{"report_id":"4918d195-18dc-42f9-9580-c915b8a57960","version":6,"status":"done","tags":[],"date":"2026-02-25T21:33:49Z","url":{"schema":"http","addr":"sxyprn.com","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"title":"(1) New Message!","dom":{"size":99713,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e7e9a94ffcc3d71c552b3263cbbee0e0","sha1":"cdfa4ffabacaa78f5df371d464ccf97fe4f6f2de","sha256":"165db3703c15c38d51b8cab37f32077ae3cf72c4dc9dba06e57fc3ca221ecf9d","sha512":"a352c39819b164681e81365ee891e0519965502413a3b0e1c760c22a9af7a70c00539b9593fbdd2b4e846d62abaed4e0d63f3e8deed12d0031c1c0952ba966ad","ssdeep":"768:HXuVuL03gAumuUuUu7KOZkMeL4VTaZ7EHMVvjFmTN:sgJKOZkMeL4VTaZ7UigZ","tlshash":"7ea35a6d2eb20d445663861c83de5f18277c9563241aacebb2cb0d4e8fcbf9857c6253","dom_hash":"domhashb5b20f3529d5ec5ceba97547e49ad80b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sxyprn.com","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T21:33:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":29}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-02-19T05:46:16.061852Z","alert_count":3,"request_count":3,"received_data":4310,"sent_data":2328,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2026-02-21T01:04:44.619809Z","alert_count":3,"request_count":3,"received_data":2462640,"sent_data":1545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"marshalcurve.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-07-26","domain_rank":117920,"first_seen":"2023-07-26T13:23:21Z","last_seen":"2026-02-16T05:51:24.740292Z","alert_count":5,"request_count":5,"received_data":102476,"sent_data":4869,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"creative.xlivrdr.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-22","domain_rank":91274,"first_seen":"2021-07-02T10:51:24Z","last_seen":"2026-02-23T10:57:33.972187Z","alert_count":0,"request_count":9,"received_data":2320196,"sent_data":11415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2026-02-18T21:04:11.941994Z","alert_count":0,"request_count":2,"received_data":502,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-02-19T13:12:53.984083Z","alert_count":0,"request_count":1,"received_data":70958,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-02-18T21:59:50.874706Z","alert_count":2,"request_count":1,"received_data":2079,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":2,"received_data":755677,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2026-02-25T20:42:18.329747Z","alert_count":15,"request_count":5,"received_data":171841,"sent_data":2252,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tapioni.com","ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2026-02-19T18:52:23.031112Z","alert_count":2,"request_count":2,"received_data":251213,"sent_data":818,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.176.181.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-02-25T19:05:35.017547Z","alert_count":4,"request_count":4,"received_data":1304,"sent_data":1918,"comment":"","tags":null,"fingerprints":null},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-02-19T11:20:11.310365Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"edge-hls.doppiocdn.net","ip":{"addr":"65.9.46.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2022-02-16","domain_rank":164473,"first_seen":"2023-09-14T10:51:21Z","last_seen":"2026-02-22T02:41:59.731155Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2026-02-18T20:36:52.554621Z","alert_count":0,"request_count":10,"received_data":101301,"sent_data":4640,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2026-02-19T01:26:22.627579Z","alert_count":4,"request_count":1,"received_data":520,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b2.trafficdeposit.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-04-19","domain_rank":937864,"first_seen":"2023-10-11T01:59:38Z","last_seen":"2026-02-05T04:12:30.906878Z","alert_count":0,"request_count":8,"received_data":125608,"sent_data":4072,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sxyprn.com","ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-05","domain_rank":1832,"first_seen":"2019-04-06T21:46:45Z","last_seen":"2026-02-05T04:12:29.874124Z","alert_count":0,"request_count":11,"received_data":800000,"sent_data":5850,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.1.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]}]},{"fqdn":"deputizepacifistwipe.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":151671,"first_seen":"2025-03-21T06:36:25.572018Z","last_seen":"2026-02-15T21:02:08.930988Z","alert_count":0,"request_count":4,"received_data":80599,"sent_data":2946,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adtng.com","ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2018-07-20","domain_rank":79851,"first_seen":"2018-07-26T19:17:41Z","last_seen":"2026-02-21T22:43:36.950879Z","alert_count":0,"request_count":3,"received_data":27190,"sent_data":2106,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.campfirecroutondecorator.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-10-20T05:52:50.204674Z","last_seen":"2026-02-22T16:22:39.408895Z","alert_count":0,"request_count":3,"received_data":2462046,"sent_data":1626,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"go.xlivrdr.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-22","domain_rank":49821,"first_seen":"2021-07-02T10:51:24Z","last_seen":"2026-02-23T22:39:43.921599Z","alert_count":0,"request_count":11,"received_data":42652,"sent_data":10148,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.labadena.com","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2020-01-21","domain_rank":266368,"first_seen":"2020-05-24T00:28:49Z","last_seen":"2026-02-22T06:22:08.54679Z","alert_count":2,"request_count":2,"received_data":565,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b1.trafficdeposit.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-04-19","domain_rank":937742,"first_seen":"2023-10-11T01:59:38Z","last_seen":"2026-02-25T21:29:50.050485Z","alert_count":0,"request_count":3,"received_data":29812,"sent_data":1531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hw-cdn2.ang-content.com","ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-11-15","domain_rank":4721082,"first_seen":"2019-03-25T22:41:04Z","last_seen":"2026-02-22T18:28:14.34476Z","alert_count":0,"request_count":5,"received_data":1120826,"sent_data":2404,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"yps.link","ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":103138,"first_seen":"2015-10-21T07:56:54Z","last_seen":"2026-02-05T04:12:30.922615Z","alert_count":0,"request_count":31,"received_data":74545,"sent_data":13259,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.pemsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":181476,"first_seen":"2023-08-05T12:08:36Z","last_seen":"2026-02-21T03:04:50.313826Z","alert_count":0,"request_count":2,"received_data":245910,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-02-21T22:42:41.82197Z","alert_count":15,"request_count":5,"received_data":116145,"sent_data":2649,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"b3.trafficdeposit.com","ip":{"addr":"172.67.212.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-04-19","domain_rank":938245,"first_seen":"2023-10-11T01:59:38Z","last_seen":"2026-02-25T21:10:30.734578Z","alert_count":0,"request_count":4,"received_data":112279,"sent_data":2032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":23506,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":4,"received_data":130554,"sent_data":2160,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hw-cdn2.adtng.com","ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-07-20","domain_rank":157324,"first_seen":"2020-02-20T16:50:17Z","last_seen":"2026-02-20T13:25:04.270184Z","alert_count":0,"request_count":2,"received_data":34966,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-02-19T05:26:36.876262Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"campfirecroutondecorator.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":37605,"first_seen":"2025-03-16T06:26:47.544899Z","last_seen":"2026-02-22T16:22:39.304329Z","alert_count":0,"request_count":8,"received_data":105879,"sent_data":5986,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-02-25T21:03:46.312295Z","alert_count":4,"request_count":2,"received_data":374814,"sent_data":820,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-02-19T05:26:36.784926Z","alert_count":6,"request_count":2,"received_data":171912,"sent_data":816,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f386ad04296a7c86913ec3642bfecd2","sha1":"7f0664ad5dcabe7ab366fe3541ee40790c36b1f8","sha256":"37cdbd9aee6972806dc8218c51995c0d9c41c08dd3601ef625ec1efbe44bd711","sha512":"985ea8ae2a5b480342e5b6dddd3ed25aeda45f961e33cfb53e51934e813daa6a00dce05e05ab29fb2c470ee53e047b4f8815924fd362ff8182c4af91f7968eda","ssdeep":"","tlshash":"2de08c27f847a02564db411b386a47d1467d09873403edbb2012e2019d13ae708f396c","size":357,"data":"","first_seen":"2023-03-07T01:32:14Z","last_seen":"2026-03-11T22:25:19.318227Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012877?time=1633701610566","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"32b877ce91cb6ec0da746bbb78289340","sha1":"53b76e03f4c11bcf201daa086ab80af5c04cdae6","sha256":"4e203fca68fb538525a6becc21237e2985ac55a295fc4ff3c4d75478874d7658","sha512":"b9f7f96b8d7a0c7a4df2cd289d7b0c90ec7c4c820ce49b6302a40a65f30826afc70efccd43c30a390baadfdd56ffe75447e32506bd8b92732b2a0e3b62434df3","ssdeep":"","tlshash":"785000f3030c0f000003fc000000000000000000f00000000000000000000000000000","size":8,"data":"","first_seen":"2023-04-10T17:50:31Z","last_seen":"2026-04-05T22:01:59.366445Z","times_seen":2096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-06T07:52:28.485793Z","times_seen":11434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/50/ea/9a/50ea9a3e51a5ec5160f47477aeae3681.js","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d18ea2c8d41dcd0cc6492ec824a41ec","sha1":"7dcb5273d21f12102fab58a372d03c9259d97792","sha256":"40c96df929790a45977390be3a806da146b2782eea9cb3719ac41795c2bebd96","sha512":"e74e138c8b0135896c81c0dbd874a509e0062cc4bf7e3aec6849954101cff0ff25866c0912489e53732c3ea1fc150531cb951065ada8d64782f9b7fef2d9095c","ssdeep":"1536:g5txSqiMKZ1GQDSAiLoHL0cTIgV2BOPsuUd7s/KwR1wwurV4aYLuvGgIo5+phrtz:gD2MKHGQDSAiLoHQcTIgV2BGsuUd7s/p","tlshash":"9793d84c3f82b0d41397707b762f912bf23b5c855868e88de243adac5da9719a337e05","size":92239,"data":"","first_seen":"2026-02-25T21:34:00.777233Z","last_seen":"2026-03-11T22:25:19.195534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-06T07:52:28.368921Z","times_seen":13341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832747?id=1832747\u0026pid=__clb-spot_1832747_cbw_3\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0221fc9e9d4210055129aa9d1d1fc326","sha1":"d5cdf43ffbe55b06916341406aae3ed28921bbcb","sha256":"bbdbfc712f8ab7878101c4f441df1ecce493917d9217ec5968f421b6b8a1b0ad","sha512":"5e6f139693783be30945f736e700bdd6e634643706356a6ea69395e829d08b45cff353d84c0d2249b9e81139e3de70c286c46a3fa77907e9d69bfffe9818920e","ssdeep":"96:96ZGsqMLKOs3sqMLKSUnsqMLKtisqMLKLpDLzvwSjfNAo:kZGhc1s3hcgnhcOihcwLwTo","tlshash":"76c1fb2a45cc8a425f2e6f2e915d0c8cc8e759d95a13b5c798f09d9847cc5fc062fcd5","size":5904,"data":"","first_seen":"2026-02-25T21:34:00.740276Z","last_seen":"2026-02-25T21:34:00.740276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/get/1941843?id=1941843\u0026jp=_clxwtdkakubrqtwsxjzzju\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cS4aLVmaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=2086458246989312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1861\u0026rlp=%5B0%2C16%2C163%2C108%2C9688%2C2726%2C275%2C2581%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3cd713cd23c8d3329cb8cc7a6e6c90","sha1":"9d2cc22074c046a0205707ade925f9e0bcd9ae4f","sha256":"8e3ac7f4857dd3f919f299628b4242bac17f95a9eb22873919724be5381a9d0e","sha512":"d68d13f5910f154c61655da6cf9d319d98f60fb0ae05eaaa90bf2d201ee6828c1492371e1eade5347220e439f09f9608a5ffcedbcefbd4073d366b594ac2b3bf","ssdeep":"","tlshash":"c16182983884bc457d50a7d581ba8f18dd9f3fc2fa9d5b780910cac1811edfdbb50880","size":3454,"data":"","first_seen":"2026-02-25T21:34:00.703117Z","last_seen":"2026-02-25T21:34:00.703117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T08:10:18.065048Z","times_seen":127008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012877?time=1633701610566","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6b1595227948a02e84186651d3586ea","sha1":"373bc02b6fcd3de84a11a3704998070071d398ca","sha256":"9fa1daa02a5c0e8e85b0d95445ecae3cd89e0685898a471c8e3b1d805c7b8207","sha512":"dd1097df06eb5c0821611f2b59d755544d112bbc5984150e6643c89cd92b095d9b54e619c28083f573dee973f09a95bea0522ba0fe7f3b84a4594dc4756251d2","ssdeep":"192:0rMA8yf+yXDvqzaFASu/C4aVrrKVlvJ31gr0S9l1AM+iqFd+tUC:0rMA8yf+c6sARC4tSr0pdCV","tlshash":"f772e6be7242b851a67b29a280af110e3f3199a3b85cc44084d6d9d17d34d7d93bfe6c","size":15989,"data":"","first_seen":"2024-01-10T23:12:26Z","last_seen":"2026-04-05T22:01:59.358724Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/main2.js?94","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3906ad414085b2c70dfd3b8d5f37609","sha1":"b98323929dbad6944052c6166c3a02d298916c5f","sha256":"1f34943f2f33e25a4f30856349a7510e53b87cd49df65f280636ea7918b9564f","sha512":"e154e5c860e87d915e36345a63ac42df74c5c3fea801cb00b6c385b33cb78fd0f8ae10f329b93fb6c8fbb7e893b2edf3a4648733e9107e643e9fcf8dcccab9a2","ssdeep":"768:hmOL8NI5n1em1GhTPBS1ScStfHE6OUQLyH3XLy24O+O+FlcO0NkMFl3MZfZlm7EX:LcWqtdTTPi2O0NkMQDFZV0b/ErFKY","tlshash":"c383e45876ad262e85f333aa553f0255ce7dd0711406c52cf8bc84c82fe8f49a36ae6d","size":84158,"data":"","first_seen":"2026-02-05T04:12:35.365344Z","last_seen":"2026-03-11T22:25:19.217271Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","size":122444,"data":"","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-06T08:10:18.065048Z","times_seen":127008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/jq36.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd2abf70e699a2791d8280473dab7d97","sha1":"638551b5fa3af66063e4b03d031f1819d4325df1","sha256":"22098889a3d150df9706ff90386764f183274d40903f5eee2ec97fef24e2c5b4","sha512":"0d7e2bdddfe4fd0b8265a95a1718c4be7b99d9368a71da1ae04dbe7d6d1df543974d88363c62faa3a22d426584ebb80a19726d0a058074397fa3a17d17a6f4ba","ssdeep":"1536:SjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:SIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"ce9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89411,"data":"","first_seen":"2023-03-07T01:32:14Z","last_seen":"2026-04-03T13:07:06.808326Z","times_seen":620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bef7aca313d9f99ebe956099d5af8580","sha1":"452270357b06bf39c78447fe484419fb864cc2df","sha256":"0e6e4f467ca6dd01ed457a2cf80c8bfbd72f5fb734c32bebb94970fafcf5a3c5","sha512":"667713b37f4bcc293f943bed44b1a1fd6b56992f0c529bb35af577beee7b96de820b984b260af8330b0b5e18f3c1054dbd04363d465c816568f20e217ba3634f","ssdeep":"192:y1sjMoq08NF4KeirOdmpMWysnfUcgczmji4:lQoq08feiV8snfET+4","tlshash":"dff174c97283f6a156e79169903f6203f22d5a25782ee550f653fa807828cdbc172e27","size":8044,"data":"","first_seen":"2026-02-16T16:38:19.740574Z","last_seen":"2026-02-26T12:27:09.113495Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","size":16885,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T22:01:59.293971Z","times_seen":2337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","size":122444,"data":"","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/epo.