859","sha1":"dc08fa40bf32b2986018e9bc2f6da4281cde65ab","sha256":"3ef49bdcf46d81b00b822d16131e33065cec24c83159cc9a94e938f9729ed951","sha512":"a2d6b7c042fcb411373a0c1edd93a12c9bcbb4f063d860e7eaebac4a5a0cef7773cb0e676fd3981e1a675f91eb35e79a8ac358ae0c557316cbfbd286f5e957d5","ssdeep":"1536:WySEASdnfD+hRkcP+JPS5r3mfdU2YJ1dHJlzO8uz78VZBZzczHzXQb+yUJ:D+/kJP63mfdU2k1DlSH658","tlshash":"f7c33bcdb2c7b17443e76164d43f1206b73a2a16780c8414f6a6eac0787dd9b9227f7a","size":122382,"data":"","first_seen":"2025-03-05T15:03:39.171447Z","last_seen":"2025-03-26T13:28:22.980938Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53fce41a407de491fcde2dd0ac9ae859","sha1":"dc08fa40bf32b2986018e9bc2f6da4281cde65ab","sha256":"3ef49bdcf46d81b00b822d16131e33065cec24c83159cc9a94e938f9729ed951","sha512":"a2d6b7c042fcb411373a0c1edd93a12c9bcbb4f063d860e7eaebac4a5a0cef7773cb0e676fd3981e1a675f91eb35e79a8ac358ae0c557316cbfbd286f5e957d5","ssdeep":"1536:WySEASdnfD+hRkcP+JPS5r3mfdU2YJ1dHJlzO8uz78VZBZzczHzXQb+yUJ:D+/kJP63mfdU2k1DlSH658","tlshash":"f7c33bcdb2c7b17443e76164d43f1206b73a2a16780c8414f6a6eac0787dd9b9227f7a","size":122382,"data":"","first_seen":"2025-03-05T15:03:39.171447Z","last_seen":"2025-03-26T13:28:22.980938Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c8f9a6894c7d8253058b4186f6e95ce","sha1":"8983ea4d74121f227d7d414cc5a36e0b1a76bf65","sha256":"3c35cb3d119cbd682dd8eec8ba14aa70ab5f8e9a2161d07a20569e13cb927aaf","sha512":"dcb5bee0c99147ac1905e376adf2daeb97f323a7472ecf7ec767bac2499806250cce188f21b031bd5b277f6064eafc95c48ff7543356620d0d39caf9f6c6e3ef","ssdeep":"","tlshash":"7e6141b1f35e246d80a90a960aba97d8b93c8236185e9843fc28d934107094b937fdfc","size":3263,"data":"","first_seen":"2025-03-05T19:48:34.162223Z","last_seen":"2026-01-18T18:55:54.234087Z","times_seen":38,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.490790+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":679,\"bytes_toclient\":7590,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e14d1597d1dd442175d8ee15cb07f07","sha1":"de55b2463f332f2096d788047f8a7b07a776e437","sha256":"cf31e107e8cb091c9477fe99de3a57a65486fe87becf0e8f469846949beff9f3","sha512":"0079828ec0331fe425c6abf6eb1bbff48419a304e2031d7c6446f8b2eff60a2323e75675699ae1f7ab2f579f1a7d20e6931a28b840f8d44837ab193360e8aa2f","ssdeep":"","tlshash":"cc3114deb8f9873b219c51c5f436dec42c9cd926ea18014282adc84d18c8c871ccf43d","size":1732,"data":"","first_seen":"2024-04-12T00:52:21Z","last_seen":"2025-09-01T08:40:28.229265Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53fce41a407de491fcde2dd0ac9ae859","sha1":"dc08fa40bf32b2986018e9bc2f6da4281cde65ab","sha256":"3ef49bdcf46d81b00b822d16131e33065cec24c83159cc9a94e938f9729ed951","sha512":"a2d6b7c042fcb411373a0c1edd93a12c9bcbb4f063d860e7eaebac4a5a0cef7773cb0e676fd3981e1a675f91eb35e79a8ac358ae0c557316cbfbd286f5e957d5","ssdeep":"1536:WySEASdnfD+hRkcP+JPS5r3mfdU2YJ1dHJlzO8uz78VZBZzczHzXQb+yUJ:D+/kJP63mfdU2k1DlSH658","tlshash":"f7c33bcdb2c7b17443e76164d43f1206b73a2a16780c8414f6a6eac0787dd9b9227f7a","size":122382,"data":"","first_seen":"2025-03-05T15:03:39.171447Z","last_seen":"2025-03-26T13:28:22.980938Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53fce41a407de491fcde2dd0ac9ae859","sha1":"dc08fa40bf32b2986018e9bc2f6da4281cde65ab","sha256":"3ef49bdcf46d81b00b822d16131e33065cec24c83159cc9a94e938f9729ed951","sha512":"a2d6b7c042fcb411373a0c1edd93a12c9bcbb4f063d860e7eaebac4a5a0cef7773cb0e676fd3981e1a675f91eb35e79a8ac358ae0c557316cbfbd286f5e957d5","ssdeep":"1536:WySEASdnfD+hRkcP+JPS5r3mfdU2YJ1dHJlzO8uz78VZBZzczHzXQb+yUJ:D+/kJP63mfdU2k1DlSH658","tlshash":"f7c33bcdb2c7b17443e76164d43f1206b73a2a16780c8414f6a6eac0787dd9b9227f7a","size":122382,"data":"","first_seen":"2025-03-05T15:03:39.171447Z","last_seen":"2025-03-26T13:28:22.980938Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e936cad37e18ba5bc2f07acd57447d6","sha1":"f55969248208bb6871e28b9478761ffb25207c35","sha256":"e98e6a93ea15df4d4fe1e38c890f29512d739f493428436defb914775df550f8","sha512":"87a585718ff8099836a389311a8997bc11ac650b376132332ef3a233fb40744df3ec5a89cc6a7e755482f4d048e98c21088c646f2f6f695f2e9b918c36632408","ssdeep":"","tlshash":"ed3112ebb4e9873b229c51c5f436ddc02c9cd926ea14060692bdc84e18c8c971ccf83d","size":1735,"data":"","first_seen":"2024-04-09T16:57:02Z","last_seen":"2025-09-01T09:10:36.758837Z","times_seen":4847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e936cad37e18ba5bc2f07acd57447d6","sha1":"f55969248208bb6871e28b9478761ffb25207c35","sha256":"e98e6a93ea15df4d4fe1e38c890f29512d739f493428436defb914775df550f8","sha512":"87a585718ff8099836a389311a8997bc11ac650b376132332ef3a233fb40744df3ec5a89cc6a7e755482f4d048e98c21088c646f2f6f695f2e9b918c36632408","ssdeep":"","tlshash":"ed3112ebb4e9873b229c51c5f436ddc02c9cd926ea14060692bdc84e18c8c971ccf83d","size":1735,"data":"","first_seen":"2024-04-09T16:57:02Z","last_seen":"2025-09-01T09:10:36.758837Z","times_seen":4847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e936cad37e18ba5bc2f07acd57447d6","sha1":"f55969248208bb6871e28b9478761ffb25207c35","sha256":"e98e6a93ea15df4d4fe1e38c890f29512d739f493428436defb914775df550f8","sha512":"87a585718ff8099836a389311a8997bc11ac650b376132332ef3a233fb40744df3ec5a89cc6a7e755482f4d048e98c21088c646f2f6f695f2e9b918c36632408","ssdeep":"","tlshash":"ed3112ebb4e9873b229c51c5f436ddc02c9cd926ea14060692bdc84e18c8c971ccf83d","size":1735,"data":"","first_seen":"2024-04-09T16:57:02Z","last_seen":"2025-09-01T09:10:36.758837Z","times_seen":4847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53fce41a407de491fcde2dd0ac9ae859","sha1":"dc08fa40bf32b2986018e9bc2f6da4281cde65ab","sha256":"3ef49bdcf46d81b00b822d16131e33065cec24c83159cc9a94e938f9729ed951","sha512":"a2d6b7c042fcb411373a0c1edd93a12c9bcbb4f063d860e7eaebac4a5a0cef7773cb0e676fd3981e1a675f91eb35e79a8ac358ae0c557316cbfbd286f5e957d5","ssdeep":"1536:WySEASdnfD+hRkcP+JPS5r3mfdU2YJ1dHJlzO8uz78VZBZzczHzXQb+yUJ:D+/kJP63mfdU2k1DlSH658","tlshash":"f7c33bcdb2c7b17443e76164d43f1206b73a2a16780c8414f6a6eac0787dd9b9227f7a","size":122382,"data":"","first_seen":"2025-03-05T15:03:39.171447Z","last_seen":"2025-03-26T13:28:22.980938Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.m.