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00ee57827a366f428469fd34080c97ee","sha1":"47c92ba5d87b31829a27f5887f92a0fa8af642f9","sha256":"ea5b3e6897d3f1b22a2ce85754e73f6c4d1f77959af453f75e5ded1f4bad71c0","sha512":"24dcc158b14713dd4104dd0dd6b32e822ebc7a1d5231248ba778ea944e5b7b77e712ebb1c09d713f5459d551161249eb59aa0dc3b092c10fd603be0f19f16d0e","ssdeep":"384:uNHDG1gxEGB/ySsPFbmEVlqOvBvZ7MNd0Ux4+RwcGbSR:ayu8F66wjXRwzI","tlshash":"6252f883b179b83d0dcf59b8812bd10df8352b9ef406c4e5bc54aae46870a0b113eb79","size":14480,"data":"","first_seen":"2026-02-25T21:34:00.715559Z","last_seen":"2026-03-11T22:25:19.220621Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"6b888511ec284a21e77b9d0d99f05e79","sha1":"1e958fb04e0894514a5f353a21a4fb352cfddcd9","sha256":"3420b1bf12f8dbce209535318c4b694d47689bb3cf9774bab675b964b7d5c8d6","sha512":"9c8f4bbb69258b603e0672c1fac89b577cc601395420de1c3981e75d8937eca1bfc31aecd15a905c6da27665227e00a6418f1612b2728f525080c81462e0bc6d","ssdeep":"","tlshash":"d1500030000c0300000300f0000c000300c000000000c00003030c003030000000c300","size":10,"data":"","first_seen":"2026-02-05T04:12:35.420785Z","last_seen":"2026-03-11T22:25:19.334503Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10013369?time=1649773464795","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7f4921c5ccb2f011ed1f297c8fbef17","sha1":"50a4d147faf330b6f44c872ef73a4a99657cb082","sha256":"e4a3a6e3d5e17ec51c06c193ae8f9fe23c7c02cc3489ae7ece50f9100acb0c58","sha512":"471375b4f8600ee1f28e25185be255c54285dcb85ade5e15e73ca00f790e6f849109befcbf622a6051223618f2350b1573176a7e0a78d1f5df9e6dae63b85e09","ssdeep":"","tlshash":"4a2133b58c09bc9ae6a520c16b1b188cb3be31991188c3933bcdc792cf68cc55d2c156","size":1229,"data":"","first_seen":"2026-02-25T21:34:00.790929Z","last_seen":"2026-02-25T21:34:00.790929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bef7aca313d9f99ebe956099d5af8580","sha1":"452270357b06bf39c78447fe484419fb864cc2df","sha256":"0e6e4f467ca6dd01ed457a2cf80c8bfbd72f5fb734c32bebb94970fafcf5a3c5","sha512":"667713b37f4bcc293f943bed44b1a1fd6b56992f0c529bb35af577beee7b96de820b984b260af8330b0b5e18f3c1054dbd04363d465c816568f20e217ba3634f","ssdeep":"192:y1sjMoq08NF4KeirOdmpMWysnfUcgczmji4:lQoq08feiV8snfET+4","tlshash":"dff174c97283f6a156e79169903f6203f22d5a25782ee550f653fa807828cdbc172e27","size":8044,"data":"","first_seen":"2026-02-16T16:38:19.740574Z","last_seen":"2026-02-26T12:27:09.113495Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3879b8ee7d8b42b29e6814fd0abd790","sha1":"b3b6cf572697a0b809e371f7e706668ccd9ae040","sha256":"7c21d37376111b883a8a93bccfd5770040d9bbb2bdfe52c0e51977ef86616b6e","sha512":"49045adbc4ae6d730613a2c486b117180161cb8c8598be5c0be320eb5961859f4be1f37a8000959148c3b5fef6594c997bacf22b1cb62686ef285c709a483ec2","ssdeep":"","tlshash":"f12140322b36cea05257f11e95052788be360585b5092f57751d0b8c0fd67b817e62f6","size":1276,"data":"","first_seen":"2023-06-27T06:31:22Z","last_seen":"2026-03-11T22:25:19.326246Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/check.html","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-06T07:52:28.485793Z","times_seen":11434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-06T06:44:29.342344Z","times_seen":15994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77bc545b5086d9e6afca7e528ac58943","sha1":"fc22e453216834d21697cb3be24f270eb75676ee","sha256":"a25696f8aa219e6fae19fad175f8349dcf85c71e3c82a361d3f48417775873ed","sha512":"21346f9a66d866ee152d51a68e9494abd8ed05cd669df5948e84532052f5c227b39525d695910801a8ab4373f43c763ef54227fcdd260370f3b27b49138e3eb0","ssdeep":"6144:KHmW9oO1EmZQHSBre0gnwJwtLvRXd2dhmpkAnuXZiEdh2q/ZqgDp6lbD78OrJATh:4Re0oYAWZzdXn13BI0tPqXQvq9ba","tlshash":"bc3528897755b47646c79146e03f0203f235695a201a905cb3aeececa56ceceb237b37","size":1139347,"data":"","first_seen":"2026-02-20T18:20:29.441873Z","last_seen":"2026-02-26T12:27:09.19281Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92eb65c42ab1611809beaa45fe617ce2","sha1":"650d1de5dde2ab5307a17ce293846fc00a95436e","sha256":"2d716e54266461a9c9623e56fdc41c646770321669bd3ea77e034fe010780139","sha512":"e5f7412278c7b5452cc22613be7ad72f685beada40e0c6f17e824951927252ca550b91d1453f472b2b71e5ad08a1961a4a1a226ea0ba88642368d5336e7eeaf2","ssdeep":"192:Aa8Jk4prVtQxLbnipV793bozocCsvJWiW7j5leTDb4xzryZj9oKDtHoqtJfPOd:/uprVMgVZrozlKiWv5l4b4x6V9oKy2fA","tlshash":"25222ab522957d570b744ccda07e2458f5ac2a01388d8d88f4adec8b3c53d858ab7e7d","size":10023,"data":"","first_seen":"2026-02-05T04:12:35.41265Z","last_seen":"2026-03-11T22:25:19.325382Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c555b31f3c5ac6e8fac5e9ea971be55","sha1":"0f29568667c9788fb16f187e21083ed68d0144ef","sha256":"0ab0d9f38b39e4747469f444ce0345ad6cff5432d1de399d664c4958736e4e78","sha512":"61b934da6538155bce466614ea0d2ee0c5c68fb8fd89b5d366e68591d17ba5e708360b5074f7bacc416916e9db38506f83a33b55554a2700c9de103431c6469a","ssdeep":"","tlshash":"4341e2ee25a0fda0069a714c712b180af1bc35e0e3ace9c69fba84b47d3d6445151aed","size":2367,"data":"","first_seen":"2026-02-16T14:18:21.37662Z","last_seen":"2026-03-23T06:05:48.059911Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/lazysizes.min.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0508afadd8850af8c32076e83ec5c3a7","sha1":"9f6c7fcb46836b6aa0852205c2dec836d6245333","sha256":"0977fd57728130160687936aeea6f3628f0238e54f3860aaeff9add19e1e77c1","sha512":"90985007cd95e38af0e592e3eef720f89015572450d9df1b85621242dccfe9f9a5d4bdda140d437756b8464d7925f5d5137de2092c2d8350ac101a3dc7557f92","ssdeep":"192:sO+402wu7y72uBX48ppq77UExVKvgGVb8Q4DqHZn2HOklZ6fx:sO+40Qy72uZ07UEPdGVb8Q4DqHZn2ukw","tlshash":"bad1f7deb576b0b7b8576874913f120ea2337423b8468865a9bdd0c01b3cd992233e3d","size":6755,"data":"","first_seen":"2023-03-07T01:27:40Z","last_seen":"2026-03-26T01:32:38.04488Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b668ec2a528f959f9a355dd7887266ce","sha1":"a3ed7b887b062abac773d60bb1cdd299c6ffe23a","sha256":"ed6b9addd2e538a6277225d40c5e2e84c61f6634d9c3d86073901d7eac7ab44f","sha512":"0b7273f140847aab0b31ad76e5dde69ff28f08f2d779d533a505a35e98bb87403e892d493954442c227780a6bf7dd21ff9665e99993604c2119bddb7a3eaa162","ssdeep":"","tlshash":"d3019e358b6d342f99fc30ad4d3522df282c82fb2d819c527d5ccc145524f148981d29","size":667,"data":"","first_seen":"2025-12-23T18:14:38.171587Z","last_seen":"2026-03-11T22:25:19.343294Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-06T07:35:42.001524Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"557a6452b7ae766047b0f0f32af614b3","sha1":"99342cb294a3f59cf6b4c9ba097a9450ed0dcb1d","sha256":"5664c6186443296bfdd6eecad295eabaf70ffba751ece0b96be196c57b028fcd","sha512":"c28b628fdcf02f68d9bde822915c9a7011ddb1ca7a200a0f6cf8511466e618989e7b9e3e666ab8f9fb420b941eac2a485755ad8560a7e991410bd4c661c4c5ea","ssdeep":"384:mmHJ9MxalidgdECATi/5MHu8O8R0dQQZsr+vrru/KWFiWprIs3Ot6/ZAHFOSB3yB:mS9DBMOsgoww/bpr+6xCUN7UfcT/","tlshash":"e0d2c7cb38dbf0892222dc71245b71eaab1d1c957868097ecf43d960bcab78944f4dd9","size":30775,"data":"","first_seen":"2026-02-25T21:34:00.747011Z","last_seen":"2026-02-25T22:26:55.34351Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832745?id=1832745\u0026pid=__clb-spot_1832745_vzh_2\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"34e427495d351ed22c2a52c8ce9df1a1","sha1":"5ce9af57ae0577ff79df24d14b7f38b59006d950","sha256":"4e9c51ea947bec682e193b27ac918504b7089304b2c010072b15bd960ac06cae","sha512":"7369e0d6c95105be16c1a900e2a28dd867ed5dce50b7601dbcfe375210e8eef9c51dc09b9bb4384b1da4aa06aee2e6fa8205dfba962b2574f9c1cf7144b4f206","ssdeep":"96:9emS/V0KtUaaQ/V0KtUaTC/V0KtUae0s/V0KtUaH7Tmo:odjtUaFjtUaOjtUaetjtUab6o","tlshash":"c1c1e95a3c181591e7ec4d1009fa3d7e68ee6cf0aba7c87de69474c831477e122740a7","size":5904,"data":"","first_seen":"2026-02-25T21:34:00.780082Z","last_seen":"2026-02-25T21:34:00.780082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-06T07:35:42.001524Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","size":16885,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T22:01:59.293971Z","times_seen":2337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012877?time=1633701610566","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e789dfe8f7664afeff98110e1ed6371d","sha1":"067c28a8ee30ee55bacbc40effd06646367295f9","sha256":"8d5d807a23d535d7fa62cbdead58646ca78b48301f1ea574e6e80f5b8b4a7baa","sha512":"674e6f87b040f2f977df27024cd6ca75c9d30caeecfb7a34027ca5d337524de9b35b243892fea3a8b41f2001878617dfb6c6af0ea95bad76af022dd977122932","ssdeep":"","tlshash":"f5210ff7250280fc317719c48f2b3f4971aaa3015e55c500c01edef5b64945bf6366e9","size":1289,"data":"","first_seen":"2026-02-25T21:34:00.794859Z","last_seen":"2026-02-25T21:34:00.794859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdb6bd703de80c022eef45c69c531c17","sha1":"72af6d9765d5f7d4f4473e170a9fdebdf85d599d","sha256":"e68a6d78be19f7a34d09d937473da9ad1b578e7407f937eb927c752f93fff370","sha512":"3a9de4877da2ea88a47c4d9167c1d84fd7e56c965cc44540f33f6263bced900452bbb6a1b7fd5d0c78a5e34b160e2c2c11c0fe2137dc89c012913612890eff8a","ssdeep":"","tlshash":"d2d0235a2975c83061d9014610bbd398656131907b11f24481c8cc6f7e12dd304f195c","size":217,"data":"","first_seen":"2026-02-25T21:34:00.795567Z","last_seen":"2026-02-25T21:34:00.795567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-06T07:35:41.999433Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832748?id=1832748\u0026pid=__clb-spot_1832748_bsh_1\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72afe2e2d487024819dc1717b285f47b","sha1":"b417e705d966e794ffc4a5698cb38ef0aac6b117","sha256":"84fd376b2a8ec294011a1c7a5479168520a371bca0a74ab6579d36287ee1e4ed","sha512":"5b1f0899b4049ca438330950aff80773fec1c764fff11012e75302a3a94af71dd3eec4bcd65d9ad489c0b1dbb158d00346deb9ac08dbb1484f361ec7a60887ca","ssdeep":"96:9oV/yRZrv0JS2CXEy/yRZrv0JS2CXEA/yRZrv0JS2CXEV/yRZrv0JS2CXE36spqF:qoZ70JFyoZ70JFAoZ70JFVoZ70JF3rpi","tlshash":"07c1e82651c9e3857ab1bb39a723995c35dd0192ce0580b897fdf30255d361abe48f30","size":5904,"data":"","first_seen":"2026-02-25T21:34:00.78354Z","last_seen":"2026-02-25T21:34:00.78354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10013369?time=1649773464795","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eea03f075befb3fd6f810543523d8290","sha1":"c1c5fea8e67e078064db761aa6514a1e94db8b59","sha256":"9561b5306c066d1820f9ce2387936fc9bfef2029ff585c4eb4ff718ea37251f8","sha512":"4d61b74a1edf101ee9b859dfc7c2649fa19bb34cde20b6d24d717e17b7555437a778606ea0733e6f7361fcbc2a4d7516cc8bda2f445ee5e19a2c8ac4ce610d2e","ssdeep":"","tlshash":"3a117241380a265cf96373b36c1d0ba6075a195638c200f856e36c8f9e226ffd08026a","size":1038,"data":"","first_seen":"2026-02-25T21:34:00.796874Z","last_seen":"2026-02-25T21:34:00.796874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012877?time=1633701610566","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1811fb56a8e1f69688fbbbc55fa7ac1","sha1":"c88ca74cd1bf68587c28f125d4aa7302ad59b84e","sha256":"1d722b56b22b01ed668e9bb7d25b3b3691ca160160d752e4d8dcdf0051fb116e","sha512":"4cd331454ea51f5941bee0a085438887b40a85be7416c400bac3cbde8810e7e928946dddf25520572b566cb7c2d1461f9541a2050e64680c53a55da06e25c6ee","ssdeep":"","tlshash":"e411721138245e5cb5bba7737c0c0be40306268634c380e4a6d6ad8f78211ffd58466b","size":1046,"data":"","first_seen":"2026-02-25T21:34:00.797731Z","last_seen":"2026-02-25T21:34:00.797731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/bn.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa07e65a55a0bb7c0bda926c228d23ac","sha1":"6b354fa76165fe06ee4788aa1e3de9ad18c33948","sha256":"185b9818915e1373e24d8391e60c5637595c7e8a0b40718ced087cc58f719089","sha512":"616d4018264f496b21c6aed3b205cd01fcdf8a51ebd56b0328eb0a15603edb0b014a1c7474c2d175f49676a74d616d38371392d47bcb6695da53ba226403619a","ssdeep":"1536:QN5OA5b8+Iea+BLbaopPSePDbP5zfgK45liVBgyud+8iTy3:QNwLr+B1FPHZ4hLrvCq","tlshash":"4b83d795ba91b431425790e892bf401da23b3d68a4fd5038b1d2e8de2cbdd8d5223f7d","size":82284,"data":"","first_seen":"2026-02-25T10:45:15.842646Z","last_seen":"2026-03-02T00:32:20.436102Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/on.js","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bccf0ee1386eaed685cbce60aa0f7932","sha1":"483ae7516160e4873f32be12084aeeb498823947","sha256":"0984eec1bc01af14e5ac26cb4f73ff4997c1f7899fd3f6d5c4f93f0b5ae07b14","sha512":"5185e4cf15e55264db961032903db0d2a9d9b34527365d6140363917a2e9b6a568dbf5b117d9b3d0163df64679f6dc76d46c4798004bda0765c6ec13b5d35614","ssdeep":"1536:e/j5W++p22/hw8BltXss5SH6DZ5zdxNNHZOWo:wc8s5h1dRQ","tlshash":"d2639799f695b865035390f852bf401da33a3d6ca4fc1168b181e8ea2c7cd4d9623f7e","size":72672,"data":"","first_seen":"2026-02-25T14:22:46.461901Z","last_seen":"2026-03-02T08:06:40.926806Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/sandbox%20eval%20code","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T08:11:36.186216Z","times_seen":775331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:SyJLyojtnYt2b4PIdQXahVCzS3u7CuEi7rh2dC2+A4coFLULlpUsPK:rmXax3GCri7rpA4TFejC","tlshash":"1ea18301197529364cf82561911f2e6f42a286255a9bbca1c3c2fe44fcf5e53145bff3","size":5027,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-05T22:01:59.34148Z","times_seen":2319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b0969e8ed56a94869ba56ccebbcccbe","sha1":"130c79b626fbbb4f59a8c937680159cbcbf1da0a","sha256":"df904fdf565895db48154043dede56d12537d30db2c449a2735446d1704d17df","sha512":"c815850f10d788231040cc5e3b78b0ceb3ede18dffbfeb3315b710e46df2817e22d7651d09f9086533f5ab1c7e5750d33aed802918f0d0391055838f9ad5750c","ssdeep":"192:Aa8Jk4prVtQxLbnipV793bozocCsvJWiW7j5leTDb4xzryZj9oKDtHoqtJfPOs:/uprVMgVZrozlKiWv5l4b4x6V9oKy2ft","tlshash":"74221ab522957d570b744ccda07e2458f5ac2a01388d8d88f4adec8b3c53d858ab7e7d","size":10021,"data":"","first_seen":"2026-02-05T04:12:35.41772Z","last_seen":"2026-03-11T22:25:19.348486Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:SyJLyojtnYt2b4PIdQXahVCzS3u7CuEi7rh2dC2+A4coFLULlpUsPK:rmXax3GCri7rpA4TFejC","tlshash":"1ea18301197529364cf82561911f2e6f42a286255a9bbca1c3c2fe44fcf5e53145bff3","size":5027,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-05T22:01:59.34148Z","times_seen":2319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"def4e51400980b7f31c3af6362029cf3","sha1":"8c82ba6ef5632702fee8a08fdbeb5e8960e5c2c8","sha256":"9d0a2e9f12826bc8adf0242d44f43de5cec6a8a8d204098d4ecb3733d84c0e2d","sha512":"27b61a7e1f56707f6a1fe6dde505617b5be68ae3c4e8140de0ce8527ee2779aa91b535d5edcb10084ead8057f0aa234dc8566d77d3a07ab7879ac5cd242ee8f8","ssdeep":"","tlshash":"3160000c003c0000c000cf000030c00303cc0000c030000000000003c030f030000c03","size":12,"data":"","first_seen":"2026-02-05T04:12:35.431957Z","last_seen":"2026-03-11T22:25:19.326933Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54614a1e732d8caa2060eb9322cb737","sha1":"ad4b29d49ab1309b7c5cafad81696d5eb2b0586a","sha256":"891f0d2a692ad0336116efeafd3fadbe1f42e91bb7f1a7164d5a932ad467ae53","sha512":"79e28629126bbc5b5cff981a33bc840732475deec1acf1f5e4b31cd2428fe41e52558230c8a4cc204e5785346617dee8473e266add481fcb9aa8d648ecd14ff5","ssdeep":"3072:WdFH7K9+28VOk2DG2HgMaElwnReSI1YsBHishYolYHoJCXMZpo:yc+28VOk262SElwnRQYs4sDNpo","tlshash":"62045d993792303441d3a12da9ff53093371506ab80f4884bb4dd9a427adeea51a3ffd","size":186896,"data":"","first_seen":"2026-02-24T11:39:58.52362Z","last_seen":"2026-03-03T14:32:00.527833Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77bc545b5086d9e6afca7e528ac58943","sha1":"fc22e453216834d21697cb3be24f270eb75676ee","sha256":"a25696f8aa219e6fae19fad175f8349dcf85c71e3c82a361d3f48417775873ed","sha512":"21346f9a66d866ee152d51a68e9494abd8ed05cd669df5948e84532052f5c227b39525d695910801a8ab4373f43c763ef54227fcdd260370f3b27b49138e3eb0","ssdeep":"6144:KHmW9oO1EmZQHSBre0gnwJwtLvRXd2dhmpkAnuXZiEdh2q/ZqgDp6lbD78OrJATh:4Re0oYAWZzdXn13BI0tPqXQvq9ba","tlshash":"bc3528897755b47646c79146e03f0203f235695a201a905cb3aeececa56ceceb237b37","size":1139347,"data":"","first_seen":"2026-02-20T18:20:29.441873Z","last_seen":"2026-02-26T12:27:09.19281Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61ecb3ca5bc79ea3ecd32927560cfbad","sha1":"00788f916bf2b0bfe927889ea50d5689c53c222a","sha256":"881fcf0beb65cf35708474a883537d96ad67291fb6c493e00ec9ca0aae136ad1","sha512":"d20bededc8b033f78105381bde5bf72d0f610699697831e267309e4c70165e5693fefdd64dbeb7addcb2b5e82e0c2bf62ebe956b25e5612ab0620cdf45c5d2cf","ssdeep":"","tlshash":"96b092a876d83a25c02717a24a9a4418a33818208a6b4f4c8083909ad5a0e186b48a9d","size":111,"data":"","first_seen":"2023-09-17T06:44:56Z","last_seen":"2026-03-11T22:25:19.353777Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e36ec4d980f36a2876f2dd7032cd8212","sha1":"9a4bd5be796f302440e37a9106deb8e122a6cc1d","sha256":"8e9da2174c43677763a6cce8dea331faf2a83b3b8423461354ebdf4d7852585b","sha512":"0c6ceea762c3adbfb67943d7b8f871f97e91b00be9f71dda4369574a0fe7e1d720277d247d94efd2bb608683a3383bd499e21f1e6c0c4772c48b8151c6d3438c","ssdeep":"","tlshash":"84c02b88320a0c7189f72780cb3fff00b802322496d0dd31881963044d30e03d754840","size":154,"data":"","first_seen":"2023-03-07T01:32:14Z","last_seen":"2026-03-11T22:25:19.355213Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8a15347ead1a1ce21f6616d397f389d","sha1":"5e47dc22d40dfa76841857c98e14610f2a993eb9","sha256":"5c49a18fda2747f948428edc1e354bb161cbbd570765f8a0f62e739a68d65013","sha512":"45a6e1d784b5e551540aa99f5dfd59d69d68b22d441a39bf2ec9b467e4b15c1b214bbf0118fb149a36f3d1c8c5f3245e0cb6b3638870f90f3812bb3ebc5d1c5c","ssdeep":"","tlshash":"e9900280457c049195831a1d1807494267810a61c581ac1454058d5d00c1a591941975","size":54,"data":"","first_seen":"2026-02-25T21:34:00.80215Z","last_seen":"2026-02-25T21:34:00.80215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-137797503-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8633d88b635e54f41841cb9f5afdc447","sha1":"4fc22649ad797c289ffcd657b286e9f5971e7c05","sha256":"b001a7b6758530d824b8ecc6d2fb03a8db5e974733cd11668df2dd006f50c21c","sha512":"b18d7351e1b44fe50072ec2b5fee208d10f41f3628d07fad1a786dfefc82553b8754e5cb084f88be335ccd2edb7a034800ebbaba468fa123da14b3c5dce2361a","ssdeep":"6144:UkOidcI7obOXyIGU8JlDoD9fHU+O9N89YbD8qbt50rJ:5X+I7obOiE8HN8rqnO","tlshash":"b47408cdb3da742693a3a478503f018bb27b6992f84cc899f185d8d42d7069a4277f7c","size":344075,"data":"","first_seen":"2026-02-25T21:34:00.745963Z","last_seen":"2026-02-25T21:34:00.745963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-06T07:52:28.368921Z","times_seen":13341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-65GXH7VZ2F\u0026cx=c\u0026gtm=4e62o0h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35e205394e53b5f4352fd9a62c2af1e3","sha1":"ec79dd269863c453ffd842cb462fd238948eb635","sha256":"0a5a66a54bf8fc37e5c643adc5bb065eaba4427bc04eb5731df5204d02a05cd0","sha512":"f0472d72e0a88b5184a02c4d2986170b90b149eb5ac97f3d08d26ec38847d1f5213aa764b45ad9b8f7d139d13453afc121a4bc13d565da96dcbea29896c17353","ssdeep":"6144:3mkOidcol7ob7XyIGQf8JlVoe9fHU+O7N8pAbDXqbHvs:3X+ol7ob7igf8oN8IqI","tlshash":"879419cd73da74269396b478503f018ba57b69a2f84cc899f189cce42d7469a4233f7c","size":410368,"data":"","first_seen":"2026-02-25T21:34:00.766463Z","last_seen":"2026-02-25T21:34:00.766463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-06T08:11:36.193601Z","times_seen":773776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"235244de9547a14aa72c5e8d0f233b4b","sha1":"53fffb7f669d170ac8840ac25aa7a07d575a0ea9","sha256":"053da5edf581d91b15f6a42cfe86e8f5a991be71b69d76edaadc61b1fbaa18da","sha512":"aefaa6fa65f2ddcd0f512e960a2e384bc8f622b0e4f3847dce0d8a06cc6488a0d0042cd2319ffd525be3790ff054b67ef2b07fcab84b72ea5d06bfc196e23f55","ssdeep":"3072:UIt1aTzdOf1AVhkbZG6veYfeRhI+f99ZQNBDsHCv31Z:CzdO9An4ekCIe9ZcdsHCf1Z","tlshash":"f534c5c9b6c2b8e483e361b4063f190af277b945744ec481f529d5c1aebda0e5927f38","size":247878,"data":"","first_seen":"2026-02-16T14:18:21.367275Z","last_seen":"2026-04-05T01:23:04.692078Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/44/b1/0b/44b10b6e356d5cc0e4e5fd7b99b474f3.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cacc0bfb132ffbbf4b53ed5e26b2d402","sha1":"f1e5390428951d29b313f1beba4d27aceb89446e","sha256":"2d946abecc831b31d45a86817327be630b3103b18a6c257200c2d73734d9300f","sha512":"af4a16eb723074da6dd2d9b8a4b196d4396e571e24c9f8cf7ded4c897a950a0f044e4a56aa417a116589eb1a79bf9dc3a531bd3139945a2af42d284b0d9f5d77","ssdeep":"1536:B9G5BDb4zi2+kxAnW4CtgjvG+ldwK0IP8HL7OBIfPl+BwQeo7i6zNkvl:B84zi2++4zvVUr70IfP0Br7dzNkN","tlshash":"d6b3f7c83f60f56c2356703b223fa40af0794e41509ce55ce25bf9b82e69b2ad93e754","size":113253,"data":"","first_seen":"2026-02-25T21:34:00.761566Z","last_seen":"2026-02-25T21:34:00.761566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54614a1e732d8caa2060eb9322cb737","sha1":"ad4b29d49ab1309b7c5cafad81696d5eb2b0586a","sha256":"891f0d2a692ad0336116efeafd3fadbe1f42e91bb7f1a7164d5a932ad467ae53","sha512":"79e28629126bbc5b5cff981a33bc840732475deec1acf1f5e4b31cd2428fe41e52558230c8a4cc204e5785346617dee8473e266add481fcb9aa8d648ecd14ff5","ssdeep":"3072:WdFH7K9+28VOk2DG2HgMaElwnReSI1YsBHishYolYHoJCXMZpo:yc+28VOk262SElwnRQYs4sDNpo","tlshash":"62045d993792303441d3a12da9ff53093371506ab80f4884bb4dd9a427adeea51a3ffd","size":186896,"data":"","first_seen":"2026-02-24T11:39:58.52362Z","last_seen":"2026-03-03T14:32:00.527833Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bc17249a4968949b10c507c6adab04b","sha1":"25d306a677f46ea0d49c39571d886a1133e1f8f0","sha256":"526e8a6593acc234697210c5f4772d1744a908ebbac1e6a1a672f6c024939ac8","sha512":"9054bcaab327f41e7780f92c235d571dec4a482c7200c8ec23383fd8b8f4d59c1722fe357b7a9af5e60c5e4e3eded2997e8f1421de4f966173fa1da59ab5ef65","ssdeep":"","tlshash":"5311c0793b2a5534c6c5418b317ee7a93d3260617e02e184c36ccc295d18e8714efcbe","size":902,"data":"","first_seen":"2026-02-25T21:34:00.803802Z","last_seen":"2026-02-25T21:34:00.803802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-06T07:35:41.999433Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a.adtng.com/get/10012877?time=1633701610566","date":"2026-02-25T21:33:25.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ang-content.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Sep 2025 00:00:00 GMT","end":"Mon, 19 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:85:31:86:5B:3D:BC:C6:72:9A:EF:DB:90:03:59:87:52:43:B0:5A","sha256":"90:34:33:39:E2:D4:23:D7:93:5E:3D:F6:82:61:E0:CE:2B:1D:64:66:59:0E:7F:95:8A:5B:1B:6D:25:4B:8D:D8"}}},"request":{"raw":"GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.19.9.1\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Nov 2018 14:17:11 GMT\r\netag: \"13a3-579af30f7688b\"\r\nexpires: Thu, 24 Apr 2025 01:07:43 GMT\r\ncache-control: max-age=10488628, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nage: 4962108\r\nx-served-by: cache-ams2100110-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 55, 35606\r\nx-timer: S1772055205.481709,VS0,VE0\r\naccess-control-allow-origin: *\r\ncontent-length: 5027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5027), with no line terminators","md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:SyJLyojtnYt2b4PIdQXahVCzS3u7CuEi7rh2dC2+A4coFLULlpUsPK:rmXax3GCri7rpA4TFejC","tlshash":"1ea18301197529364cf82561911f2e6f42a286255a9bbca1c3c2fe44fcf5e53145bff3","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-05T22:01:59.34148Z","times_seen":2319,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/1/23/vid/mvqxjy2ZZGWj-fXqlZJflA/1772056800/698214cf288f9/699e5eb13b0b4/small.jpg","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/23/vid/mvqxjy2ZZGWj-fXqlZJflA/1772056800/698214cf288f9/699e5eb13b0b4/small.jpg HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10219\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Feb 2026 02:39:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9mKEyYW9FYgGFzYuJmDaUYYwbOHrMDK7D2I7Bu94G6lDfkMOo31gmPZfrDllPqjqE33VOX91VQG4A%2B6VU2EbfKHvtgS5iwY4byj4AewHcc8LZ0s7g%3D%3D\"}]}\r\netag: \"699e60e2-27eb\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231db4fc63f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.9.100\", baseline, precision 8, 320x240, components 3","md5":"999a20d8bc4071d6ced71b9a419ce866","sha1":"f9319a1438cde4b2027739db05f91d60bfcb1872","sha256":"a60f0ad3a4246a51090e0598b6a59b0de941e906008a9407ff6bf9e3c89ba8ec","sha512":"93e07d683ee644cfe76727e9dd3bffd05a0ee1feb659e1755866124303bfb1ca3e57e733470080fb7f8c8177895ba51ea393924b9354be2639ca4647230a4aac","ssdeep":"192:RCiO2z1JFybxIA1sJNn9WloH37I3MIeFgWp8CjsbEukmi:RCiO0JAdN17lCchet8CjNmi","tlshash":"0522af4ecb0e2024bd251eb7062513c74bf8c57f9eeeba612166a477188d8e885e84e1","first_seen":"2026-02-25T21:34:00.695365Z","last_seen":"2026-02-25T21:34:00.695365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":68,"dns":14,"connect":10,"send":0,"wait":20,"receive":2,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 06:24:57 GMT","end":"Sat, 11 Apr 2026 07:24:53 GMT"},"fingerprint":{"sha1":"85:31:6D:37:59:CC:E4:1E:9E:25:D3:EC:50:FB:F3:0B:2D:9F:C3:0E","sha256":"31:A7:9F:AB:94:EA:14:50:1C:73:E7:70:8B:27:3B:54:9F:6C:AA:B6:BB:22:CC:68:78:D9:19:1B:BD:13:04:FA"}}},"request":{"raw":"GET /bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\ncf-ray: 9d3a52343c34b1b8-OSL\r\nx-amz-id-2: HqIFxR7YXBCjtR+e4Ljf+cpsuWcdhU3q4XgmqTHtxsmCL9cT44HnFX3ZSuP8MNPE7m2k6c3+t9M=\r\nx-amz-request-id: VDDS7JP82P0MM7SX\r\nlast-modified: Tue, 03 Feb 2026 10:43:20 GMT\r\netag: \"a3b98c80c70230b4d4b1a67890d6f719\"\r\nx-amz-server-side-encryption: AES256\r\nage: 1228900\r\ncontent-range: bytes 0-820202/820203\r\nexpires: Sat, 28 Mar 2026 21:33:27 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":43,"dns":11,"connect":1,"send":0,"wait":28,"receive":95,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/4.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/4.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1688\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzH6GggDaQc60Hq3kEK0zvFjzExMHZMhVeyo3phdt282WX7yI%2BtR%2FZixrqGyJzWRukB3yIUeURbgVwVYbBpCLX4U3saFuD75\"}]}\r\netag: \"6224696c-698\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 575340\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235f8d45bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"97cb31e356eb462658664efda688d7a9","sha1":"81f0e0e766947342b06ac4bc5c396e5022db985c","sha256":"81e25fa5f3935b6e67d848110c6aa583c690491af73f0b7b7a6204cd0c846621","sha512":"965b33399bdb5b449cd0c521699704b9419347cf1da72715760960ae172fb61f411be984e2a121ffa1e56b0f671673a276f6d269f02bd19acc25a7af3c8f7c62","ssdeep":"","tlshash":"d231f8c3d394bc8858addb6e6c594ba2030a7cf203a6a30095ccf633ff65b44e6e2104","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.16927Z","times_seen":198,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/0/12/img/We0WJ39MUd_ga1ByhCr-bg/1772056800/68f4b8c998919/699e2a491325f/0.webp","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/12/img/We0WJ39MUd_ga1ByhCr-bg/1772056800/68f4b8c998919/699e2a491325f/0.webp HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24438\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 24 Feb 2026 22:46:54 GMT\r\netag: \"699e2a5e-5f76\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgpjkURur8iiTs4xxrqfcZFGX133npiE%2BXwt6mE1ImiNUkyIB8K0cysWqmt9MADmN4ow4vqlvd%2FjMHgyRoXXteDKPuddccqmtuxhimEw%2BBu457DhBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523adb324e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0e3be04de466486ee28277a0ec794d9","sha1":"2b9738700f9a4c8eff5aef11d335d8c20fd7ea90","sha256":"65015f379679da2dc6150ababcd950b242cf38d0f6249f9bbad3f8d77acb9e60","sha512":"6d5056c1d4d1f2185a1839c16ecaf701e1c83313540e2fa2776b34eea4e2728282e2b3795df04b488f4be80904e03fe38aafc8145100a7248270c9ba9e4467af","ssdeep":"384:V6FIbplfHbnG0CJ0DEdd8Aq4mY0P1Sa7xbUaP7RjV07eOfOLiLGmDCat:V6FIrTnGlaYN0oa7xpR4WPmDv","tlshash":"18b2e13f1ab355d2ef0036bc3ba04256c2673b91c7e642dd4fa2281b6d539a1d35623c","first_seen":"2026-02-25T21:34:00.698531Z","last_seen":"2026-02-25T21:34:00.698531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054850/197455312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054850/197455312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10632\r\ncf-ray: 9d3a5241afe81243-ARN\r\netag: \"2a0ae12fc51388b2310274b5b633e5e9\"\r\nlast-modified: Wed, 25 Feb 2026 21:26:47 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 349\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a0ae12fc51388b2310274b5b633e5e9","sha1":"a4820573645b0cacbcabd032e5735185ab5a9175","sha256":"4d633ddde998a3810eb0d5eed1dd67f9d955a96e1719e7ccac535d55f77fc795","sha512":"f8a1ae15585f75da00560a8bac4917f90f73629796a864f620cbdba354182afed4522edc8d29aa2470113ea816390645cee9bca476af4fffaa02c9021b22bad5","ssdeep":"192:VaubwzpPIzDjUOSs5rZNOLfolznRCZFdfzylPZToDjJshDNontkt:gwz3UOSCZNZlsZFd78PZLBotO","tlshash":"d022d08fb60b4e8c05787720a106e106b348383e4299acdc6e9db365e7b87649f5d639","first_seen":"2026-02-25T21:34:00.700836Z","last_seen":"2026-02-25T21:34:00.700836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T21:33:24.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.4RC1\r\nset-cookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-security-policy: frame-ancestors 'self';\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload;\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fenlgx6YaOU9kC642wsko8qtTYaQQy9sesa24N4U6p18F2KgKZEEiMV5nRNKri%2BQfme386TqyesdIcPcRTRK3UR9QdkgzuxQ7vw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d3a52238fb52dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.1.4","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]}],"data":{"size":417189,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18890)","md5":"28b20dbbee8a2dacc3579ed21c0c4933","sha1":"bdc2742581ab21268373146df3bc5b10dd1fd4e6","sha256":"2d4812d3f626bea735af5f536f182b15a425e16b07b49e734a6b68f2c630d9ec","sha512":"78816b235481f26266d408ec352e86dd21c24b3b5696f4564319131a77bdd041879c6deba96567bc61156a07d2dcffa39b7756db3d4fe0f824f4dd3c3f4f552d","ssdeep":"3072:kBuEBUwPKwE8fhHaMm6p+7/EFrguQ28t0kJhJdkGshJdjK64Fn:kBdBUSKwEYhHtmM6EFrgVVj323In","tlshash":"9994c672a9c14137427387d6b2da6b6db0b3b040f9024ab4d77e9f9947cbe01b5239b1","first_seen":"2026-02-25T21:34:00.701689Z","last_seen":"2026-02-25T21:34:00.701689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":36,"dns":0,"connect":8,"send":0,"wait":89,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:22:51 GMT","end":"Sun, 24 May 2026 08:22:50 GMT"},"fingerprint":{"sha1":"51:4C:15:FB:47:44:FA:A8:E5:C3:C9:E1:C6:2A:CE:3F:1F:DD:7E:CE","sha256":"58:4D:39:CD:58:CF:09:A4:17:8E:80:49:FF:5C:B0:CF:61:C6:0E:57:8E:8A:0E:13:E5:98:09:4C:93:14:89:13"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0908bf20d882069d8dc1bfdcf3e\"\r\nexpires: Tue, 24 Feb 2026 17:35:54 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3HgAAAAwBuUwKCQH3zAAAAAwBJRPCVwG3fAwAAA\r\nx-77-nzt-ray: 2a494a1555527522ca6a9f69b9ede137\r\nx-77-cache: HIT\r\nx-77-age: 30\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122444,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":30,"dns":20,"connect":1,"send":0,"wait":1,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/get/1941843?id=1941843\u0026jp=_clxwtdkakubrqtwsxjzzju\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cS4aLVmaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=2086458246989312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1861\u0026rlp=%5B0%2C16%2C163%2C108%2C9688%2C2726%2C275%2C2581%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deputizepacifistwipe.