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:07 GMT\r\netag: W/\"67c84cb7-1de0e\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122382,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/favicon.ico","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.239Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: sloth_src=noref; sloth_cc=0; sloth_sc=0; sloth_nosend=67c8aa7c%253A00%253ATnoref%253A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:13Z","timestamp":1741204093,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:13.260060+0000\",\"flow_id\":1773094209097443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59528,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":6,\"pkts_toclient\":4,\"bytes_toserver\":1289,\"bytes_toclient\":860,\"start\":\"2025-03-05T19:48:12.626403+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c9c90f0ffa.5fc96ec3c7.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjEzNzIwNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjE0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"c9c90f0ffa.5fc96ec3c7.com","domain":"5fc96ec3c7.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9c90f0ffa.5fc96ec3c7.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Mar 2025 02:47:58 GMT","end":"Sat, 31 May 2025 02:47:57 GMT"},"fingerprint":{"sha1":"1F:35:03:1A:EA:73:39:87:1F:AB:21:38:A4:46:65:07:B6:FC:1A:22","sha256":"35:C4:4B:52:9E:0C:BD:1D:54:66:1B:BA:23:FA:44:BA:F3:8A:FB:99:D7:53:27:14:A3:B9:C2:E6:7A:E5:D8:0A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjEzNzIwNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjE0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: c9c90f0ffa.5fc96ec3c7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ah1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c9c90f0ffa.5fc96ec3c7.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjM2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"c9c90f0ffa.5fc96ec3c7.com","domain":"5fc96ec3c7.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9c90f0ffa.5fc96ec3c7.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Mar 2025 02:47:58 GMT","end":"Sat, 31 May 2025 02:47:57 GMT"},"fingerprint":{"sha1":"1F:35:03:1A:EA:73:39:87:1F:AB:21:38:A4:46:65:07:B6:FC:1A:22","sha256":"35:C4:4B:52:9E:0C:BD:1D:54:66:1B:BA:23:FA:44:BA:F3:8A:FB:99:D7:53:27:14:A3:B9:C2:E6:7A:E5:D8:0A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjM2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: c9c90f0ffa.5fc96ec3c7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:15 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ah1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wwddd.buzz/","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-05T19:48:11.996Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.490790+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":679,\"bytes_toclient\":7590,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidadm.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Feb 2025 02:33:46 GMT","end":"Tue, 13 May 2025 02:33:45 GMT"},"fingerprint":{"sha1":"A4:D0:9C:38:6A:8F:BA:81:13:85:C5:61:B5:6E:64:75:DD:44:58:94","sha256":"D8:4B:F4:4B:5E:E6:B5:E7:D9:14:CC:70:2D:9A:19:A4:11:1D:AC:DD:F8:C7:07:59:6B:61:6B:74:B1:65:1B:76"}}},"request":{"raw":"GET /static/scripts.js HTTP/1.1\r\nHost: js.mbidadm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:03 GMT\r\netag: W/\"67c84cb3-6c4\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1732,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1884), with no line terminators","md5":"920f349834adf2faa94a7c6047814e52","sha1":"34557304112fe9d61f23b8f89ceead6db43b98d4","sha256":"2ddd6ffb00a0971092562d2c424678425e8496d315e38967a4ca2e26fdcfeafc","sha512":"a6fa5888acf338b2bb56f143c05c7c1befb5cf65695988389ab7315a66c53d187d094cd4bb394608289fb6ac376d0e03a5356c667c55e97b59326a11b7e0e886","ssdeep":"","tlshash":"d241cceeb82ec332111c4e8af67e1de53cdcd917d4173e155299c80a65c48790e8e829","first_seen":"2024-04-21T21:10:22Z","last_seen":"2025-04-02T03:03:51.077799Z","times_seen":199,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":109,"dns":33,"connect":30,"send":0,"wait":34,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/xxss_files/1.gif","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.640Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /xxss_files/1.gif HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: sloth_src=noref; sloth_cc=0; sloth_sc=0; sloth_nosend=67c8aa7c%253A00%253ATnoref%253A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.648023+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/1.gif\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":11,\"pkts_toclient\":10,\"bytes_toserver\":1598,\"bytes_toclient\":9300,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.m.