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:43 GMT","end":"Mon, 06 Apr 2026 14:15:42 GMT"},"fingerprint":{"sha1":"61:C3:1A:A3:8F:26:5C:7D:48:B3:9C:81:0B:6B:FC:6C:F4:2D:0E:9B","sha256":"89:6B:30:99:27:13:BC:25:04:38:F1:B3:13:89:73:A6:7F:AF:92:99:EF:AF:00:29:E0:62:8F:67:CE:3D:A8:46"}}},"request":{"raw":"GET /get/1941843?id=1941843\u0026jp=_clxwtdkakubrqtwsxjzzju\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cS4aLVmaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=2086458246989312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1861\u0026rlp=%5B0%2C16%2C163%2C108%2C9688%2C2726%2C275%2C2581%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: deputizepacifistwipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\nUID=2602251633ffee6999598c46ca8549b7e4ef; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3454,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3454), with no line terminators","md5":"8f3cd713cd23c8d3329cb8cc7a6e6c90","sha1":"9d2cc22074c046a0205707ade925f9e0bcd9ae4f","sha256":"8e3ac7f4857dd3f919f299628b4242bac17f95a9eb22873919724be5381a9d0e","sha512":"d68d13f5910f154c61655da6cf9d319d98f60fb0ae05eaaa90bf2d201ee6828c1492371e1eade5347220e439f09f9608a5ffcedbcefbd4073d366b594ac2b3bf","ssdeep":"","tlshash":"c16182983884bc457d50a7d581ba8f18dd9f3fc2fa9d5b780910cac1811edfdbb50880","first_seen":"2026-02-25T21:34:00.703117Z","last_seen":"2026-02-25T21:34:00.703117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=20881576-5dd2-451d-8517-9d229801808e\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=50ea9a3e51a5ec5160f47477aeae3681\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=20881576-5dd2-451d-8517-9d229801808e\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=50ea9a3e51a5ec5160f47477aeae3681\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5ff03d2ad1ccb80148089a9cd93b7930\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":306,"dns":2,"connect":98,"send":0,"wait":97,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 243009\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBqv%2ByCFTr3DFdkQZxVfJX32now2xD7ER0a2qKQq5a39wKENhci5CRSFZV%2BLNiFsEARN5O37A4FsayUVCGsmctMJrOXb7aNsfsYNRuUdYmY%3D\"}]}\r\ncf-ray: 9d3a523eabad43fc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-04-06T04:46:05.220425Z","times_seen":4681,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=112","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=112 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":295,"dns":1,"connect":91,"send":0,"wait":95,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 06:24:57 GMT","end":"Sat, 11 Apr 2026 07:24:53 GMT"},"fingerprint":{"sha1":"85:31:6D:37:59:CC:E4:1E:9E:25:D3:EC:50:FB:F3:0B:2D:9F:C3:0E","sha256":"31:A7:9F:AB:94:EA:14:50:1C:73:E7:70:8B:27:3B:54:9F:6C:AA:B6:BB:22:CC:68:78:D9:19:1B:BD:13:04:FA"}}},"request":{"raw":"GET /bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\ncf-ray: 9d3a52344ccdb1b8-OSL\r\nx-amz-id-2: HqIFxR7YXBCjtR+e4Ljf+cpsuWcdhU3q4XgmqTHtxsmCL9cT44HnFX3ZSuP8MNPE7m2k6c3+t9M=\r\nx-amz-request-id: VDDS7JP82P0MM7SX\r\nlast-modified: Tue, 03 Feb 2026 10:43:20 GMT\r\netag: \"a3b98c80c70230b4d4b1a67890d6f719\"\r\nx-amz-server-side-encryption: AES256\r\nage: 1228900\r\ncontent-range: bytes 0-820202/820203\r\nexpires: Sat, 28 Mar 2026 21:33:27 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":55,"dns":7,"connect":10,"send":0,"wait":16,"receive":116,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/33.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/33.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1838\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v52V4jJreNybA5Uz6AkTk2d8ntUK4GrKsgWvy%2B719J8DN5RrR1qbSeh5cgdkoFo2vm2QZddeKU5CZzZc5KmmHC1Fj3wfMUh6\"}]}\r\netag: \"6224696c-72e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 574487\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236599e5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"24939499698f39126babf34d9c0d6aad","sha1":"47fc89a5b3488ae67eb2e954c6f7f636f1948875","sha256":"f940ece75438b693025bc46b5b9453f059372e460caf27574d1a1842a0264679","sha512":"0dece63ab78b805e716b1c2178f93b2b6da81c464fa0c1b5233260dbb1bd32dd1f5fce23a07c8b156a70e5e40c0d20cf6fd5cc3b625f017b7e418795671dee5e","ssdeep":"","tlshash":"6e31298d104c6c310d04d493e97e0780a879988ddd6e4c92eeda59d3ba79a7d01e0aab","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.252148Z","times_seen":145,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2; UID=26022516332c842207f2a54c6e8598e584ec; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 19:42:30 GMT","end":"Mon, 13 Apr 2026 20:42:29 GMT"},"fingerprint":{"sha1":"8B:86:62:5D:DA:6E:E7:85:65:6B:22:08:36:15:D6:DB:74:49:2C:2B","sha256":"6D:A6:50:F6:E9:17:78:60:D1:93:0B:C8:DA:F9:CA:2A:05:CB:D7:92:7D:75:CC:F0:30:1E:F7:E9:C8:4D:03:BB"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77766\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Feb 2026 13:17:25 GMT\r\netag: \"699318e5-12fc6\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 672035\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9d3a5225bacc1806-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247878,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"235244de9547a14aa72c5e8d0f233b4b","sha1":"53fffb7f669d170ac8840ac25aa7a07d575a0ea9","sha256":"053da5edf581d91b15f6a42cfe86e8f5a991be71b69d76edaadc61b1fbaa18da","sha512":"aefaa6fa65f2ddcd0f512e960a2e384bc8f622b0e4f3847dce0d8a06cc6488a0d0042cd2319ffd525be3790ff054b67ef2b07fcab84b72ea5d06bfc196e23f55","ssdeep":"3072:UIt1aTzdOf1AVhkbZG6veYfeRhI+f99ZQNBDsHCv31Z:CzdO9An4ekCIe9ZcdsHCf1Z","tlshash":"f534c5c9b6c2b8e483e361b4063f190af277b945744ec481f529d5c1aebda0e5927f38","first_seen":"2026-02-16T14:18:21.367275Z","last_seen":"2026-04-05T01:23:04.692078Z","times_seen":281,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":39,"dns":29,"connect":13,"send":0,"wait":12,"receive":11,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 25 Feb 2026 07:53:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699eaa60-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.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?unique_view=1","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a.adtng.com/get/10013369?time=1649773464795","date":"2026-02-25T21:33:25.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:67:8C:D2:F3:88:16:3D:99:D4:20:FD:1B:49:11:66:D1:6A:9F:43","sha256":"1A:A3:49:5D:8F:EA:EA:8E:F5:2F:82:5F:FF:33:C6:FF:50:0C:CF:FF:CA:65:5C:0A:74:2F:DB:27:1B:12:CF:EA"}}},"request":{"raw":"GET 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?unique_view=1 HTTP/1.1\r\nHost: a.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/get/10013369?time=1649773464795\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: openresty\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: text/html\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/13.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/13.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1684\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8a7nhpghGw1ZyG7VuIVFInvdPvClMRowOlYHXpqYOvyk2rZNTsrOQ23QtwcKhHRGaT3Fa7EOqqzrl2UHqIskJEgHi6p8d%2BB\"}]}\r\netag: \"6224696c-694\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 665068\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236394c5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f3108e1fec649df8b0f16834c0029918","sha1":"627356908448b2dec901bd94e44fa5a24c67b7cd","sha256":"8432e200a0237edf8bc24dddb5090af2eddbbdde46a7e6db624fa36d5e6365f6","sha512":"3565b7380e11b6cde2b71d013ae1079015362e28335996e745cddab4ecc18c58e3439124cfeef232556dacd1c2f6d06373edbd4ef8763e6a56579b8e6f4ba6fe","ssdeep":"","tlshash":"8b31fa65881ce98cde9b07bd26555e5ccf1b4f23b5640058bf7984a90a60c4ca784ccb","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-11T22:25:19.199375Z","times_seen":123,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.campfirecroutondecorator.com/static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"www.campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: www.campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\nlast-modified: Sun, 15 Feb 2026 18:56:12 GMT\r\netag: \"699216cc-c83eb\"\r\nexpires: Sun, 26 Apr 2026 21:33:28 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-820202/820203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/1/15/img/iaAb8P_1B7OLWRJ9Gk7Aug/1772056800/5f3950a938042/699e9b6e584e2/0.webp","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/15/img/iaAb8P_1B7OLWRJ9Gk7Aug/1772056800/5f3950a938042/699e9b6e584e2/0.webp HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22014\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 06:52:28 GMT\r\netag: \"699e9c2c-55fe\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MO5Dvf4DMNfyYjNZ7zuYSGqJZEIZgWUN7aQE1jGYoK%2F3PF7qcYsssOo4pROZXRWUe05Zq5MSkevc7Y6lr7rQqoFI8ZEkWzLgkvwzHlprTnpbn1zhbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523adb364e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x529, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5405e56cbb5f940e8df7e9fc37f7a65","sha1":"333ed155c61f78d914f8a4aa93f96acb0717db7f","sha256":"7d3e228b59a1a6c7f38694dca64ff75a0bbae7156cda18d801000d5e665660f3","sha512":"3c82deead5a04c70b24f2626075bda578b778a4d9220de1b9312ac738a1a7932a4e100f3001bd22882e98afa56b3f1e23d0148d83d6295a551d31a332b48b490","ssdeep":"384:tEoOlZYwiqj7DtvgzebdEPeK6nwxff1SVOKoSIfnfTD/zB0xxqDhvWPl2x27xrDd:tEPZYPwXbdvyxfwVOzFfTDLiyDhvWP8Y","tlshash":"74a2e01b69ac1b882ab878ed408fd473f9d79a0f195760504a490b931be2783750fdf7","first_seen":"2026-02-25T21:34:00.706982Z","last_seen":"2026-02-25T21:34:00.706982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/app/domain-checker/get-check","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d3a523f4a99dfec-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-expose-headers: *\r\nvary: Origin, accept-encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aa697e5ff79e7d122c1fb950652ae3e2","sha1":"f20879d04a1943562a4e28969d0774968efd60fe","sha256":"9f8ea540b53cdebbe955bd1ff6607ed4ffe7d7ce77ba23218f495c3d3de65c6c","sha512":"43bfa840bf5b5fc3f97867ee3db38df629591a25815c512d2d6e7b9a90fdaf7ad6822d92e677d0016509c1c40a085519946dfe9ee7826a3679fc30bea63b9e8d","ssdeep":"","tlshash":"5ad02297802cb143c8c8c2c93e3f84994406a0b014801cd19f9d20acd0d82340933f21","first_seen":"2026-02-25T21:34:00.707867Z","last_seen":"2026-02-25T21:34:00.707867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/impr.gif?sid=H4sIAAAAAAAC_1SSvY8bRRjGZ--uA4lP0SGtUAqQsG_2y16TAiUiIBDcIe5QCprMzsw6E693lp1d22eaC0FIiCbpoGL9-C6WACH4D5APqgjEbeci1yBER4MUiQ7ZZ-lgivdjnil-7zPvp5PyjDRQssW77-ixShK2HTSp_eJ1lQo9NPbOvu3QJr1sX1dpy79sj5YhH7zieH6TvmS_IXlPb7vUodShjv26ymWsR9srFSr7tuM0O7Tpu00n8DHK_9-b0oJhFsTgjDwNJeonfo8_gOJzpP3vX5OmV-js5Wv9MmGFzjEQs_fTXqqHKfoXZZxbiNPZ-jW0qQn5YgM6na0ngB4cLSdApGqy8dxDROlsjYlocHxOGiWQKSLxGIaDOWQyh2JzcH0HSpwSgAvs7CLt39_R-ZAdnKtsqdZk69HfUMOabD18Fmn_u6uJGtl7OikLpVODUVxBjeZQ3Tmy8gTF2IIanoAXH0OJX8n2o7eR9o92TaKhxOKSS8PQCdqtRiCE2_ADRzTCwGk3OsJ1OyF1QhrKlUUqnoOZTZTGQqkslLGFMrPQFwvbp6HPHea14o7gbeoz3xcyop3QpZR1eBslvw0l7oLnh8jyQ_TUvdP9P2FuVjDCgikIBqI6FolxTXVfJKaMnHV219mrprroTtixLroyJWD5XeSiOlLZh-YOeLE5HcdGTPUysKiopiwS1VSJYmOSnZGnVtb9tRehJxd2QCXrME8GDgskD5wWjf22324zyaTXCh0YVUGZDTBjYaxqQuY_I1OnN2pE7AQmOQFXT4KVz4MNK7CbFcbp12Z0kOVpk-s-hK6QFVsoDqxJckaemb63f_XHFcKVf76E5A9e_eaF3_64ceUz8LxClle4pX4i6Ca3f9jNCtVXY7b8zr2CFXITTNXE-ugXcFWTx9-6ttqsS29-Dp4dwmQPyPrAaIIos5AogkRe3LOogvlPH13UE_MJurmFKLGmUZJbR1GSJ_fOMY1a2LEnXU5p2G45XhhLx_MFj4PQ74gWo54nUZhafXVr9m8AAAD__4YWFuPXAwAA","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marshalcurve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 21:50:10 GMT","end":"Mon, 13 Apr 2026 21:50:09 GMT"},"fingerprint":{"sha1":"9A:56:95:77:A1:65:26:5C:D4:EE:6B:51:52:AB:6D:6B:B8:DF:71:6A","sha256":"1E:95:15:15:35:5A:CF:38:C2:A6:83:37:07:B8:E7:78:92:5B:87:4B:D3:08:89:55:89:2E:CD:69:F6:16:93:1A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1SSvY8bRRjGZ--uA4lP0SGtUAqQsG_2y16TAiUiIBDcIe5QCprMzsw6E693lp1d22eaC0FIiCbpoGL9-C6WACH4D5APqgjEbeci1yBER4MUiQ7ZZ-lgivdjnil-7zPvp5PyjDRQssW77-ixShK2HTSp_eJ1lQo9NPbOvu3QJr1sX1dpy79sj5YhH7zieH6TvmS_IXlPb7vUodShjv26ymWsR9srFSr7tuM0O7Tpu00n8DHK_9-b0oJhFsTgjDwNJeonfo8_gOJzpP3vX5OmV-js5Wv9MmGFzjEQs_fTXqqHKfoXZZxbiNPZ-jW0qQn5YgM6na0ngB4cLSdApGqy8dxDROlsjYlocHxOGiWQKSLxGIaDOWQyh2JzcH0HSpwSgAvs7CLt39_R-ZAdnKtsqdZk69HfUMOabD18Fmn_u6uJGtl7OikLpVODUVxBjeZQ3Tmy8gTF2IIanoAXH0OJX8n2o7eR9o92TaKhxOKSS8PQCdqtRiCE2_ADRzTCwGk3OsJ1OyF1QhrKlUUqnoOZTZTGQqkslLGFMrPQFwvbp6HPHea14o7gbeoz3xcyop3QpZR1eBslvw0l7oLnh8jyQ_TUvdP9P2FuVjDCgikIBqI6FolxTXVfJKaMnHV219mrprroTtixLroyJWD5XeSiOlLZh-YOeLE5HcdGTPUysKiopiwS1VSJYmOSnZGnVtb9tRehJxd2QCXrME8GDgskD5wWjf22324zyaTXCh0YVUGZDTBjYaxqQuY_I1OnN2pE7AQmOQFXT4KVz4MNK7CbFcbp12Z0kOVpk-s-hK6QFVsoDqxJckaemb63f_XHFcKVf76E5A9e_eaF3_64ceUz8LxClle4pX4i6Ca3f9jNCtVXY7b8zr2CFXITTNXE-ugXcFWTx9-6ttqsS29-Dp4dwmQPyPrAaIIos5AogkRe3LOogvlPH13UE_MJurmFKLGmUZJbR1GSJ_fOMY1a2LEnXU5p2G45XhhLx_MFj4PQ74gWo54nUZhafXVr9m8AAAD__4YWFuPXAwAA HTTP/1.1\r\nHost: marshalcurve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15618914=1; slec50ea9a3e51a5ec5160f47477aeae3681=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+dfe701bdb14c9ec7ef46df50fa37971c=4323737; expires=Thu, 26 Feb 2026 21:33:29 GMT; path=/; secure; SameSite=None\niprc_l:4323737=1; expires=Thu, 26 Feb 2026 21:33:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: marshalcurve.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0a0b4f5667c988451160692edd98619f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/9.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/9.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1718\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8WeofrtRzCfcVUq9TRmgFTKMWlvNpiiRbo9C58xy%2F6bE1ENFk2pEftMT%2FT3GKouESZDS%2B10VSBjrCSTUmq9db7Kaj2hzM9U\"}]}\r\netag: \"6224696c-6b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 579144\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523608de5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"aa4b7fe0bf1054c1fc796f4aa4325278","sha1":"92c13861ecc24b94ced6ff1ea8daa3fed0483739","sha256":"32e11f78edba9e2a8eda76460908df24e53ec2b9f0795c9f06c0074581167b24","sha512":"9094575d74ac8863294cf9aaaff45ec6dab7058a5fbbfeb6ae77b2297d6af2d95c34fd08c166c502a37bcb9790f281934a60e7b297c1d0c9f356e630eed4f0d9","ssdeep":"","tlshash":"e83108ee92f9cb128c5dcff288084428fb424281132ae467789a743ddbe860237d9941","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.198348Z","times_seen":181,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/15.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/15.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1744\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r05CbUE155ruvSbD1GFoawTkrUm0u%2BzegeNfyYyu0QNkuGh2KlJaoThydYt%2BnRCzVm8FitL4yA3eg6ofp60OuGBABKxeg%2Ft7\"}]}\r\netag: \"6224696c-6d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 570518\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523618fd5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c0884beaa9dd214ce64e396188e8bc8e","sha1":"41b6da7eb0e488310fbc4186b5e36bee87b26aa9","sha256":"487a2c063aea146f362d52c1f13005b14db6a1389c03073068821d7c49221c6b","sha512":"08523b122da1790ee9006c6fee3dc60036f3666aef526a4b31cfc1c063e022eff3b7d454ee2362a3e6d38b276e98a5c3f58e77160724ff4ca3818179a7c8b090","ssdeep":"","tlshash":"d2312b20a6c7183b8e7a689fd440f5b627fe01245a289b4ee311c62433747137cd0df9","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-26T01:32:37.956279Z","times_seen":120,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:54:20 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1518\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcN037XCdF7%2BpXzshmZPeAY%2F2GN8JxPRhHsunky%2Fp5%2BBFcQ%2Fz4pwbik1VPXowbuD1L1aOE4zaEs8qt27V6pXXqkIokng9Y0%2FVrr39vOTecfWzrWp\"}]}\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523f8e818687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772055090/106000135_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772055090/106000135_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3736\r\ncf-ray: 9d3a5241afe31243-ARN\r\netag: \"4bb085c7462d1fac8dc7282b6f0de43d\"\r\nlast-modified: Wed, 25 Feb 2026 21:31:30 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 94\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bb085c7462d1fac8dc7282b6f0de43d","sha1":"e26e3e751fffb12e8f0fa0a1a69fa330ef505496","sha256":"3ac861c1ca788c19c713ca3d10e0ed137cb1290098c6f82e24761450d898ffbb","sha512":"bbbe1741a3240575fab612dac150739f0541a68d9ed0b510e0159e9ae8eaf4373565e330620ed5fb23eb2567b8611a06da12c674c3b48b5af22145a2aa18d24e","ssdeep":"","tlshash":"7b716d609314716e525254ccb32f8e61d7191a45e82f5d434167e3cca9c425b9905a27","first_seen":"2026-02-25T21:34:00.711026Z","last_seen":"2026-02-25T21:40:14.831367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3.trafficdeposit.com/pivi/0/14/img/3vWLyO_7ubyZvxaegdRqWg/1772056800/68f4b8c998919/699e230b16b29/0.webp","fqdn":"b3.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"172.67.212.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/14/img/3vWLyO_7ubyZvxaegdRqWg/1772056800/68f4b8c998919/699e230b16b29/0.webp HTTP/1.1\r\nHost: b3.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 24 Feb 2026 22:16:00 GMT\r\ncontent-length: 29342\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"699e2320-729e\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWSOm7LnvasMZ%2FssotrgV9SBZCYPlaHlfSj33j3b3cmivvCMrzvOqSy0%2BvYJcmqMTNwlHSUMF%2BEGAYDxxc9JZKgchO3sLnrCYTOvZSUkNui0R4Bnxw%3D%3D\"}]}\r\ncf-ray: 9d3a523ad86c9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62ba6f40016d99000dc7f80a1773adcc","sha1":"a0cb81a8542262ed64481ba9366c638f87265d7e","sha256":"e8b923ed72a00596738ed45402e00c59cd670ed51037cb8d885dc347aef9e3cf","sha512":"f65e6cc3f7e58b213f1f3648096c2da1528a522d4291dfcb6508f5169790a13c3785a5d63f2d037904c750eee5c70292ea059931159a68e9295509cd9718e934","ssdeep":"768:fXMz7/dWT7/hBvpGbwJZ6Huvz3Gqh25L3Jdk9uNgsc:/MzJWT7/hBRhJGQz3KB/k9y2","tlshash":"61d2f19501e132d715301f26efb2992a4603dccad34d15a512f5debc29f062ce7a2e2c","first_seen":"2026-02-25T21:34:00.711914Z","last_seen":"2026-02-25T21:34:00.711914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10013369?time=1649773464795","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AA:9C:09:B0:15:A1:0B:DA:1E:24:2A:BC:FB:1E:C8:F2:28:27:96:B6","sha256":"BB:A4:BD:A7:85:B4:BE:F6:6B:75:DD:E6:F5:7C:F3:C5:BF:B2:38:FA:6D:10:F1:1B:81:19:E4:9B:74:53:CA:9C"}}},"request":{"raw":"GET /get/10013369?time=1649773464795 HTTP/1.1\r\nHost: a.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: text/html\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3780,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3780), with no line terminators","md5":"1a4003c7a60c090c874d8f74089427cb","sha1":"858213d86c1e687dce2176fca60df4cbfb1cbe44","sha256":"d27026d0ad34d340505418318f49dacfdf56efd06aff8f23d4353beafb27074e","sha512":"2000684c488904c561295bc578531d761134338eb149d0e57581c09a14e5b6bc3759c0f76453aac62c34dabfaa8930b96c2db90d83eeeb535508f194f17091cd","ssdeep":"","tlshash":"6671d7b10c09bd4df5a171e3ad2f1d6c633e204924c1c2e27bee9993cf24eea8908146","first_seen":"2026-02-25T21:34:00.712675Z","last_seen":"2026-02-25T21:34:00.712675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":126,"dns":1,"connect":19,"send":0,"wait":28,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:22:51 GMT","end":"Sun, 24 May 2026 08:22:50 GMT"},"fingerprint":{"sha1":"51:4C:15:FB:47:44:FA:A8:E5:C3:C9:E1:C6:2A:CE:3F:1F:DD:7E:CE","sha256":"58:4D:39:CD:58:CF:09:A4:17:8E:80:49:FF:5C:B0:CF:61:C6:0E:57:8E:8A:0E:13:E5:98:09:4C:93:14:89:13"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Feb 2026 21:33:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-06T07:51:01.707935Z","times_seen":105002,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":60,"dns":1,"connect":21,"send":0,"wait":23,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.1fd1b4780fb0f6ba15d6.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:53:39 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1604\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZ1SalA9PhBpn0bBxY9o%2FjiL9DpAtoDvMqHvvbq9QJeFq3brQXBI3fuWHcpC4x5moy6Tuik6QpySMbVJ6%2ByeeI2sjpypJSybG%2BlJXCTCgVDZA2YB\"}]}\r\netag: W/\"bef7aca313d9f99ebe956099d5af8580\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523d18e78687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8044), with no line terminators","md5":"bef7aca313d9f99ebe956099d5af8580","sha1":"452270357b06bf39c78447fe484419fb864cc2df","sha256":"0e6e4f467ca6dd01ed457a2cf80c8bfbd72f5fb734c32bebb94970fafcf5a3c5","sha512":"667713b37f4bcc293f943bed44b1a1fd6b56992f0c529bb35af577beee7b96de820b984b260af8330b0b5e18f3c1054dbd04363d465c816568f20e217ba3634f","ssdeep":"192:y1sjMoq08NF4KeirOdmpMWysnfUcgczmji4:lQoq08feiV8snfET+4","tlshash":"dff174c97283f6a156e79169903f6203f22d5a25782ee550f653fa807828cdbc172e27","first_seen":"2026-02-16T16:38:19.740574Z","last_seen":"2026-02-26T12:27:09.113495Z","times_seen":56,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"ad4b29d49ab1309b7c5cafad816\"\r\nexpires: Tue, 24 Feb 2026 17:35:57 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3HgAAAAwBuUwKDAH3wwAAAAwBw7WvFwG3eQwAAA\r\nx-77-nzt-ray: 2a494a156234c511ca6a9f699078cb04\r\nx-77-cache: HIT\r\nx-77-age: 30\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186896,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39816)","md5":"d54614a1e732d8caa2060eb9322cb737","sha1":"ad4b29d49ab1309b7c5cafad81696d5eb2b0586a","sha256":"891f0d2a692ad0336116efeafd3fadbe1f42e91bb7f1a7164d5a932ad467ae53","sha512":"79e28629126bbc5b5cff981a33bc840732475deec1acf1f5e4b31cd2428fe41e52558230c8a4cc204e5785346617dee8473e266add481fcb9aa8d648ecd14ff5","ssdeep":"3072:WdFH7K9+28VOk2DG2HgMaElwnReSI1YsBHishYolYHoJCXMZpo:yc+28VOk262SElwnRQYs4sDNpo","tlshash":"62045d993792303441d3a12da9ff53093371506ab80f4884bb4dd9a427adeea51a3ffd","first_seen":"2026-02-24T11:39:58.52362Z","last_seen":"2026-03-03T14:32:00.527833Z","times_seen":218,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:25 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e16154acd0e405b29df857d855138b77\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-06T07:52:28.368921Z","times_seen":13341,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":61,"dns":1,"connect":17,"send":0,"wait":22,"receive":18,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/epo.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /js/epo.js HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADnVZQAAAAAAAAAD%22%2C%22CAIFRT%22%3A%22ADnVZQAAAABpn9NQ%22%7D; cf_clearance=87j09sStx3wrov13pAgO7oAli0aclvrapnDnoqv7HFc-1772055206-1.2.1.1-H25Kw90ejwQG8ykPhhYzEELMY.aT70bJGqawij.z2bEcizXix94z3tjYNA2gT4Vw5jVqmcBSDuYDjqrtxu0nMRjdtbRo8kqSewPLEXbw6z5198IUPBAw2nnFfkxAIMJs8yy1tuNW.UOIQB1_SC.vV1D9rw5kDGroO8QXX0H5GorfONJnkxhEc9tuTVpaKGDaWMwar11LRTWKkMajus6aythV21TajLR0eIsxQfFI_rQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Feb 2026 17:15:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69935095-3890\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 753078\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5o%2BaGTvk5mZvdw3OM6DX%2Bn2h8QcWnGjk1bYsQyXbskVUk5bE7Iopmh017bRS51LeMUIUHk83i1pkI92WA3deaOVgcTMO2yD2q8%3D\"}]}\r\ncf-ray: 9d3a52341ecd5fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14480,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13363), with CRLF line terminators","md5":"00ee57827a366f428469fd34080c97ee","sha1":"47c92ba5d87b31829a27f5887f92a0fa8af642f9","sha256":"ea5b3e6897d3f1b22a2ce85754e73f6c4d1f77959af453f75e5ded1f4bad71c0","sha512":"24dcc158b14713dd4104dd0dd6b32e822ebc7a1d5231248ba778ea944e5b7b77e712ebb1c09d713f5459d551161249eb59aa0dc3b092c10fd603be0f19f16d0e","ssdeep":"384:uNHDG1gxEGB/ySsPFbmEVlqOvBvZ7MNd0Ux4+RwcGbSR:ayu8F66wjXRwzI","tlshash":"6252f883b179b83d0dcf59b8812bd10df8352b9ef406c4e5bc54aae46870a0b113eb79","first_seen":"2026-02-25T21:34:00.715559Z","last_seen":"2026-03-11T22:25:19.220621Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/6.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/6.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1836\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gd6CzTpP%2Bt0o65TMPy6Z%2BPnRod%2Fw5viAZaCUSihnYXDwSl%2FQ%2FX2beUMC2g4KiX%2B4cNZL2HEdGqGIR%2BcHI3bdAQL7R2%2FV%2BpOs\"}]}\r\netag: \"6224696c-72c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 500502\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235e8a15bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fa98c17c2a0a979dee800c59f75536c4","sha1":"533f998107e778bb1ddbb2256586fcc85aaddb3c","sha256":"0023e01a68fe6dab439aaec5d4ebec15fec10f4029bdea86d7dddeac3b4f5c4a","sha512":"8d0f036322f2a926bafa302af2a3a1598d3473541788b579c24e60708250db29d107435fb342894d596cb35efa905bb1332eab77e508b92fbb4aa8860a6e2560","ssdeep":"","tlshash":"1e31e9c37ec876b4e28aac0321f9ce95d98b0a1e6401b508b92edb6241bd05775b2d78","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.185931Z","times_seen":190,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":7,"connect":8,"send":0,"wait":14,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/7.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/7.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1242\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbXkckRcrwFVgW7lJJx0gNh32ikogSOxc5eLx2scrSzcbiv0tjE2nTmEeKDnC%2FRkISaor9OdzoXjwoMupsfPvBXT5IJBDW7J\"}]}\r\netag: \"6224696c-4da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3179604\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523608e95bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6f6c51a8a429c91a17be6176942b4c96","sha1":"02ef22f5190df0b284b62b3c27b223b69a78d20b","sha256":"5a8d6d6607c44502f57cde996c4992e89c013172c45f1824c2e6d9189be4c849","sha512":"97abbf288298d950661bf4947f1273e3b429b1d74ef9df6e9205e058d2d86996d9549976db3865780f925052b891ce7d354ac8fb8fb62288fc8e1482dffa78ce","ssdeep":"","tlshash":"a821ea958a367e56c244da21eac0a5a0da7b8393c077188c8613b53b2572d70dad7167","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.312235Z","times_seen":202,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/sbar.json?key=50ea9a3e51a5ec5160f47477aeae3681\u0026uuid=20881576-5dd2-451d-8517-9d229801808e%3A3%3A1","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marshalcurve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 21:50:10 GMT","end":"Mon, 13 Apr 2026 21:50:09 GMT"},"fingerprint":{"sha1":"9A:56:95:77:A1:65:26:5C:D4:EE:6B:51:52:AB:6D:6B:B8:DF:71:6A","sha256":"1E:95:15:15:35:5A:CF:38:C2:A6:83:37:07:B8:E7:78:92:5B:87:4B:D3:08:89:55:89:2E:CD:69:F6:16:93:1A"}}},"request":{"raw":"GET /sbar.json?key=50ea9a3e51a5ec5160f47477aeae3681\u0026uuid=20881576-5dd2-451d-8517-9d229801808e%3A3%3A1 HTTP/1.1\r\nHost: marshalcurve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:27 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4206\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://sxyprn.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1; expires=Wed, 04 Mar 2026 21:33:27 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 26 Feb 2026 21:33:27 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 26 Feb 2026 21:33:27 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 26 Feb 2026 21:33:27 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 26 Feb 2026 21:33:27 GMT; path=/; secure; SameSite=None\nu_pl15618914=1; expires=Thu, 26 Feb 2026 21:33:27 GMT; path=/; secure; SameSite=None\nslec50ea9a3e51a5ec5160f47477aeae3681=[4323737]; expires=Wed, 25 Feb 2026 21:33:32 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 101\r\nHost: marshalcurve.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4644099a115ea8de83b89e5c9fbd6737\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5370,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"3845246043e9949a4c6054767818851d","sha1":"5939d701cf875b5cb258865b0a2a729167f15c47","sha256":"8d7bb92e618e99d774e1a477b75cdd00969f463d11c221475e0ccb25080ce545","sha512":"02874b3d0eb82fcbb259497e9ee129e343fe8533aa21553847e897744956f3a3da11ad58ad5551ecad0757730229a61f0b137bdf416e872ebd70642edfbb1f40","ssdeep":"96:9zwUufqDFVuao9AKsVsT4hE6aLb8ae8lVEjIpS1SFyYGVzL6K:9zXufqJ3o9OsT4hvaH/lVEUpxyYaf6K","tlshash":"a0b14eff11d17ea20af24c0149074ed9cc405e055de580d5dc7baf6f2b37694a690392","first_seen":"2026-02-25T21:34:00.717284Z","last_seen":"2026-02-25T21:34:00.717284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.176.181.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://sxyprn.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1; expires=Sat, 23 Feb 2036 21:33:25 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e110771a9bd44e7f6b978a35a5451c44","sha1":"b9e70fd0f0d70aa8ca64093369c6cf08f49c89eb","sha256":"7973abbff90674d95613cd5de75a24a699df9a7e13bc96141a94c34453d4ff0b","sha512":"d7204f94ee9ad91b26a5860c3ee33d426d3ed3ec6b9e0ed4e69f67eec6661a0dfc167839edb171dfefc73de59f94dbf2d46e4529f6697309f3a579e53c8a25ef","ssdeep":"","tlshash":"9f9002014b51440d64c540095503aa0408ca0a57602c4090040163051e094262484223","first_seen":"2026-02-25T21:34:00.718135Z","last_seen":"2026-02-25T21:34:00.718135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":118,"dns":15,"connect":21,"send":0,"wait":21,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.176.181.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://sxyprn.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e110771a9bd44e7f6b978a35a5451c44","sha1":"b9e70fd0f0d70aa8ca64093369c6cf08f49c89eb","sha256":"7973abbff90674d95613cd5de75a24a699df9a7e13bc96141a94c34453d4ff0b","sha512":"d7204f94ee9ad91b26a5860c3ee33d426d3ed3ec6b9e0ed4e69f67eec6661a0dfc167839edb171dfefc73de59f94dbf2d46e4529f6697309f3a579e53c8a25ef","ssdeep":"","tlshash":"9f9002014b51440d64c540095503aa0408ca0a57602c4090040163051e094262484223","first_seen":"2026-02-25T21:34:00.718135Z","last_seen":"2026-02-25T21:34:00.718135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/14.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/14.