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:07 GMT\r\netag: W/\"67c84cb7-1de0e\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122382,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jan 2025 05:00:50 GMT","end":"Sun, 06 Apr 2025 05:58:18 GMT"},"fingerprint":{"sha1":"B1:33:51:56:F1:EF:53:B3:C9:C7:18:41:42:4B:1F:BE:1B:96:A8:BC","sha256":"F7:7C:D2:73:38:B0:11:F0:36:EB:46:CB:32:47:2C:57:36:86:FF:62:CA:AD:CB:A4:8C:ED:4B:12:FC:F5:BA:80"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 6095c6a813ff7516e258fd43c954dd5f\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a431GuoWsCjZGH66S2RTEdJBoEM2Q94CfNsRDqotWMMsFQ3F8I6KOfmz%2Br8csA8tVGRJAfcBJACI3MvGqh%2BDwxC8zcZmU6zybGAo3uJAlTmIELrq%2BxiCmbK6OTnQxUGsprujbjAEBewkmQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91bc21385d2f56ab-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7505\u0026min_rtt=2379\u0026rtt_var=4553\u0026sent=15\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=5310\u0026recv_bytes=1696\u0026delivery_rate=247518\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=098b8743fa72c559\u0026ts=402\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jan 2025 05:00:50 GMT","end":"Sun, 06 Apr 2025 05:58:18 GMT"},"fingerprint":{"sha1":"B1:33:51:56:F1:EF:53:B3:C9:C7:18:41:42:4B:1F:BE:1B:96:A8:BC","sha256":"F7:7C:D2:73:38:B0:11:F0:36:EB:46:CB:32:47:2C:57:36:86:FF:62:CA:AD:CB:A4:8C:ED:4B:12:FC:F5:BA:80"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 08adbe1725eae22c9ba380b0b754bdb4\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4a7rtuA%2BlW4MAGmMzxrV5Y3T53irb079XIMmg9gQ%2FGUS0YgVDoH%2B0qKYUV1nkNIEK0cfylfAFRoRRefdRbRmQUwEJ4jfqSk9V%2B%2FXlotPE1sRwJLVLnLJ7XP4ZkBsbLd93FrftOqCiqBx8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91bc2135c89e56c7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=878\u0026min_rtt=553\u0026rtt_var=571\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3284\u0026recv_bytes=1369\u0026delivery_rate=6109704\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=689cc571ff5dd4c3\u0026ts=83\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":78,"dns":41,"connect":1,"send":0,"wait":50,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c9c90f0ffa.5fc96ec3c7.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjAxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"c9c90f0ffa.5fc96ec3c7.com","domain":"5fc96ec3c7.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9c90f0ffa.5fc96ec3c7.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Mar 2025 02:47:58 GMT","end":"Sat, 31 May 2025 02:47:57 GMT"},"fingerprint":{"sha1":"1F:35:03:1A:EA:73:39:87:1F:AB:21:38:A4:46:65:07:B6:FC:1A:22","sha256":"35:C4:4B:52:9E:0C:BD:1D:54:66:1B:BA:23:FA:44:BA:F3:8A:FB:99:D7:53:27:14:A3:B9:C2:E6:7A:E5:D8:0A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5Nywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjAxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: c9c90f0ffa.5fc96ec3c7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ah1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":328,"dns":75,"connect":22,"send":0,"wait":53,"receive":6,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=154095","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"OPTIONS /fp?tag_id=154095 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://wwddd.buzz/\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/xxss_files/22.png","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.646Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /xxss_files/22.png HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: sloth_src=noref; sloth_cc=0; sloth_sc=0; sloth_nosend=67c8aa7c%253A00%253ATnoref%253A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":11,"dns":2,"connect":25,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59542,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.681502+0000\",\"flow_id\":990761621169581,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59542,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/22.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":718,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.632237+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/xxss_files/2.png","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.643Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /xxss_files/2.png HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: sloth_src=noref; sloth_cc=0; sloth_sc=0; sloth_nosend=67c8aa7c%253A00%253ATnoref%253A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":8,"dns":2,"connect":25,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.676943+0000\",\"flow_id\":1773094209097443,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59528,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/2.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":717,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.626403+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:03 GMT\r\netag: W/\"67c84cb3-6c7\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1735,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1887), with no line terminators","md5":"8263610639624a65707a41479379709a","sha1":"1653610e4e9b3814c8e68eb96814378d71be9776","sha256":"8e6ca46c563e6ef9d3245fe116672ac9ff7b807033852fa0452493b5fb2d8a0c","sha512":"68fa3b5ada5a881f737e24c90a496d1edaa10f00f5723193b647b1030907785d9063d16f7aa4a969fd343255fd4ebed12ffb3c80305743676acf9d3a2921058f","ssdeep":"","tlshash":"cc41eaeeb42ec332111c4e8ab67e2de53cdcd917d4173e155299c81e69c48790e8e82a","first_seen":"2024-04-09T16:57:03Z","last_seen":"2025-04-06T22:39:05.12225Z","times_seen":1577,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":8,"connect":25,"send":0,"wait":34,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:03 GMT\r\netag: W/\"67c84cb3-6c7\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1735,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1887), with no line