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1701\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rvxn63q%2BGKkaIxyR311dIAlScyp37dEW2Wm%2FXXZs%2BpEieHaftMYg1ckzKIxTuDGYnhUMzu8H5MREpd%2BBXlqrwGDSuhvksmx\"}]}\r\netag: \"6224696c-6a5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 490546\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523619055bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6ca3bb2955094cd50f0bbf297422a514","sha1":"88d42bb0d61490a263e79b3b4970d67fbb0730f0","sha256":"890d813c776d544273857f3b56223d85f38434c1c584224398e2bf848ee0558c","sha512":"2ffe2584170f37677c071e1a5537e22aac40d764e78e14d8b8c85f8ad9ab5392cd8e5e9467a4acf9b09c382a23fd0f841e03a0edf403afb8bf50767309380859","ssdeep":"","tlshash":"e5311de6806ceb7bc68d40ed7f54620a73643c7cdfb2616101a039d52e591c6d0d84e9","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-11T22:25:19.206683Z","times_seen":157,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3.trafficdeposit.com/pivi/1/24/img/sJyVdSsXfQ1p2RB3v4IUVA/1772056800/5f3950a938042/699eb2da441f3/0.webp","fqdn":"b3.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"172.67.212.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/24/img/sJyVdSsXfQ1p2RB3v4IUVA/1772056800/5f3950a938042/699eb2da441f3/0.webp HTTP/1.1\r\nHost: b3.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 08:30:10 GMT\r\ncontent-length: 34496\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"699eb312-86c0\"\r\naccept-ranges: bytes\r\nage: 2006\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srqc18p8BEuyysCVw9%2BsVmATEB4SDaHZrk7Q01eCDuae1CF4t41ZvfZ1T04v2nQ%2FRQqvJxV58YbJL9TSGbDTmgKXVEq1mW%2FjejjwARQ1RvjbQjNH8Q%3D%3D\"}]}\r\ncf-ray: 9d3a523ad8699780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92f5b4755784e55a2baf61abc793476f","sha1":"a5062a58f353fbf6365850135eecffa80f3b8a7e","sha256":"81e6a23640e3a86866ad54cbc806558fca212fbff019aa336aee6245d8d9dc0c","sha512":"a2ef90cbcf3fb120b6fec2fa616ec1bb95cf62451e549678136f9804ebd1d8c00f06fe3a1ab2544f53d5879b76ba81d0cd3f7e28eb1b5612ecf1ac797b15ea71","ssdeep":"768:xY5TRdqeeZTQENSADmpjzLQ9Ekxitn94Qi9MSJvF3onB+Rb:x8TRdjGSAy9Q9Ef9c9M4F3/b","tlshash":"2df2f16c5936653aec20227b01fb7dcc563bc66cbb82a0fa8195654361dd97f34900ed","first_seen":"2026-02-25T21:34:00.719798Z","last_seen":"2026-02-25T21:34:00.719798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=20881576-5dd2-451d-8517-9d229801808e\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=44b10b6e356d5cc0e4e5fd7b99b474f3\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=20881576-5dd2-451d-8517-9d229801808e\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=44b10b6e356d5cc0e4e5fd7b99b474f3\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=21 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 021a0bc46ebc0d555705c34efaf96608\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":304,"dns":2,"connect":100,"send":0,"wait":100,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/abc.gif?action=sbSignupWithModel\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026stripcashR=0\u0026thumbType=SChatBest\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=5\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fsxyprn.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /abc.gif?action=sbSignupWithModel\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026stripcashR=0\u0026thumbType=SChatBest\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=5\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fsxyprn.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 9d3a52400cd84c11-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 06:24:57 GMT","end":"Sat, 11 Apr 2026 07:24:53 GMT"},"fingerprint":{"sha1":"85:31:6D:37:59:CC:E4:1E:9E:25:D3:EC:50:FB:F3:0B:2D:9F:C3:0E","sha256":"31:A7:9F:AB:94:EA:14:50:1C:73:E7:70:8B:27:3B:54:9F:6C:AA:B6:BB:22:CC:68:78:D9:19:1B:BD:13:04:FA"}}},"request":{"raw":"GET /bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\ncf-ray: 9d3a52343c41b1b8-OSL\r\nx-amz-id-2: HqIFxR7YXBCjtR+e4Ljf+cpsuWcdhU3q4XgmqTHtxsmCL9cT44HnFX3ZSuP8MNPE7m2k6c3+t9M=\r\nx-amz-request-id: VDDS7JP82P0MM7SX\r\nlast-modified: Tue, 03 Feb 2026 10:43:20 GMT\r\netag: \"a3b98c80c70230b4d4b1a67890d6f719\"\r\nx-amz-server-side-encryption: AES256\r\nage: 1228900\r\ncontent-range: bytes 0-820202/820203\r\nexpires: Sat, 28 Mar 2026 21:33:27 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":40,"dns":10,"connect":1,"send":0,"wait":36,"receive":138,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012877?time=1633701610566","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:67:8C:D2:F3:88:16:3D:99:D4:20:FD:1B:49:11:66:D1:6A:9F:43","sha256":"1A:A3:49:5D:8F:EA:EA:8E:F5:2F:82:5F:FF:33:C6:FF:50:0C:CF:FF:CA:65:5C:0A:74:2F:DB:27:1B:12:CF:EA"}}},"request":{"raw":"GET /get/10012877?time=1633701610566 HTTP/1.1\r\nHost: a.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: openresty\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: text/html\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21821,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21821), with no line terminators","md5":"2327fc88ce699899fbdcf947b819a290","sha1":"4e18998d42e21e573db69c2485756266e1e31f23","sha256":"4ff975bffe9304523e7b65ea04a49f024d6179621ed58aa763ec9430a97bc1ca","sha512":"3fc2774cd3d765cba726d2d65aa85a8dcf5b548561f6c1a437183a96902c8ce2675fbea31e14d7919bdf3307e2d3ac551753bde169bb4253869aabc1da09e2f6","ssdeep":"192:H44HrMA8yf+yXDvqzaFASu/C4aVrrKVlvJ31gr0S9l1AM+iqFd+tUdOA0O1db8gY:nrMA8yf+c6sARC4tSr0pdCH8SAs","tlshash":"50a20bba3142b855a6371ae290af160e3f31d953b848c440c4d6d8e57d34d7ea37ba9c","first_seen":"2026-02-25T21:34:00.721038Z","last_seen":"2026-02-25T21:34:00.721038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/0/10/vid/ia0ylrLO7w-vR04dFAA4YA/1772056800/604868c9e12f6/699e1a0fac393/small.jpg","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/10/vid/ia0ylrLO7w-vR04dFAA4YA/1772056800/604868c9e12f6/699e1a0fac393/small.jpg HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8416\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Feb 2026 21:38:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7me%2FhPehjcB2tNpDpXLrcHlkowG%2FbXgqU3bF3cZLFpS60Y2wRj46JtuDZ%2Bok3Lhc66qKhQvrgAUoUitgjqwGsO2B4Ncr%2FWvZmhMoQ6oWw6st4rIs1Q%3D%3D\"}]}\r\netag: \"699e1a56-20e0\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231db46c63f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"c5519496d2c961d3c34717b5c7f5fbaa","sha1":"6a46582b72dba020d48be446ad44b02513b6dfe4","sha256":"57bc7d7d3ece966041ffa18df8d6877fed44a50ce7e49ac3afb6c83fbf2b7240","sha512":"e4d72ad265ab2b5ece0b7ee7762d642a3a40b7ea84d20c5dbaf23084dcb8a70a0743acd58093a546263d3dad9a5f6f543f7c98338048dd53b7014dfba89468ec","ssdeep":"192:XZcSTofdpiE0QR+DV97Mfb75DIqK4tSqhfzoBqbWdZpQE:JcaoLiE0fDV985DIctSa8BqbWdZT","tlshash":"2402a01a9749cdd3eef615b5e64c4b07523cd9548637e6829b916f742e1d08a8ff400c","first_seen":"2026-02-25T21:34:00.721791Z","last_seen":"2026-02-25T21:34:00.721791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":69,"dns":8,"connect":9,"send":0,"wait":16,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/18.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/18.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1637\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZvU%2Fhn6%2B0cJ0CFf7e7kAxpmJGSImKJIB8KpaHfpbgCVSDzbry6eFd0YJ3bim0qG0bhg0NF1Vavj892eQQnntbuBnLowCKwC\"}]}\r\netag: \"6224696c-665\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1623969\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235f8bc5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a5748cf6028032f55fafc236bcd6fc0d","sha1":"0bd8cfa0822cfee7273a873d49a5562923d09d9b","sha256":"1c94fc9744d00af517c77e77f8a00a1857a427d1f61527dbdbfea9009ef6c57b","sha512":"b34e61d4c35fa8454f8b258d9ef4915c72952beacc442eab0c9ce0c95fa0ac609dc9fab33b74a35008daeabaaf54974a705ac0a483f7cd713f5b5d81517cedf4","ssdeep":"","tlshash":"3f31f8b0b081079c6d084f7e0d6b2e52c92a6278c026af175c2e052897d589ee9c87f5","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-11T22:25:19.230074Z","times_seen":150,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/3.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/3.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1843\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4fNc8g8YhO902W9%2B2eS%2FNWXAhIz4PAm1Z7g%2Bf8zaYTooi3FsizWzbsYeJQeFRQVsuZDrJgeCsF8WDOaks3wNvQKV%2BX0YReY\"}]}\r\netag: \"6224696c-733\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 753242\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523639465bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6081d8001f84159e0808e47a24f765f0","sha1":"5864b2df5f6aa5b1311011877430d05a20b93479","sha256":"434c71655328cfc637c4ca8884844b18f5f84c681338949df9d981c8409022ea","sha512":"8e71d66dc9d7d355dd113ee8f3bf86d144a091f0fbab54c8f0068a88031e56f8d3381af7c53cf63804d38dd39387e7fde5f859756eb03847a14e7bf41787fd0c","ssdeep":"","tlshash":"a03119ef11e9534f1143af83352d4e99da4b647961a24160aad9f63b86c30b48432c11","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-26T01:32:38.054152Z","times_seen":188,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/1/23/vid/ck6HLkpQaCX8_bFFlC3IuA/1772056800/698214cf288f9/699e5d12329bd/small.jpg","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/23/vid/ck6HLkpQaCX8_bFFlC3IuA/1772056800/698214cf288f9/699e5d12329bd/small.jpg HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8981\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 02:23:33 GMT\r\netag: \"699e5d25-2315\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqxi5fKNYTa0IPx9kHKpdw56OiG6UIV7pV3xLWazFHEDNVLByaYm7pXvFEQNLq%2FvM1RqEKTeSyaUiHRHCnokQt17BF6h%2FHTmTX62MBru7PkJwOWdfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523aeb424e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8981,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.9.100\", baseline, precision 8, 320x240, components 3","md5":"3fb974946825b8d5f9a48f7248ae9a1b","sha1":"18bba749b7886cbd35c8135f3e1625516997cde5","sha256":"7c735a1913a2755d58a6d1f1cec9afc53922deaf0b3c375c727922731371aa2a","sha512":"569241272daf469f2a6c04a4aa9cdd1d3f5669c9e0a7e82a8b693aad23ac5a7024a291dfc106da83aae9611378ac89c7bdde9be77d8bd73ffcf8d6d8129c6538","ssdeep":"192:GrO3WL3lwwc61olr0DSqLm429w9JPsetuBHkkMs/eeG20QN9J07:GGE3l261olALm4294Psqu7eMVe","tlshash":"67029fb759809b63c23427f0c50c08736b067874f9ade2635a6ff2b75d164baac20085","first_seen":"2026-02-25T21:34:00.724002Z","last_seen":"2026-02-25T21:34:00.724002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1 HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 07:39:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaDN4YwY8dJ%2FgLGN2NT6riyz%2BCuwTzc41LJlF7TWq2fk6ySvjfdJFHh39%2Fxrz5IfgmiIjD5kCQxuoJ8SA%2F2g6gk6d2oPSCFIW6i9lonXZIIuvTJO\"}]}\r\nexpires: Wed, 25 Feb 2026 21:34:14 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 253\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d3a523c0e5bc6d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"5ed0b88432b807087aa361436bef78b5","sha1":"06ee9750974a0895adf2442b9eccdb8c7b043df6","sha256":"9cbc3a935fa3fde1a9222a4d4c164890ad05388923dfa1d242c2df0f40770d88","sha512":"c010545d0b36ed73d121e9bf0f44dcf7ba20808ae5cf0c541b679074ad0726060a071e5b473024afc456323c155eaa0a9d7db2306a64bab6b053b7bd458ce99b","ssdeep":"","tlshash":"ae21d255d804c40d65709277be513226d40f770eea607fe4ec2148dfd869fc94299947","first_seen":"2026-02-20T18:20:29.239575Z","last_seen":"2026-02-26T12:27:09.152519Z","times_seen":35,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":115,"dns":3,"connect":11,"send":0,"wait":14,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 13:47:54 GMT\r\nexpires: Thu, 25 Feb 2027 13:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 27935\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-06T08:10:06.5271Z","times_seen":65414,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":245,"dns":4,"connect":22,"send":0,"wait":10,"receive":3,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/2.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/2.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1424\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYj%2FrRvVHrWGQvx1w7I9ocSqjrWoFXz8Do7U0kPpasygJmQsNrEKibz8wBw5AKhbIwuAXFK%2FG8t4VGL8h1ATfIQS6fCd9zGK\"}]}\r\netag: \"6224696c-590\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 502162\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235f8cf5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d53311b97e7a14b56e181e2c6f4a8d89","sha1":"fa5288c9d6db74594fa046b45e60fa4621eae9a2","sha256":"b2943a260015c9641bbe562347f933c20b0e8ae0048ac5ada3f58a935a61e71b","sha512":"c295e202edad41bc797fabc76426e8288eed2c9c7c45648d8448a52f089177c65ebc4b02d5c18432114c932d06af94c5695d5a270b2667563cad783f4dca9180","ssdeep":"","tlshash":"60210b4f5c664cb3590c1021f32f579dcb2f996390d116544a9aac8d1367084d2cc975","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.16986Z","times_seen":160,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":13,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/29.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/29.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1090\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikdjEj23YCJ1pSwMogAY9%2BNxJw14onrzSCWX6I0TE7rGx7eR7UPofRFUmPVng4yNaZ4H87JEtja%2BFC6AUCj2gpbsrSnDozog\"}]}\r\netag: \"6224696c-442\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 458162\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523618fb5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b3c31ea325e764d87ba71895ac51671a","sha1":"f6548e8a11bc1909962191fccf67baa986687b90","sha256":"8996be61dace5d11b81dca7e0ce2172a5e8a49d16e1bad97236b6686fb6a646b","sha512":"c4fba5bc88657091a6d110872c7979b03c98ceab25de587382aa17095ca3fc2397d8cf9995720654cedc5dbc8e2a5215147aa85e46aeb2853732643d76a35880","ssdeep":"","tlshash":"d211b69106e90b3d0086d88275be5a2fcb662773a003993127b89de2f0c082b579289b","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.228434Z","times_seen":106,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/main.efdbcf860da725b7ec3e.css","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/main.efdbcf860da725b7ec3e.css HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.efdbcf860da725b7ec3e.css\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:54:20 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1623\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gT0dtDMwtingUat9g3D%2B4S4XFSsMAiHYOorpSW0I1XdDgxWiSk4qM6AAETC2z5vv844eiZF%2B%2BiEZDmApAMnrJZx%2BIx1rqsVvFxYCQq6Bd8HtFOcp\"}]}\r\netag: W/\"ece7d7bc72e791c29cf32d85486196bf\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523d08e18687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14479), with no line terminators","md5":"ece7d7bc72e791c29cf32d85486196bf","sha1":"c89c6a878bb4e65ddd719759ff15e1b4855cdf17","sha256":"a915283844ffb7b68c72ae0f24ec39a684f3b8dd3e8b4203fd8bb728f29f55bf","sha512":"832ecab4901038f9835617ed6967db1baf315395f998859f43e83ddbed9b9eebe0b9b1271c899ccf40980aea63e88daf03a986ad3d0d890b0f37c08193740f0f","ssdeep":"192:LXDldVstnXOVXqeXS3N1baTIHnAC606+FBuHVAjV9AML+Yz:DDkOERHnACQ+FgHVAjVKO7","tlshash":"6352b83356612618f41bcd2167a527dba268c417e1122bfced927a35cbcb4870fb618e","first_seen":"2026-02-20T18:20:29.401563Z","last_seen":"2026-02-26T12:27:09.077408Z","times_seen":35,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript\r\netag: W/\"ad4b29d49ab1309b7c5cafad816\"\r\nexpires: Tue, 24 Feb 2026 17:35:57 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3HQAAAAwBuUwKDAH3wwAAAAwBw7WvFwG3eQwAAA\r\nx-77-nzt-ray: 2a494a156234c511c96a9f69816f8e2b\r\nx-77-cache: HIT\r\nx-77-age: 29\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186896,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39816)","md5":"d54614a1e732d8caa2060eb9322cb737","sha1":"ad4b29d49ab1309b7c5cafad81696d5eb2b0586a","sha256":"891f0d2a692ad0336116efeafd3fadbe1f42e91bb7f1a7164d5a932ad467ae53","sha512":"79e28629126bbc5b5cff981a33bc840732475deec1acf1f5e4b31cd2428fe41e52558230c8a4cc204e5785346617dee8473e266add481fcb9aa8d648ecd14ff5","ssdeep":"3072:WdFH7K9+28VOk2DG2HgMaElwnReSI1YsBHishYolYHoJCXMZpo:yc+28VOk262SElwnRQYs4sDNpo","tlshash":"62045d993792303441d3a12da9ff53093371506ab80f4884bb4dd9a427adeea51a3ffd","first_seen":"2026-02-24T11:39:58.52362Z","last_seen":"2026-03-03T14:32:00.527833Z","times_seen":218,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":44,"dns":20,"connect":4,"send":0,"wait":1,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 486\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":486,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://sxyprn.com/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":4588260,\"extra_params\":{\"first_request\":true,\"zone_type\":0}},{\"custom_targeting\":{},\"id\":4588260,\"extra_params\":{\"first_request\":true,\"zone_type\":0}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Feb 2026 21:33:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sxyprn.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22a1b8016c9483f56b7c33b2431207e048%22%3B; expires=Fri, 25 Feb 2028 21:33:25 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3124,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"945148931df37f130d4cb0d1a37eda46","sha1":"45021ef236e4220cbaf980b6dc404a936f1de464","sha256":"4347942da615bc090fe6f00d180f3b4fc8596b20333ee78254dfa706d4c6ac60","sha512":"9d55ddf6853187979c21b5d9442e4635fd671e238480dccaa20c18ee5dd50e3def80c8f4f08f6a1a90557ea8cbc04266ce652eaa9f79864938e099182fc633d6","ssdeep":"","tlshash":"8551e63cb680c87a75d8e6809e0239bced6f3dabb748cd09916de4104a3c6250924bb3","first_seen":"2026-02-25T21:34:00.728106Z","last_seen":"2026-02-25T21:34:00.728106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":74,"dns":1,"connect":23,"send":0,"wait":364,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:54:20 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1518\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1ySt3UlFCX05ZInTDcMwLf%2Fj6BDqcvin16jYfaaEGZ%2FwFu3cT%2BUZK74w%2FWJZ3wQL3hjuZ9A9HhrEIJCUHAAuz3B16T27XnMixoLMxKu7AAC0syh\"}]}\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523efd4f8687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-06T07:31:32.390462Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3.trafficdeposit.com/pivi/0/14/img/Ft3Yde2RHfehCDy3j8s-yQ/1772056800/5f3950a938042/699e9c019dee3/0.webp","fqdn":"b3.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"172.67.212.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/14/img/Ft3Yde2RHfehCDy3j8s-yQ/1772056800/5f3950a938042/699e9c019dee3/0.webp HTTP/1.1\r\nHost: b3.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23242\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Feb 2026 06:52:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRaOC5TV3gY0CXVRxeBCIhBKGalrh6meDltnXQ8g7%2FTATHfhG2OBneAhR5b7b7sRyRWgdjnsKiZ4JRsnX5iCmBAq7DBYq%2BKdIvsoLwE6UyS83WCegA%3D%3D\"}]}\r\netag: \"699e9c1b-5aca\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231df9da7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x497, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2b9ab4ae9922fe6af581044f4be7c3b","sha1":"470a2d642d592736e87122c1c71836edab893a28","sha256":"8d782155813793fd10256f69562941c9d41dcc30dda91424202d682c06df4ce5","sha512":"3a49d225ba02781cc0cf62d7caee1537e971fcc2dcb7ef797f8d184a959c0c0242eda19ee4fbdcda238a7b4e278c95d8c76c11781515e0ec8c5cabd49f94107f","ssdeep":"384:uizEKJ7/0fgQp9r3kAJoTTCAlhRackKJj/p10xAkQRrUjfsKmlRugyDSgl:uijJ7/0fgQkAJo3CAlR/gx4/yD/","tlshash":"b0a2e025c053410d888a37bb6da5bb4cfac5bb1f248d936292244fdf8f5f52f6d44902","first_seen":"2026-02-25T21:34:00.729095Z","last_seen":"2026-02-25T21:34:00.729095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":67,"dns":8,"connect":16,"send":0,"wait":18,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/7f3d2ee44814/0.7019963531975931:1772054777:RpyH1Z0vC5gXPKvzGZjIASpLOcKCIZcqKQUmmT4bPpM/9d3a52238fb52dbd","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/7f3d2ee44814/0.7019963531975931:1772054777:RpyH1Z0vC5gXPKvzGZjIASpLOcKCIZcqKQUmmT4bPpM/9d3a52238fb52dbd HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12134\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12134,"data":"L0hf8FNjRrACCRwdrN7eYdCd+-dmdef-MqfR6dVfawRHwoMH3dUfLwfKod1dWWd6+WjdObR21drmlNsvSIhNaGSuhdDJJRVqdTvterdM2ipCqnSox6-dKZxu6DOF0qd4hB55bqjqywEPMjddkD1GkVqhNMaQMV8xdcabRdDVA4rJ4s2S-0tS-ldNoVatpcaJwdeE31-IYlw1l45V4jdeZJdRyd4GL8d6u63vPqLPKzbvBRrHm0nnljdeW4ddytt8ve3z22dAs7MjgPjGbdNEsprR-qdekj+6kqeV-dLTMx-7aHSOejdRu4r60WNrJ2TVT0HNEdeejRh7vsbdNt6tr1hfYiM4ip4-d1GJdiICV-dRJq0imhoVN-du4xH8xxbF5EKMEK-7xzJSvuKR8OTrtRaJoJSIxbRiHhhdfHuYQl1fdtJ2Rfv-ko0--EK2k9-r3oCZvkvBys7Um-djVehddp18Zs8d5QR448VfmqFFuJSGQz5Ylzpi+PiHDJD4jUg6jp7zYd6hVc8MRS7-n220fedTkar3S0bIVY66B-hYiJ3k3fNCKUx2z83SDCNZxxXWrt54OOgxSZKrP3dCQIwZddMGVeMWPXTPfMgq9DbBKyDpjVJ1x+dSbT3FEVBWz4j-VoQEtHvXFnqD4qiDP01Qy3SwMesy3KNnrXN9zQPr9R72kcnTMFMyfbWYFWGCcxd+NYn9RjApAGuznvhRD4ea-MV4eL8D9jysLiiEhnID3M21A-Z7d9uzW5Ne1FQDs-7UqUvxTcN4-heqdij2S-S-2i-+tR-28QM6aSd-NUOy+Ad4xGijDxQbqcZDxkrD8NC1xQNDmeBv-SVVNPrdPtratJ60Y0jdwiFDRPaqD--4b0v-4f2A0mtRN+-h9N+Df0o0qtptR4ftAdzwVR-hqkWnRqHAdiFV-tSM07roNSttEtVNFHJDARrNz2X-VxdNzpkHYSenLs-queKrNeAR0O9F1qJu60EfDA+78JF+YtwgWd4j-2hVHi+-V7HKsJX3-DP+W2dSxC4GNN32++x3bAJF4JEtPebVeJ6Jy4YsP2-3g2DgyQrh8lsRDgQWRX8z5KY31a-W-D6sDfuiXAQLgTSfuiFxpaHN+tnSPmhc26lsJATs+d-UPRRCN1tE6--E-GNYehjqTiRgQ5Qtt6oOVZ6D-2J6wwWStHATaJ2RQqt4At-xx6wLMjNSCv9oN4vPU3sm1-sqfb-tGFzOrjtUr+QtUahq6biJr2VA-H2oCh+70DWBxC2KjDRRzqVMO-SQIjC8GjNrhvsc2u09AdO8kOdE3GCKawbQWmfbAT+35AdqtAoFYwudVSq8ikBhQFCWqsuFW-Q5y5V8dSTeTHFy1b-QXKwBumftAordQW4tKjAW4t9eI3fDRSuKD6xcBYeDoNYHyfbD6N9Vh47LTqiM5xFNbcGRRwqVTyevdSGkcVSvkuBXyBZ5Awvt52AR6zj6N5t8AkL0eMgXqE77UzZxnUzPuWUzSu0tqM7s+SP9u9ZQX3gPqR3jMgMaH9Icd2XeNrNXEDcMXDiulAnMnY92ddN5yjNVFEayENZyDdq1E6dEC6Nd6ckcvB6210uAh8pH0U7FRC-fRU5swNzRb--Sbmv-dxb9N8A5WwG78NeFZYYv-EHWCdNPndVdCVr8kzq8qPN6xbiqkf8N2-2RsOZU1uEsx2--iIu2lW6B3blgqXt4yiNR6xJqU41Nk0YLSHSuhtNVNbaX-wkqKCDNNG3QHVKefcNjRPsy1YQbAKURCuxAjhfnidtYW0ZxVuHw7ds+5cxC3dvTGtRwObMVMQM6jRBGdkSwVVSbA-HSVSoBS8tNqHPAuIB3aY8k1qDNC23SdhE5S3dYoELK6bkk5q781TpQRiSjVRvWN--CrdxlUwI8FSoGdxkSDEiP3qqSrhJwMpFh-1SR4bRj6NoDcYkDwvMRS-MiJHWRAYiK4wjsIr2NRdrCM7HHCGh061SwesKUzgTGFHu4P5VyNMRDCsIO6DHNaAT7oZOEwzwZNX4dN-8woDENVikG+hfctg4PWEfdkFhzqyuRWY24Zeu3MDdfG4rrn8YqEBvekHOw-MiknfVihJhD7IURv1-LSFFtUAYR2vYiU83cL-026OHDL2kYDdhtl5RNPbfBPo613a13ADCtdCK-41EeJdN77pYsyYPgrs3WttEQEvFRWCE8v25hmoehSTWcWxhHtpheNyLur41N+22yEJq-4wW49Wlp8wsWKAqqfmxCVzS0cEBWgkU3Inkd6t3iCpAK6DtylObgJNLbOG-4ubLj3dPuZRHzSINKQrNiKx00+hvNJWsj0MWfspfZYgY3LGJbdzn-7JW-4pswgSbJ+62hfMdPAav79J1duGEpR16k0MbwI257Uorubffur3OVJJZCuHf64Mm2YfufzwC-2c2PPHg9osfH3ry4mANdZ3tzA-daxYtHQdrhdMpdr0yTDcE2Uht2GMAwDO83fAeumaA++77jhuedC5qFJMWt1h7RgGT2HINtwhxTVMh-WYPQWGi3Y9Zfm4mox-ar4fEY+k0encOrdEOUmzx-rznd3BwE2RCJq7Jppi6-6ncYlFwNDFlq3H6nt9A9Ndgn4VI6uuS7U1KVxMTmrsIdPPqdV7tQCCUhdO-bW0uiqeJhUW9H35uz-q8Xf5SE8RYzhKh7-AMVtkkHOFW0+1t0a2NitfUNdIWwJmLWsS60NML2XYg+lij8nqVLUK2MoRsqrhTKfGPPShOcKMDTIbFBVxPP9B9R6qEEbjDG6jdhPV+tYJqt6iWnsX0c0dlfEZfH2-rluuvAJSMvczwCg1FveMg6P2im26VOxcfw6qfIgSs6AbBOsuprfRUOEefNVnvOUJfI8Ia-nFkUc4YCXeySGIaJrEMfz2jsy7U5hE0qpxAYd0c0U8snRWKjbYpm+XURBrN8C1OZrLbT8R-RbaDWCdDFAXdw6g+pGRPRobM03zqQFySVRynPJJIo9gDqMTujs-qy4-Ap6bVtJaqkz9ruLwNf+PdF-bGdUygv1uH7pa8IdivNUucMHil2E2IaPmQBijvuN9ntFhO+PftoNbCB2RSv6r7rBFSVTbXTyCBCwQkGdx4tWICCRxbQBIY24ZpiJ6-vkOE1T-xZlWqJVWQ8OUkoH2y++5R-h-vPPa2aX3p7rXIepJ-osNqp-q7uP7JpSW6yVmo3idYuuNk3K6JWgrKzMVf0ogZcFw3LCpAvJWK6sRXZlsvYr2N4ksz2eLrHyse3aJ39DAzdv2pKoq4HqdMcoJ3y48VMI56RHhPQXfpA0JP+2v2QbpaMl6lHxDYvnchZgIwmYWC6dFdiTj220+fnmD5EjkW9cbDRUfpjQWM49+z+s-xLq1dv7IYQw3kv3JnjGG1-gin1dklngVCQoqFv-OrRIohw6vILE66LTdNdb3xkVRy9j3-dh8Ompac68L3Gz+VOc657-SmLl1D4b1XA3r6+e4feF+a+76lwGL3-beFulefOT+IcWeC+gVDzcDQGW-a43Aj+D7mEfV61qjfj-RDhJSUSAjgGs+g-HO0u0iAaARfy3VgDoRAwdXYEmGg-+RWJW7Jjw-+jH8xDsA7Eg4z-ADsL0V9zPeKqxjNJdsc7-ObOfDvjLLaLWe-6u1uutRfUejVenOYLnVwqf+TRhibj-4ai2R5GuVezqafA2hJDfyU1DaA8dfq27RdZ57fXdtDOVEm4cGqWsAO4wGJzgcqpKjlDaL8R2S-D57Vj46i1SqJ4T+aGrRZ8FEk+a+-hODfeJNp+9+2798ijUiZG4E3Ni1uAlwxL2N-+Gzz-aJ3JcSnDbFBraOdseRbCfMzqfNqT-VDq37rJhtara7sQBzwyISFLh+2Dfcd-wpOVhpDqQeCDbBbQZabodLt+ESV+A4uJoJsoG+bBYAju01Q7JitmIL0umjw5XiGSTeT8fu985JLD9cOUWO+ex4e4w+cRp7cEP4-Sf78+288Ea1S1EzW60yUGsSqNvmdB87fU8A5OFeUNnuwWsqgR-gAwLRHct4bN984N1uGw84-zT-mNpVwhb1SheSdyc8JhaLo5MDtR-DgNp7UchNdG0l9cqd-2mzPEfDbbJwJ-m-a7cL2w0Vfzqa6AB-aGuDFzPR2w0nuVM6-w0b3E5LzdEMmh3Dz4qEdBFjd27GvJPqEoEbfjfjXU09v4-wsyqREheAtagqqAt8tm2ugREtPchIqc0E7h84phEU1DfVfL0L3VthedumjG4hfpCEZRD+ADcDfmcOFEm4u4-BoHSREdhqd2-haitijiJcdRihbw+hqLtr0Vmhrkfas054fUpd-GHR2R5q3AtV04faDe0k+OkYoKmRrCwfeurtEKAmsDf7farKBiWEqfEQU+HEQc0JJqBu0-Bq-4aL2w6drCdc1eq1XLClUNbYO6cEoy4RjMY+aeuDfeaeWGsUN6-Um4rQO+hJvz9J4DCxLe-t-9hA0GJJJzyPecQiqZDzhgOzgci85url56QhVeMm0EmLeEqLCyEbRQd2--wCdX-UgcqD-Ytc0cdm97LjsOdXf9AdRZhBa-dbRPoufUjeFOsfRx9O9+FPJGsQTjMRCCi+Cpz7CKiNjkk-2cqjl4uhKRbSFEkmDDtEbKsPT1K++LjYRT5+RvwnOAD1XSIevawns142fifdbdkZONoXz-iR+S2r-Cqn7eKjcDPj4asW4Hw+Hjq9P4qfT+H+jsW-dREJfG2uYsdvuOfO914sij36wTf1jQ-y3w9unD6+OR9zHVzzYMd5sIrgV1-A1hDw0Ygd+UrPO4fZONrtp-AN-6YmfVYmaJPVimsV0Sw-bJ5epqWLIS9cb+qvCTiAYhY3Khez8DZUvVzJluPZp+xmYc9aYfMah1QGd1a7NU4T-dc+-WV-bd0vbY-RXGJ7LRbgSNpGYQL7kyLGrhoabDfVQequdlL67Emq+gZRESwU1GA7JqwHSchRfuRoiVj0Lc7rh4zSIzT6roGU8q-onidmJkPmUwoXXi0ch+SOJcdDsgLEmDh7sSfAFMJOPfWEJeg1hiFC-Ws69LEPJZO+43wfRb3LC0AUJQonF22eRRhS-XYKH-cOTAJX2HhW+cgL2Q7cOEZEWasM+dqcgwJZyoKy-A7-w0jd9db66YuRwDp1JnSSg6EoJmsy31EhsuuSFYNr1j3w2k4MoBYSPbQu6eMdUEJr6fJmhmYjqzJOBuZOnqf-9D68Ypnu+Yh3Tpbvr97Fta0rOa5rjbEYKKH4uieA7LF0FYuRJQwFn+aqBzqcqOjY2swycqdKD6fEqRw1wLK9h4FD+BKkk-pSlEkjoPH4zqkyRtpchUhtF2sI6ef+wZOwynONp-w-ArAqfwqyC5crrCwYb4w3nSIOHL0J+vtVFiTjyt+FpOIGeSoTf5skmc3mHd8Gh9hALwAJlRbM62Gm6YEn-XRB8SgRh6JTfuQh0GG4rK7GRokZlRV-zj-MTITZ0eJCL8H1ua9aq1uVTl3EP3Fh2hhFtO+OEF5J5UzqGAr0azJPsSKAGqY4maTHhLkAkDoX-Cee-zdKfJL7HuKcq1X6hZDdcOhbbIkbdv2wTp0qsZkYZO-0FbElg1-SkZm7LNXKn+DSgz5dWG+Crse7HZ6VwGHcKoK2tgF1EN1kFKa4-WqJthJmYFEA18Oa0aJNHJli0NO8JL94zE0PlzsZHi5isB-F2UTKqobme4VbT+fSqMP3g7jTf66fuEPhum7u-BJzidRZa+-o-YzDsDsi0ODA7R5NH96mNJ6uqdSxG1nqRY-RoP-NpGuAKXq4euKL3w0oAho7SJrDVsXod-1xF857VyqU1L2cM7bHhw07AhBDbxxx0e-wu+T0-gx4zLCZ05shjCNv6Q7Ftq3c122krH2b2x2M2MOEHbsdbhbVDRYgvrroVHN+fyPk+gBe9DZVlAaAZ8ZarYCyih4PiU1RzEmViOiwxrgGuh6xlw09rKykPrObbwbdY5EgviJVf1-tFb3Joc+fRyPez4fRKrwUbYzI6A7RbTNdeRb51TVbC9hdDdnuUACBhZ2R5AHPluqQFdbTbrHOCXfFfSff-mLdtSqR7qzqJpJcpexFrpksHPpijmFOMTpDbwidRbqIorXfJ8fhbf7feOHHSa96F0FtJTbp6qJOJJJuVfEVwk4o8i2AwI8cNPVPMWq6MFOCjp6sqR1YbaYHRQ2b207I+U+1RlYPl8HvHF2eekmGsfWNFxiJrqeXg-bzNyfOzx1hkHkkk3FKPpWHHKAiWtF3I4tkT9YIUO1+1O3IURVN5GPdbEmSI-HTQEc8uyMiuk70Qu4YHfizYPIDsEmUuzOVO-q-OMJ3FAJeU7CH3Bai2Gg-I4d9EW2f57fM+e0L0ufoVysiFSkpGwkI1HSE3WswJYnLYnHFrkssHKVyHI2kkTyWsEQEPuEBQOles0OWZOL8Ob4Yi1CPoNGqMSCFrK4sN96HZBft570WXy5wgrzR2LXsI+K-q-xYbDTxdC2oqrh8GNpSEKfe5aYZG4-UZJvGPOfAGiF+tpFS0DPvAc0-Tgzt-UVnLZ08Mr1HooHHWM7y3MfSbiC2ZtMdwRhmYz-E69ZGbS7CLfWLbPS3YX9aq7MgNvNQTaNHX-DUWmgVrKGRbNw4bcKF5LtfWa1xtnUsIc3WDD2xLl+r7HACHYHEj3TYuw7sqVrPvG4qeSLSVcYGwCmcHf7vYTfeMEZ3qFENGcYi-0IzMJXxuHMbRkCoq5YC9SZaLxUxDUZrbR5LeqfRVuHzwhx9fxWEktk900QUW-VQOaDF1GyxrWCGAUs+8JkX-w03WHxWtdlKlBAgzwPy3JOg0IT+Tgx33pJfYkujuLSZVtOrf2AkxFpV1TkK7vi8OVDG2XL3XYFlBJtq-EczqGzg3HhSW8IL6mhJy2BEPc43DEe2Oo+ZkDSYsRbeg2oFtGE3KqyW9SRCmwjaIHRbvwvEuvz3QIRXEKynWm+2O1O1ZGLoOPo6rMqGcEpCJMJ+aJOsecWCW+Ji4TL-2h0i24eYFl1B0SShHf10uRJvDV4fRfJ3DbenBhUcZcSIdv0dH1hcMhYE4KVy4ylLCobctKTOicYD+rIohBj1PHurfbetFYTChqVkJixkpEqha6lIL5hBh7lHXXeOTGuaIsmSMeRy32bTBgVe0rl9iX3-rpqK3hHlpjq+tZ6Ku4Wp-uQvQgHEvypFvHloeW-+IZ0Ot7HIqE4t-SYD44GY581FmHhzKIqcqgpAkoRKx5cwj-H3msvEyf8Oe4SfZmq2-VDq58FNAm+Ru9oD+hSz-dzXaUFWCNdOpPP5eCKZhEmaCT7SEtquEZvzG1X1Eabuqz2cYGzMQ0ZpDBBmD0JJPxVdpsMiUunYfDb0UiPzVxVnJOVb-hlxJZ0GghjFlsVAU4yMCICIUOIF5LC9DEP7erPU3PSBURSoLCOu3YzqOwOuU8R0iPP6fYE5s02Q5n5XnodL6fweugpQ9ipB3jFyU68CbHEDbYcyLakZdMw9hG3cvxWxzp202IrfDVGKe1mP37plOIqVskqoPHSV7QY6fTECheaB0qZRsfxbjYnytrwFdYsokCAbrkwxxqh8kdnP-UfsO740fwff8xq-N-mcqLkREMzxyzmQz-HKGt8k0g-tC-bd7pRxUjt-OfJKZbft3VLbHC7m32Cvsi-u3o6AR0rIDOm-sG+IcJcFitTd5NYdjSJPACduDkOPo5jjcJUxTdOVlzGk-bAC-SF8C27GAV5AfNTdQN9kwdJ03wRPDYAZfsfDKeguVQqweNIv66RIuFhPA0skfBhRrWkfxoed7MwBisLiQJS8d-FG4iOebdoLx++fBwSmi1AqWoR3n--NWiKVRN1sWecqSADSNtRok-qXqe-rtgwtzfCqkGF8f4esSfsrqyji-SeYUq0wOh7TeifjbftFtHBehEE8N8FV2NNeqUrVDJiuRNsBJR5hk8hx5q7fAqk--kaqeVsCNiCidUNtNNoxAYgqBwJsRPNfdxtMqkm6kLzfilxbMqBUSrDtSWwMtLM4wRhA2spIdbMqWNoNAqwruIthfiD36FUS+eUtDqk0UMi1iWMEtHqlh7kf4-MAdbeoaY2E13Sof7hsXSxLC6Xi1x5fBbBwhxR-AqyPjOh83AWRJfcqqtTbh2AC2t-6-ftofCoaR1+B5qARAu+vCMeViYOkVvqfb38Wx-he-VvkGsLLkc4WVFVRhQ-Ol-xY9A-sHCEqexE2NofVfpRJBPELNdJbFt-EERsviFfft6VKJ+OhJ1TNUSvwe+dh1QDO-UNiyQrJEm8o6pQfSVB6r0JO2V0qFSN9iOvPyWN-ybbNHbZQ8vvCtExLsrmjj6FJYtWWZoIhK5ifSMQeWdCsqBhL+arMofqVNa-0zhiAOoteNrr8kuwhteSspV8qRkw66YtaAqx0wWkDkFTBnhktVM4f-CAOxYAetlo+q2deD6tQ3t6w2Y8QtpeVrYtzwn2RGE868yqqXJij8liiNjNPxChYwd08E80NbqJfaFeEa+e03gjVbBszkS46IljdxGRrOwbx+Nfrs-aaA6rSN6Ue7xTKrE7wR3ViWZ+ghTCObig-pFhqcspZ86q0fZQLx004wrIen6ZFYqK07borvKteA9wMzhCUCiDf5o0qwb5O2-IbRMQnhB-7scHQytqrFtx6VZ6JJEREd7dDk7VsMilwftdSb-pfSAuY35dc-00U1hSY2-U3wS5bIq-fYAO1dZxV0KOSt1gfftKsHu81SCEMq3ffqp0Eq8fA0d2d7x+aODoOAoBtRDd7zU8RQ-vfMSwrD--hSweVbNwTS3kO6RKtkfmotd9-vd83iyNF4qdtxiJowvJqY4Zz5jDvPmxZtAS0qgNr3fxGODPCY7rsTq6ppUb2dGfa3Gd-ckaSkbRXLqOUQ7uTmxq7SCHwmRAIrN505fJf1uiDiL30CcdN2hphAejpTq5V1NJf+f7NA0EJ-8-X-5wa4f-ZNdMq7F4wddN45qLoNbaCN4ymkVPafA+Lg44SB+CNNVPhi0qgjAJUrzMhGioiOdi-ZFabDHASpX4Qozf2MiReqeKRwYmBNjwILsSwZ6RyHDtLwLTABC6Tz8iwJEePwdt3dzfp4e52EN0o9Njh6ct+xrimdCy8dcPGVJZgQfh3awowE2WbKNfgP-GaBWkJsdvoaVlWroRpARNFQwqujLrw6A+v5CdSOfu+74eSVFFariorEwyNeggqQXOhN2afNMtFFKxoYUKcPtOBrSn3IWNWWkhNNbtQPZwtUegxNAXVUVWEIKjVQeeffhqBwyjhM6rVhjLxChxfaMiKV-YFtz0Wqi1LzW1VoXWrCoRDrVAkYEbEwA4L4u1KpNfs7iUb6w-KRsMhyuh5bmfGhNZQw1oy--ibA7QRNWVfw-whPh2NWdaVZf73t+6sAnNvfM4jeLl11tPdEbDuE4L71gQTVifqkZsaR7LWxjzwRW8BdxqZWA4gO1iR2NqiMoWVph-fIOQfiCF2VS0lodY-OAU2gqWfEkoSFdRlv8FndDd7J2Ba3FVpW4kjMfd0aoN6d9dmB-p5OR1NO3sMVT+T1vrX6zpa--Jm3Nx1QWudB0KjK6Nv8XpVppKXjWqdb6AoMpasfKLT7TLRfIQqMDjZHGpug2AsosDxiH7oiQfXp1MXfaDs6qBWZFlhZjvF1WogW1DhoBoGePUkFV5MWMAodeippUW2dsMXjCbhmeCNHpSCyf+fGMGCtipyEPfQHEcJztHYl+ZyoBPu-nvMYl+3EqAJ6EZQnpudwyHhaOA+AcoDMmC5X+hitN6Y2dqRBJaVFPF9YUzV0bNDgxufUpbeqyHNUXV5vMY7hJeq8aOAoNVbnOjfmyvfgQvMp-MWXAHuMdDD70nOqfHzudPwdWycMURo68qg7RDVyM8RpG658SMBwJsnrhBahNzNvOpOzc-qhfpUvd8yRPuAHOVL9VC8k4LRCVOmRdJj8uypCrVuDvgeHY0OhfSKSsusGdjPrjhzVzfgeV9oxezdBX7w3ZeCbQeijn4raiaDw8IV6C61wpAbu188ddR0tz0ClFZxieMb+MaiAjGXJEMARB2r-Hquz8fWhR0z7-Zrxlp+eYUNOL03CD3MvMcoSSj-34EFZyMhb47UJh6dT8seBqaSU8rTe1d10djXruxAUxw8z0u45q651wdnOSrFthVEkPGSiS8w0yML5zFfwH89XXjKQojFfwL8LeVuL2SBeao+OzWerRxzfgb8CIKWBjXYr8abhz32Wlod-4yTfbgJeWKYQ3GrsB2g8vwqYyfF58G27dJWXjkfrE-CNzqchXjPHRjoBVIb6eDYIu1RQ5vMYqVXdq3EDQvt7rbfcYvJHgusEfgqsWYCgaO-sAVd-OijXYiRHb7tq7xF9SeuUrNokRYeuqaDtjaCFDNdyer+GSpo071D+e0JhWDRAm-FdRuZC2-oDt1MHYx0R7Va5O-fpmV6up9E11vACflNjsfC9+wON079RyulWhcJlNCEffbMpYQKzSRXAjq8toPnH8jHrD0jahohXumy10FyV0qv9u-1rLw75RihECl6tJHTRXpQudb4ez88L7Vp5eJkkIG0gFEhrguOhArjExKvBODuQrtMf+WU-EAdbcfaA-Rogiz8ozb+BwRE5VgtPMOECt7GsiAGTqJdiCbIUBLUGgp9O00VLUqRAvOYkIBYYwL5Sg26PwMFjZL47Hu8SY+difrZuk7eujVjI2+XZGMAgEygOu8CSa67Z8WWPJMZ+BZGPHLvIY6ItPIHz97i7A3VWQ+oUU-gDEQg0WrKbUN-giu3NAWFPYz+neGEpYJwAPFbh5r04bQpW9Jxu+4Fc26gRI9+k2-9QoDBg7d4JDxw+5a2E86IIylUD+PX76PGMsjqmHXscoPdnMSKxuGgVGETgbeUKxuzdHv7LgbejKYADdCREbm5YRRCAcdPiehmEe8KWOOfgDE0JeuLP9N++oL7Wg6ISRYVwP5hEQxH6Q+KtmTCsIYLpIaE7qsT5wu3gTe-KbIubP+Ky8ZYdF5jorSZGF8AIc65hNhZi7Jg3e1IVQGhHsICmeeWJMQ4s5aulOe6Bjxuus3k7QQeuXFT8LHgwf4w4Lf22kENCrM78kME2WDq2fo3IgwWpF23utHy7fmjLnFZNqVHy7bJFLnFxAqM5REsmaL32RAjMHRGqmAuF4PpOwRYEgQ5I9o-8DKQMit+oLx4FI7EHn7MJ-ZOqeIwT5+7pYmLK73OUzsYkEbZWzkxuGWgOF6m3WbYgUuWCL7vJVWY22IUus3FDJkIl7oguk5aGi8lWK7uQwP5+nemLWg4vCmC5hNg8zZv43F6IgTGLmpW++Z8+yLwP7NaxzPHqixR26nFWZH28ocFf-uE09rAdEt4RdCAUhUZ51-DUCiGRaNKVOhLZ4wqfd3tYflb-3G6gygnQUCob8RQC6ztydQXZBmEcY36oexyRUnwhGsaCfBZG3J7XLDlZt-xPdfQTM-mSsqWlZzuBJWrS0d7VRNhdddzfxIRd+-GoaB4Me-QzVnTesR6aSiyP9bIhTFz0esvEf3fWkOfcmaji3k6hNhJw+4Z2sdd-4bcCJ7AxRhSBf1baY1hAvh7tqH8tVPaVi6egFoqQb6h73-PoTSUboHHCG83bdsNZf4dAvqdd3dfQ0ddSqRK3UvdLs2IVDdTd2dK-qnq08dRo3VUiqjGVQ5uT+KZUMHKfEhdMT0f1US0AGqd601UMHxNiBP7RNK1U2C6dS+dbd+KlUi19l6Q-sdwBodS0SdRz6fdjKO-obdY-Cdxnqdhl6HbnUXEhNAbsoJw7a4bihoKNnZcfqpAZVDNKdddZe4e464B6dNfqemHegIrd6l5q8dSO6mkdg8sesSLmqisdZKTdo-qfH1d1orRZNCsRk6FW5Yzyp-o-1Y1XhRQXsEbFsJriGgsFwqrMZVA7h+8J6DIwfekY1c1EyDIVK0JwLZVQCydZdQwYXvpFFdfh7fjUT0iHJR-TfTfgPzbrbJ93ZNTqfSvRRk-SdDksd-lqoECNpsqAqNhdWs4kSddqdqVrhQrnAau-jtEFEb0JNvzLh5eEQhhwS-yo48hvVN5lbkcq-bAqaZKjdxoBf1atZRk6aueEwfpfNZdDRIu1kL6zbSDddNFJcUfEftv+DTZreicZnVIwKnlz1p94kdxkTfEwsfixejddRX4tsdd"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: XjQw6/w6R/bwrbf5drdAWw==$aN+chNYvOVPG5RY76Om+rQ==\r\nset-cookie: cf_clearance=87j09sStx3wrov13pAgO7oAli0aclvrapnDnoqv7HFc-1772055206-1.2.1.1-H25Kw90ejwQG8ykPhhYzEELMY.aT70bJGqawij.z2bEcizXix94z3tjYNA2gT4Vw5jVqmcBSDuYDjqrtxu0nMRjdtbRo8kqSewPLEXbw6z5198IUPBAw2nnFfkxAIMJs8yy1tuNW.UOIQB1_SC.vV1D9rw5kDGroO8QXX0H5GorfONJnkxhEc9tuTVpaKGDaWMwar11LRTWKkMajus6aythV21TajLR0eIsxQfFI_rQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=sxyprn.com; Expires=Thu, 25 Feb 2027 21:33:26 GMT\r\ntiming-allow-origin: https://sxyprn.com\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d3a52329e655fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/16.