terminators","md5":"8263610639624a65707a41479379709a","sha1":"1653610e4e9b3814c8e68eb96814378d71be9776","sha256":"8e6ca46c563e6ef9d3245fe116672ac9ff7b807033852fa0452493b5fb2d8a0c","sha512":"68fa3b5ada5a881f737e24c90a496d1edaa10f00f5723193b647b1030907785d9063d16f7aa4a969fd343255fd4ebed12ffb3c80305743676acf9d3a2921058f","ssdeep":"","tlshash":"cc41eaeeb42ec332111c4e8ab67e2de53cdcd917d4173e155299c81e69c48790e8e82a","first_seen":"2024-04-09T16:57:03Z","last_seen":"2025-04-06T22:39:05.12225Z","times_seen":1577,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/165995?version_name=b\u0026domain=wwddd.buzz","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jan 2025 02:32:29 GMT","end":"Tue, 22 Apr 2025 02:32:28 GMT"},"fingerprint":{"sha1":"43:81:DD:21:24:22:40:5D:BB:4C:07:7E:CD:A0:25:AB:3F:65:FF:DC","sha256":"7C:41:79:21:1A:AE:C5:EB:CB:5A:5A:FF:3A:8E:DA:44:1A:E1:90:20:77:92:20:F7:F7:7A:D1:EF:9D:3E:D6:CF"}}},"request":{"raw":"GET /tags/165995?version_name=b\u0026domain=wwddd.buzz HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 248\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: ds5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"b096f96014b028107c0ad9cad0a8ef1d","sha1":"a772749384a591e3258962fd5a44800695af20d8","sha256":"4306dbf8fe15ed2c5725ec2880b138bc62f7ca336b907cc770ed61ead0b0542f","sha512":"651fe3d625336d326d1d28ff617621f832c71d17fd7e5c1f5bc387b0d360c9ec3970ce58b952135e582ba536bf48ac5f25668ef7b698c602764bc296b5b71c77","ssdeep":"","tlshash":"88d02b2c9d35d436e948be1521fd3f3b1645e00e3703b20471c8443c42610f1a825d00","first_seen":"2025-02-26T13:03:05.343018Z","last_seen":"2025-03-21T09:43:43.865634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":248,"dns":7,"connect":19,"send":0,"wait":31,"receive":1,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 02:31:57 GMT","end":"Fri, 16 May 2025 02:31:56 GMT"},"fingerprint":{"sha1":"69:A3:EF:3A:55:06:33:24:0F:49:AC:7B:55:A3:E0:33:78:00:62:28","sha256":"D6:81:26:32:2C:05:50:99:4C:AA:49:DA:64:C7:D1:75:83:83:88:13:D6:0F:B2:48:85:2E:6A:7A:DF:CD:A0:75"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":102,"dns":18,"connect":23,"send":0,"wait":22,"receive":2,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/165997?version_name=b\u0026domain=wwddd.buzz","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jan 2025 02:32:29 GMT","end":"Tue, 22 Apr 2025 02:32:28 GMT"},"fingerprint":{"sha1":"43:81:DD:21:24:22:40:5D:BB:4C:07:7E:CD:A0:25:AB:3F:65:FF:DC","sha256":"7C:41:79:21:1A:AE:C5:EB:CB:5A:5A:FF:3A:8E:DA:44:1A:E1:90:20:77:92:20:F7:F7:7A:D1:EF:9D:3E:D6:CF"}}},"request":{"raw":"GET /tags/165997?version_name=b\u0026domain=wwddd.buzz HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 248\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: ds5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"b06d009f99ce537d4acfafa5fa14ca33","sha1":"01b7e781b5c33aac6e8de3b89a51e862c3e153e4","sha256":"d2a0c5c59433e2a64787a27e15dcb6be87e65dc6eb13d33287813b1f1f63d993","sha512":"56231b04f5dcbd5019591cc30c11a48a6c46c5010b05b66aec8ba9133907954b9697cee1f58748d5547d1b5936fff329e60f6563daca9c823c3e3f87c4bf91c0","ssdeep":"","tlshash":"c3d02b2c9935d032e904ff1521fe2f2b1585a01f7513b10471c8442c42660f1a82ae40","first_seen":"2025-02-23T06:42:57.120784Z","last_seen":"2025-03-21T09:43:43.86238Z","times_seen":5,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":292,"dns":47,"connect":19,"send":0,"wait":46,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 02:31:57 GMT","end":"Fri, 16 May 2025 02:31:56 GMT"},"fingerprint":{"sha1":"69:A3:EF:3A:55:06:33:24:0F:49:AC:7B:55:A3:E0:33:78:00:62:28","sha256":"D6:81:26:32:2C:05:50:99:4C:AA:49:DA:64:C7:D1:75:83:83:88:13:D6:0F:B2:48:85:2E:6A:7A:DF:CD:A0:75"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c9c90f0ffa.5fc96ec3c7.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE1NDA5NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjEsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"c9c90f0ffa.5fc96ec3c7.com","domain":"5fc96ec3c7.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9c90f0ffa.5fc96ec3c7.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Mar 2025 02:47:58 GMT","end":"Sat, 31 May 2025 02:47:57 GMT"},"fingerprint":{"sha1":"1F:35:03:1A:EA:73:39:87:1F:AB:21:38:A4:46:65:07:B6:FC:1A:22","sha256":"35:C4:4B:52:9E:0C:BD:1D:54:66:1B:BA:23:FA:44:BA:F3:8A:FB:99:D7:53:27:14:A3:B9:C2:E6:7A:E5:D8:0A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE1NDA5NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjEsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: c9c90f0ffa.5fc96ec3c7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ah1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=137207","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"OPTIONS /fp?tag_id=137207 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://wwddd.buzz/\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 02:31:57 GMT","end":"Fri, 16 May 2025 02:31:56 GMT"},"fingerprint":{"sha1":"69:A3:EF:3A:55:06:33:24:0F:49:AC:7B:55:A3:E0:33:78:00:62:28","sha256":"D6:81:26:32:2C:05:50:99:4C:AA:49:DA:64:C7:D1:75:83:83:88:13:D6:0F:B2:48:85:2E:6A:7A:DF:CD:A0:75"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jan 2025 05:00:50 GMT","end":"Sun, 06 Apr 2025 05:58:18 GMT"},"fingerprint":{"sha1":"B1:33:51:56:F1:EF:53:B3:C9:C7:18:41:42:4B:1F:BE:1B:96:A8:BC","sha256":"F7:7C:D2:73:38:B0:11:F0:36:EB:46:CB:32:47:2C:57:36:86:FF:62:CA:AD:CB:A4:8C:ED:4B:12:FC:F5:BA:80"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 9224d9b3a6657fbcf038a7943aa51b66\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W1vVhhJvzBNWeJRBnE0rv%2Fb87GZu1pYby0H%2B6ULykkQcYHawCcAx2u%2Fov4zV7DfPnA9AO3xoIh1BhJY3ptrVMs%2BP7SSRuguy7BkimxqWeajDB9es3S7EhDjfxfP3kazKFIwhZvzwT5Ivzg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91bc21383ced56ab-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7505\u0026min_rtt=2379\u0026rtt_var=4553\u0026sent=14\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=4160\u0026recv_bytes=1696\u0026delivery_rate=247518\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=098b8743fa72c559\u0026ts=397\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jan 2025 05:00:50 GMT","end":"Sun, 06 Apr 2025 05:58:18 GMT"},"fingerprint":{"sha1":"B1:33:51:56:F1:EF:53:B3:C9:C7:18:41:42:4B:1F:BE:1B:96:A8:BC","sha256":"F7:7C:D2:73:38:B0:11:F0:36:EB:46:CB:32:47:2C:57:36:86:FF:62:CA:AD:CB:A4:8C:ED:4B:12:FC:F5:BA:80"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 33ccdf0d33f6f7682faac16c0f0134bd\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nu%2BEk52a25cv108aJSM8CEmlBxAat1jK9qXz%2BauVjIS%2B9ZVoJo6PpLq%2F7hCVw7GF17mHUIxC4uSC%2Fw%2FOZautK8XqrMV9uxMGIdogrNN%2BQBoa15YzoKGKQPKILNEH0L3ThfmCZtktgAn%2BGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91bc21392e7056ab-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7196\u0026min_rtt=2379\u0026rtt_var=4034\u0026sent=17\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=6449\u0026recv_bytes=2071\u0026delivery_rate=6537\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=098b8743fa72c559\u0026ts=541\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/xxss_files/33.gif","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.645Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /xxss_files/33.gif HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: sloth_src=noref; sloth_cc=0; sloth_sc=0; sloth_nosend=67c8aa7c%253A00%253ATnoref%253A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"40b3fc14254227ec5012d996bf90c4e1","sha1":"b0dd06eb5a779151151101337889ff09953f8ac0","sha256":"740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca","sha512":"23526121f81d22bdf929ae6d93210e7a7eb2f5f943c237bc732e1dd658be58cd058b34290d56d72e102c712c6c672ee14372fa75e0779409a01d827203fa6fc2","ssdeep":"","tlshash":"4dc08c1cb813304485030ba00bc33542c29aa22ba8ba802104884203e0ce2bac8ea3d5","first_seen":"2023-04-05T04:09:16Z","last_seen":"2025-04-06T22:43:34.098035Z","times_seen":107868,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":13,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59544,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.681742+0000\",\"flow_id\":665817280456312,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59544,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/xxss_files/33.gif\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://wwddd.buzz/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":404,\"length\":146},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":718,\"bytes_toclient\":500,\"start\":\"2025-03-05T19:48:12.632440+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:03 GMT\r\netag: W/\"67c84cb3-6c7\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1735,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1887), with no line terminators","md5":"8263610639624a65707a41479379709a","sha1":"1653610e4e9b3814c8e68eb96814378d71be9776","sha256":"8e6ca46c563e6ef9d3245fe116672ac9ff7b807033852fa0452493b5fb2d8a0c","sha512":"68fa3b5ada5a881f737e24c90a496d1edaa10f00f5723193b647b1030907785d9063d16f7aa4a969fd343255fd4ebed12ffb3c80305743676acf9d3a2921058f","ssdeep":"","tlshash":"cc41eaeeb42ec332111c4e8ab67e2de53cdcd917d4173e155299c81e69c48790e8e82a","first_seen":"2024-04-09T16:57:03Z","last_seen":"2025-04-06T22:39:05.12225Z","times_seen":1577,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":7,"connect":25,"send":0,"wait":33,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.m.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:07 GMT\r\netag: W/\"67c84cb7-1de0e\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122382,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/165999?version_name=b\u0026domain=wwddd.buzz","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jan 2025 02:32:29 GMT","end":"Tue, 22 Apr 2025 02:32:28 GMT"},"fingerprint":{"sha1":"43:81:DD:21:24:22:40:5D:BB:4C:07:7E:CD:A0:25:AB:3F:65:FF:DC","sha256":"7C:41:79:21:1A:AE:C5:EB:CB:5A:5A:FF:3A:8E:DA:44:1A:E1:90:20:77:92:20:F7:F7:7A:D1:EF:9D:3E:D6:CF"}}},"request":{"raw":"GET /tags/165999?version_name=b\u0026domain=wwddd.buzz HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 248\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: ds5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"3e758c9b0fc0a13b29fc9096836aca20","sha1":"63650fd16b712c65a0f5b8954ed1d92fcde80029","sha256":"d492fafa8fdb3932ef1064bbc98faa39a6a41137134c524f377d24d5d80e3a36","sha512":"0c30bbf6f9bce6bf169c0f656c4976cf06bb8c6ccd1704b3143f64c7bacb8325997fbc32b24f0655b83b5c3086d62d672cd91c3824fc7e3379bfd58952ceca58","ssdeep":"","tlshash":"ebd02b2c9a35d137fd44be1530fd7f2b1545b00f3513b10471c8442d42615f1b825d00","first_seen":"2025-01-27T03:11:41.943198Z","last_seen":"2025-03-21T09:43:43.866419Z","times_seen":6,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":299,"dns":69,"connect":19,"send":0,"wait":28,"receive":1,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 02:31:57 GMT","end":"Fri, 16 May 2025 02:31:56 GMT"},"fingerprint":{"sha1":"69:A3:EF:3A:55:06:33:24:0F:49:AC:7B:55:A3:E0:33:78:00:62:28","sha256":"D6:81:26:32:2C:05:50:99:4C:AA:49:DA:64:C7:D1:75:83:83:88:13:D6:0F:B2:48:85:2E:6A:7A:DF:CD:A0:75"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":85,"dns":1,"connect":23,"send":0,"wait":19,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165999","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"POST /fp?tag_id=165999 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1979\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: id=3709518652777098568\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1979,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":543},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":156},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":1},\"timezone\":{\"value\":\"UTC\",\"duration\":21},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Linux x86_64\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":4},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":44},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"c43d487520bda8d6f92013f5493a7a45","sha1":"4621a8a6d5749fb1f8d5fda36181b06944988277","sha256":"9919efebaedf2e0ab0b536fa1367221a00172de195c90a4c1e4f221ac299138a","sha512":"0d7d5c27ab64e6905d70fe356a27753027a2800bb9e3da91c1ad27bc6f3047af38cc775e79f0e89751967e3c36f950ca3bb83d6b016e0d53db738ad961e9a72f","ssdeep":"","tlshash":"0ba0021c1f64c306419020dcadf9ec7d74c0106cb06725018bdbd1e850c40901018a0f","first_seen":"2025-03-03T03:59:33.960649Z","last_seen":"2025-04-06T22:39:05.099281Z","times_seen":369,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wwddd.buzz/","fqdn":"wwddd.buzz","domain":"wwddd.buzz","tld":"buzz"},"ip":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-05T19:48:12.138Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: wwddd.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Mar 2025 19:48:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: sloth_src=noref; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_cc=0; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_sc=0; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nsloth_nosend=67c8aa7c%253A00%253ATnoref%253A; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_src=noref; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_cc=0; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_sc=0; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\nsloth_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nsloth_nosend=67c8aa7c%253A00%253ATnoref%253A; expires=Fri, 07-Mar-2025 19:48:12 GMT; Max-Age=172800; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69546,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"67a9e174bdeff4d247683115826f2e75","sha1":"7b2034372da30572871a4508c99005e532c23852","sha256":"f9cae276c816808e0ce264d453c0d084ab69dbb2168984d9b55088b53c1743f5","sha512":"da378c98b78e5fdc76a4ab4bb08c1779f6055082118da7789a6cc3956fb5bcfe0b722e541811d1d7e8f8d3a7dce6e2b68bc302e9d165d7a871fa1ec0e5546c29","ssdeep":"768:6CZHtfrM/jjCuK41iysnvMzrA2EU4/VIK:6CzIjF4B2a","tlshash":"6663ac62d3c5503e5d01a9e28d72bfb98287c03dca819a05f51e23fea70a97670935fd","first_seen":"2025-03-05T19:48:34.158571Z","last_seen":"2026-01-03T11:45:49.058157Z","times_seen":9,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":22,"dns":4,"connect":27,"send":0,"wait":331,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-05T19:48:12Z","timestamp":1741204092,"ip_dst":{"addr":"212.115.124.17","port":80,"asn":214677,"as":"DELUXHOST","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":59526,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.buzz domain","source":"{\"timestamp\":\"2025-03-05T19:48:12.490790+0000\",\"flow_id\":83011693184952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":59526,\"dest_ip\":\"212.115.124.17\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032991,\"rev\":1,\"signature\":\"ET INFO HTTP Request to a *.buzz domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2021_05_18\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_05_18\"]}},\"http\":{\"hostname\":\"wwddd.buzz\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":679,\"bytes_toclient\":7590,\"start\":\"2025-03-05T19:48:12.133048+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.m.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:07 GMT\r\netag: W/\"67c84cb7-1de0e\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122382,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=137207","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"POST /fp?tag_id=137207 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1978\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: id=3709518652777098568\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1978,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":315},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":369},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Linux x86_64\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":45},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"c43d487520bda8d6f92013f5493a7a45","sha1":"4621a8a6d5749fb1f8d5fda36181b06944988277","sha256":"9919efebaedf2e0ab0b536fa1367221a00172de195c90a4c1e4f221ac299138a","sha512":"0d7d5c27ab64e6905d70fe356a27753027a2800bb9e3da91c1ad27bc6f3047af38cc775e79f0e89751967e3c36f950ca3bb83d6b016e0d53db738ad961e9a72f","ssdeep":"","tlshash":"0ba0021c1f64c306419020dcadf9ec7d74c0106cb06725018bdbd1e850c40901018a0f","first_seen":"2025-03-03T03:59:33.960649Z","last_seen":"2025-04-06T22:39:05.099281Z","times_seen":369,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:12.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:03 GMT\r\netag: W/\"67c84cb3-6c7\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1735,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1887), with no line terminators","md5":"8263610639624a65707a41479379709a","sha1":"1653610e4e9b3814c8e68eb96814378d71be9776","sha256":"8e6ca46c563e6ef9d3245fe116672ac9ff7b807033852fa0452493b5fb2d8a0c","sha512":"68fa3b5ada5a881f737e24c90a496d1edaa10f00f5723193b647b1030907785d9063d16f7aa4a969fd343255fd4ebed12ffb3c80305743676acf9d3a2921058f","ssdeep":"","tlshash":"cc41eaeeb42ec332111c4e8ab67e2de53cdcd917d4173e155299c81e69c48790e8e82a","first_seen":"2024-04-09T16:57:03Z","last_seen":"2025-04-06T22:39:05.12225Z","times_seen":1577,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/154095?version_name=b\u0026domain=wwddd.buzz","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jan 2025 02:32:29 GMT","end":"Tue, 22 Apr 2025 02:32:28 GMT"},"fingerprint":{"sha1":"43:81:DD:21:24:22:40:5D:BB:4C:07:7E:CD:A0:25:AB:3F:65:FF:DC","sha256":"7C:41:79:21:1A:AE:C5:EB:CB:5A:5A:FF:3A:8E:DA:44:1A:E1:90:20:77:92:20:F7:F7:7A:D1:EF:9D:3E:D6:CF"}}},"request":{"raw":"GET /tags/154095?version_name=b\u0026domain=wwddd.buzz HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 248\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: ds5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"05d9b93483435c28dbb837ea3e724d10","sha1":"4cb3dc489a15c71c7a23519cfe7180410c0e63ca","sha256":"bfb33e0ca7d5d1daf8cd3352224a82d8c1a901b9ff6bb638340d399dcd1e16b1","sha512":"f6ec094fcae24e5fc81932dc1773d14a0c8f0542fb59d87f045136ebfbd1e0af40ab1778c0e995bb5820cad2a5d1fa211c596cd390b0bbc20d882c15bb58aeee","ssdeep":"","tlshash":"60d02b2d9d39d073fd44fe2321fd1f161545a00e7507714071d4483c466a9f19c29d00","first_seen":"2025-01-26T04:14:04.673811Z","last_seen":"2025-03-21T09:43:43.864247Z","times_seen":3,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":218,"dns":0,"connect":20,"send":0,"wait":98,"receive":1,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/137207?version_name=b\u0026domain=wwddd.buzz","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jan 2025 02:32:29 GMT","end":"Tue, 22 Apr 2025 02:32:28 GMT"},"fingerprint":{"sha1":"43:81:DD:21:24:22:40:5D:BB:4C:07:7E:CD:A0:25:AB:3F:65:FF:DC","sha256":"7C:41:79:21:1A:AE:C5:EB:CB:5A:5A:FF:3A:8E:DA:44:1A:E1:90:20:77:92:20:F7:F7:7A:D1:EF:9D:3E:D6:CF"}}},"request":{"raw":"GET /tags/137207?version_name=b\u0026domain=wwddd.buzz HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 248\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: ds5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"5d3329a17799ceba4f76cf9eabdb8b81","sha1":"8cb6ce4050435bfabf87b41ac1e1e85902761080","sha256":"28df562e6f691fdf1fbf214df9e2c61c160424d0465299854a9fa307d0b41f1b","sha512":"77299dcc492ae20aac41f66f4cfb07522006757a407d1c743e68c56e9846158bd9e013546b72855407e3a4562b444feb8f905104e911a676968c4bec77b0b8f9","ssdeep":"","tlshash":"71d02b18da38d033ed00be1120fe3f161185e00e76677100b1c4443d96610f59c26d48","first_seen":"2025-03-05T19:48:34.159863Z","last_seen":"2025-03-05T19:48:34.159863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":42,"dns":2,"connect":19,"send":0,"wait":44,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165997","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"OPTIONS /fp?tag_id=165997 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://wwddd.buzz/\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:14 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":109,"dns":2,"connect":24,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=154095","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"POST /fp?tag_id=154095 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1978\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nCookie: id=3709518652777098568\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1978,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":381},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":427},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Linux x86_64\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":52},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"c43d487520bda8d6f92013f5493a7a45","sha1":"4621a8a6d5749fb1f8d5fda36181b06944988277","sha256":"9919efebaedf2e0ab0b536fa1367221a00172de195c90a4c1e4f221ac299138a","sha512":"0d7d5c27ab64e6905d70fe356a27753027a2800bb9e3da91c1ad27bc6f3047af38cc775e79f0e89751967e3c36f950ca3bb83d6b016e0d53db738ad961e9a72f","ssdeep":"","tlshash":"0ba0021c1f64c306419020dcadf9ec7d74c0106cb06725018bdbd1e850c40901018a0f","first_seen":"2025-03-03T03:59:33.960649Z","last_seen":"2025-04-06T22:39:05.099281Z","times_seen":369,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165997","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"POST /fp?tag_id=165997 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1979\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1979,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":649},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":199},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":1},\"platform\":{\"value\":\"Linux x86_64\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":110},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:14 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nSet-Cookie: id=13000031917334786889; Expires=Thu, 05 Mar 2026 19:48:14 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"ba50606baf968eecfe81f15d92721318","sha1":"b5a32fd15696489bc3c3a2a300305de87ab80189","sha256":"9caaab7fb1637f22e207ea3e9fe2798478cba77fba12de5b9dc2244ab8eaa2f2","sha512":"5f6ee2041877734c9975966d9c0b65489e7040cf716e82612b1a6c388ed6843dd3e735015f388693985b1102ca3539c32c349ba5a25fd1311008ffec7537e4fd","ssdeep":"","tlshash":"37a002091941a02ce6201c8677553cae64c0300cc34ab71309a3b248526c0d0f63a806","first_seen":"2025-03-03T23:32:31.750735Z","last_seen":"2025-04-06T17:25:30.777872Z","times_seen":59,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":27,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165995","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"POST /fp?tag_id=165995 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1978\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1978,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":509},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":519},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Linux x86_64\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":1},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":79},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:14 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nSet-Cookie: id=3709518652777098568; Expires=Thu, 05 Mar 2026 19:48:14 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"ba50606baf968eecfe81f15d92721318","sha1":"b5a32fd15696489bc3c3a2a300305de87ab80189","sha256":"9caaab7fb1637f22e207ea3e9fe2798478cba77fba12de5b9dc2244ab8eaa2f2","sha512":"5f6ee2041877734c9975966d9c0b65489e7040cf716e82612b1a6c388ed6843dd3e735015f388693985b1102ca3539c32c349ba5a25fd1311008ffec7537e4fd","ssdeep":"","tlshash":"37a002091941a02ce6201c8677553cae64c0300cc34ab71309a3b248526c0d0f63a806","first_seen":"2025-03-03T23:32:31.750735Z","last_seen":"2025-04-06T17:25:30.777872Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165999","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:15.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"OPTIONS /fp?tag_id=165999 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://wwddd.buzz/\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:15 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.m.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jan 2025 02:33:38 GMT","end":"Sat, 05 Apr 2025 02:33:37 GMT"},"fingerprint":{"sha1":"59:E9:26:3E:B2:82:4F:23:F1:69:4A:2E:C5:A4:09:43:4E:8A:9F:DC","sha256":"32:5B:96:20:C8:9E:30:C5:01:DC:07:E8:23:79:2E:1C:55:2C:6E:94:CD:8C:EA:9C:41:43:D5:5F:6D:E0:DF:AC"}}},"request":{"raw":"GET /static/adManager.m.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Mar 2025 13:08:07 GMT\r\netag: W/\"67c84cb7-1de0e\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122382,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:13.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 02:31:57 GMT","end":"Fri, 16 May 2025 02:31:56 GMT"},"fingerprint":{"sha1":"69:A3:EF:3A:55:06:33:24:0F:49:AC:7B:55:A3:E0:33:78:00:62:28","sha256":"D6:81:26:32:2C:05:50:99:4C:AA:49:DA:64:C7:D1:75:83:83:88:13:D6:0F:B2:48:85:2E:6A:7A:DF:CD:A0:75"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 05 Mar 2025 19:53:13 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: ah1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=165995","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Feb 2025 10:20:32 GMT","end":"Sun, 04 May 2025 10:20:31 GMT"},"fingerprint":{"sha1":"89:25:D9:78:8E:C3:9B:1B:59:0A:AF:77:8C:CB:AD:E0:0F:A9:D8:3F","sha256":"59:34:A5:38:59:53:5F:21:4A:AB:FB:47:E9:E4:54:C7:8F:6D:53:0E:72:BC:48:4E:FC:7C:22:CF:A2:10:8E:59"}}},"request":{"raw":"OPTIONS /fp?tag_id=165995 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://wwddd.buzz/\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 05 Mar 2025 19:48:14 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: http://wwddd.buzz\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":118,"dns":3,"connect":25,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jan 2025 05:00:50 GMT","end":"Sun, 06 Apr 2025 05:58:18 GMT"},"fingerprint":{"sha1":"B1:33:51:56:F1:EF:53:B3:C9:C7:18:41:42:4B:1F:BE:1B:96:A8:BC","sha256":"F7:7C:D2:73:38:B0:11:F0:36:EB:46:CB:32:47:2C:57:36:86:FF:62:CA:AD:CB:A4:8C:ED:4B:12:FC:F5:BA:80"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 67b0d597a43a3f8caac79e797c552117\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZRtYN7vRmnb2X2wzqAXLIN%2Bm8PtBaM%2FWXdmQ64J8t7dUNODpwb%2F2Kpo6Kdj5H4tJaTJHHgs8PtBO3KLyciVyVbimkYJ6rWpkW1eROXgili7xJg5YksFbQ6zcy5sYgTtXh%2FIvZBm%2Fk6Ce5A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91bc2135d8ce56c7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1087\u0026min_rtt=553\u0026rtt_var=847\u0026sent=11\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=4402\u0026recv_bytes=1369\u0026delivery_rate=6109704\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=689cc571ff5dd4c3\u0026ts=91\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c9c90f0ffa.5fc96ec3c7.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjAzLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"c9c90f0ffa.5fc96ec3c7.com","domain":"5fc96ec3c7.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://wwddd.buzz/","date":"2025-03-05T19:48:14.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9c90f0ffa.5fc96ec3c7.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Mar 2025 02:47:58 GMT","end":"Sat, 31 May 2025 02:47:57 GMT"},"fingerprint":{"sha1":"1F:35:03:1A:EA:73:39:87:1F:AB:21:38:A4:46:65:07:B6:FC:1A:22","sha256":"35:C4:4B:52:9E:0C:BD:1D:54:66:1B:BA:23:FA:44:BA:F3:8A:FB:99:D7:53:27:14:A3:B9:C2:E6:7A:E5:D8:0A"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5NDY4ODYyNTE0NTc0ODg1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjQiLCJ0YWdfaWQiOjE2NTk5NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjAzLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: c9c90f0ffa.5fc96ec3c7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://wwddd.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://wwddd.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Mar 2025 19:48:14 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ah1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":394,"dns":2,"connect":21,"send":0,"wait":52,"receive":0,"ssl":369},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-05","alert":"Sinkholed","trigger":"5fc96ec3c7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}