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/16.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1527\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7wrmZUN%2Fr8grprgyQhKoqJn67BN41zLPUT4OgqAYfW5GLrQViatjfaBEJqnrNRjcqetydom3f7yZDYAsQTxs%2F1dYUlgOYk9\"}]}\r\netag: \"6224696c-5f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 673509\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523608e35bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1314bc21131efb7eef28a146f11a7cb1","sha1":"8e0481dc0424de5e99363201244d07fd9f3801e0","sha256":"595f64dd54b44bbacfc0eb004ac1d60abd2138e2cdcaf52197d3f051c4501999","sha512":"24aeef3ebd267331e15ff95cd408e414f7b444ed1cd4fb2aca1f969468638d02e2d95490b0829349456675b8e90b35faeaba5657ca59af6dcc6d8ee9227c2f9c","ssdeep":"","tlshash":"f0310aaaa7dc80f5e2dd7d6f530c0847c96506b4e5e34c0e80089229fa673598bafe01","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.30559Z","times_seen":195,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.ec6b4b16f390180dd31e.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:53:39 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1611\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=428PBHwkXMP%2BHWzUT0W3N0J73zd60UsZF4Uiixq9vF56Y7ooieUb5o0AKc0NoyHvDbwLJbPs1wzKvH9wduAud%2BNUn%2Bpg%2B004Y24kIa2Aim1yv%2BC6\"}]}\r\netag: W/\"77bc545b5086d9e6afca7e528ac58943\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523d19098687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"baac19467fee0727b75c5f0ed3d96674","sha1":"a7944202e365e7a4b6dfbc1e704612681cd707f6","sha256":"d1d1c6aaa3e4e2f56bb4079b8c6fd2b8dcda794c1501952cd6ff5b6aeed46f5e","sha512":"711fd426d479b20e3b9cbc961ed03b5b077a8996171b41334c26dc67e260de2cd309f7c967a17fd5d8fab48d7c930b83804dc26828e0f38108bbc64d7095d495","ssdeep":"6144:KHmW9oO1EmZQHSBre0gnwJwtLvRXd2dhmpkAnuXZiEdh2q/ZqgDp6lbD78OrJATu:4Re0oYAWZzdXn13BI0tPqXQvq9j","tlshash":"a325398a7755b43646c69146e43f0203b335699a201a905cb3deecec665ceceb237b37","first_seen":"2026-02-20T18:20:29.311732Z","last_seen":"2026-02-26T12:27:09.12545Z","times_seen":35,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054850/197455312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054850/197455312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10632\r\ncf-ray: 9d3a52406ec9b28a-OSL\r\netag: \"2a0ae12fc51388b2310274b5b633e5e9\"\r\nlast-modified: Wed, 25 Feb 2026 21:26:47 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 349\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a0ae12fc51388b2310274b5b633e5e9","sha1":"a4820573645b0cacbcabd032e5735185ab5a9175","sha256":"4d633ddde998a3810eb0d5eed1dd67f9d955a96e1719e7ccac535d55f77fc795","sha512":"f8a1ae15585f75da00560a8bac4917f90f73629796a864f620cbdba354182afed4522edc8d29aa2470113ea816390645cee9bca476af4fffaa02c9021b22bad5","ssdeep":"192:VaubwzpPIzDjUOSs5rZNOLfolznRCZFdfzylPZToDjJshDNontkt:gwz3UOSCZNZlsZFd78PZLBotO","tlshash":"d022d08fb60b4e8c05787720a106e106b348383e4299acdc6e9db365e7b87649f5d639","first_seen":"2026-02-25T21:34:00.700836Z","last_seen":"2026-02-25T21:34:00.700836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":65,"dns":13,"connect":4,"send":0,"wait":44,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a.adtng.com/get/10013369?time=1649773464795","date":"2026-02-25T21:33:25.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:67:8C:D2:F3:88:16:3D:99:D4:20:FD:1B:49:11:66:D1:6A:9F:43","sha256":"1A:A3:49:5D:8F:EA:EA:8E:F5:2F:82:5F:FF:33:C6:FF:50:0C:CF:FF:CA:65:5C:0A:74:2F:DB:27:1B:12:CF:EA"}}},"request":{"raw":"GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1\r\nHost: hw-cdn2.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.19.9.1\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Apr 2022 20:54:54 GMT\r\netag: \"41f5-5dbee74f4a3c8\"\r\nexpires: Fri, 25 Apr 2025 21:03:14 GMT\r\ncache-control: max-age=10646761, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nage: 2834535\r\nx-served-by: cache-ams21065-AMS, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 70, 108745\r\nx-timer: S1772055205.244804,VS0,VE0\r\naccess-control-allow-origin: *\r\ncontent-length: 16885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16885), with no line terminators","md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T22:01:59.293971Z","times_seen":2337,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":36,"dns":3,"connect":14,"send":0,"wait":13,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a.adtng.com/get/10012877?time=1633701610566","date":"2026-02-25T21:33:25.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:67:8C:D2:F3:88:16:3D:99:D4:20:FD:1B:49:11:66:D1:6A:9F:43","sha256":"1A:A3:49:5D:8F:EA:EA:8E:F5:2F:82:5F:FF:33:C6:FF:50:0C:CF:FF:CA:65:5C:0A:74:2F:DB:27:1B:12:CF:EA"}}},"request":{"raw":"GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1\r\nHost: hw-cdn2.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.19.9.1\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Apr 2022 20:54:54 GMT\r\netag: \"41f5-5dbee74f4a3c8\"\r\nexpires: Fri, 25 Apr 2025 21:03:14 GMT\r\ncache-control: max-age=10646761, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nage: 2834535\r\nx-served-by: cache-ams21065-AMS, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 70, 108746\r\nx-timer: S1772055205.472836,VS0,VE0\r\naccess-control-allow-origin: *\r\ncontent-length: 16885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16885), with no line terminators","md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T22:01:59.293971Z","times_seen":2337,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/a7/creatives/221/1559/824119/1171923/1171923_video.mp4","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://a.adtng.com/get/10012877?time=1633701610566","date":"2026-02-25T21:33:25.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ang-content.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Sep 2025 00:00:00 GMT","end":"Mon, 19 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:85:31:86:5B:3D:BC:C6:72:9A:EF:DB:90:03:59:87:52:43:B0:5A","sha256":"90:34:33:39:E2:D4:23:D7:93:5E:3D:F6:82:61:E0:CE:2B:1D:64:66:59:0E:7F:95:8A:5B:1B:6D:25:4B:8D:D8"}}},"request":{"raw":"GET /a7/creatives/221/1559/824119/1171923/1171923_video.mp4 HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: openresty/1.19.9.1\r\ncontent-type: video/mp4\r\nlast-modified: Thu, 04 Dec 2025 22:04:06 GMT\r\netag: \"5847f-6452781eb8180\"\r\nexpires: Sun, 05 Apr 2026 02:38:11 GMT\r\ncache-control: max-age=10470643, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 2827894\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nx-served-by: cache-ams21049-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2597, 0\r\nx-timer: S1772055206.602888,VS0,VE1\r\naccess-control-allow-origin: *\r\ncontent-range: bytes 0-361598/361599\r\ncontent-length: 361599\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361599,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"48d30a90d5210d598aeec31ce774aaf4","sha1":"07c4bb900524f0a533949d73bb9afce1cb1f398b","sha256":"fbe21516bce6560415548f685783179a1efa6d8f0e493c03c106ec11ffe4ac91","sha512":"975f2aa8c8fb44d19b3220ae3c8581e1011e24036a24b04980c25ef8bfc1952d5b2f4f12ab5992c1248c636522f2d6596246406e5f3585c07207c3545e1d13c3","ssdeep":"6144:WjHxPPLmDPgeoZpVy8DM+/zBBejwds9pWL1Oiwn5qOlzgL8NwAo+YFNImhpa1zec:WLNP8ip4tuIwqiw5hNnqNRhpFW","tlshash":"5a7412929ba48577de725774c8a303067b62f4a0cc5707a3b10dc8b92dd66eb7ec1236","first_seen":"2026-02-25T21:34:00.732792Z","last_seen":"2026-03-10T03:30:35.094326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/21.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/21.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1815\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FTJS8xsHPuObcSwSeiriK2zXcYtlqRyaKJNTKAfeM8DNV4j7tMP%2Fb213Omf0am1%2BT%2B6yJGz6F%2F5FMGn0N8SUSZ1ZxCq%2BJd3\"}]}\r\netag: \"6224696c-717\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 504719\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236190a5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"04b69e0c0416adf2a72d873c8be3edbc","sha1":"118f9f970edafc204b7a4a582a9698900384e512","sha256":"fe6b601ae21934b32eb99f9b7cc8681e6dd6e0908406e76692761901613c0e1d","sha512":"43b1df638ff4d1b9b959054b104e1473fbc482b5efd316dfa0a42fca7f8ffb0f4a190abbe9f16beffd08b388b7360862e0e82316639abbb6eff643ac7d3b3745","ssdeep":"","tlshash":"88312b60a44ef82cb127f12a70192b01dad7ecb2c411079e9f7bf1ee338a91171ec256","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.245187Z","times_seen":192,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":12,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.campfirecroutondecorator.com/static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"www.campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: www.campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\nlast-modified: Sun, 15 Feb 2026 18:56:12 GMT\r\netag: \"699216cc-c83eb\"\r\nexpires: Sun, 26 Apr 2026 21:33:28 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-820202/820203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 7129498\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBoEElb4pTUbRBjmhj656cX38Hb8hd49GvcquLfqgSjdENgzuJGYgy272ZK%2BjabTAJAFbSrwJZk0v3IRbTvOfcTSfreMqDH9DpBOdhFRFcw%3D\"}]}\r\ncf-ray: 9d3a523d890943fc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-04-06T04:46:05.207073Z","times_seen":2158,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":42,"dns":6,"connect":10,"send":0,"wait":13,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAEc6ZZcv6IPoX8UKjy%2B2VHUiaNcgDRQkaPcOdPYvAUHYd0vdyHHc28qF%2FYmcHgsYG9JZ6VfiEI0UUUpTvuy5QLhEa3gOikzH4TVqURMbew%3D\"}]}\r\nage: 7283406\r\ncf-cache-status: HIT\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523f1c7d43fc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-04-06T04:46:05.212008Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/favicon.ico","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z%2FTlNcoao3luZyd9%2BWZDcgdVnnPwQD3hCT8l%2BGk8XLUdrQgpYpl5cV0tqLfergLAuieLXuw7Ibqr96Zm2NwUzYCs0SsmYUNIEk%3D\"}]}\r\nlast-modified: Mon, 07 Mar 2022 11:13:26 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 671275\r\ncf-cache-status: HIT\r\netag: W/\"6225e8d6-47e\"\r\ncf-ray: 9d3a522f4d8a5fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"444e0b27f8563600658c0929d256a6d5","sha1":"8ea46e405826a874137def8ab1910dd01482de70","sha256":"a1ce3e9ed77fafff466a9460ffb49e8e0eb78a643eb5fd8087c8082e6f877ffb","sha512":"75920c82397a7d88b98b6ef7f220067e305057b462d6397d94d48194fa551e972943f2991f3320761a451b71c6811d15cd254e91d913ae15d7aed8ff38b9a9ea","ssdeep":"","tlshash":"ff215c16caf70f09e086a67c0713c320e364ec0840218e0a47f0ad0328228d4a42ab30","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.242715Z","times_seen":240,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/20.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/20.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1813\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVsRikK%2F0ybVID4aK835D33D8RScc74K%2BI%2Ft4RgWxcHVvTFvIJA7Ps6aCd4ReBHfqfVTYpOfBZz3lEFrza5UDmggvKEnXSTh\"}]}\r\netag: \"6224696c-715\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 466554\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523608ef5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"63e640c5252b737f8fa8c887967fa14e","sha1":"4bdcb666919cd724f25aaf71e3186cd2563db8aa","sha256":"1bae517d72e1604044d75d6ca2f57c5d7ccb4ff2567a185c599416b35f5b7fea","sha512":"cd49f33e73b4aec0039dc3d5577594e989ba66494c98e1c172746fba954a6c0c357ba649530325cea917d16b1d7d0ddbd6491bfed60a067216d4b6513408e9b4","ssdeep":"","tlshash":"7d310be06b219c2073cddd708e2cf150ed7808b007ebc699dabec1543761644d414f2a","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-11T22:25:19.236959Z","times_seen":161,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":12,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/30.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/30.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1709\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1v1eahe8w8gmoLd9dsE0R%2BXnCDqMG39cPe07K3d6eTTOGjriBbkx931PxN%2F7t6v1j7VEZtnMKqzD51Ua8RepizPisPQUm95G\"}]}\r\netag: \"6224696c-6ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 414473\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235f8b85bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"cf16fa4b06a92ffc0369a044babddbb3","sha1":"b4ce800e0085f0b63dac392c78d9e74a67c72125","sha256":"fe446d1994455a1c16aa565fe231d856faa9faebbd053b01dbd7c9000634e6ad","sha512":"48e11bf494b2724e7ef0d0df8a4661d4576de21929bc1a6ba798d39444cf3558e68cf6bdaf59107ff0b9af5a4b157f960e88acf8e2b25d043bf2a02470e61789","ssdeep":"","tlshash":"1a311a7193099400d53ad0763eaa032112a76297e3bec0511c242e45f7678925ada4fc","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-26T01:32:37.995437Z","times_seen":194,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/26.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/26.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1256\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXFx3euQ0kYWmbbty3I786fdawAYxReh8BR5Y6NHpgJOmmFTbD46ibeOBJMcFX7gNvICtcF7HVZ0jC%2B7hsV3PWmrEDWQpoYQ\"}]}\r\netag: \"6224696c-4e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 671089\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236495e5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"db60712739712324bae4ca4d639e63cb","sha1":"f2d8b8ce4218c4f0a39869928796a65b6097a478","sha256":"26f27b2277fa7a613b292c4ecc59747994417e242d964e6f1a4f469cee8127d3","sha512":"b084548bdd7a4f65f0a4878909d0a2f9731d5ddeadf3be6ca979c0264c1cf5b8c221658796efd578ab46eced65ce780c189075f0029e77107ef2a97f6db70645","ssdeep":"","tlshash":"4e21e7c1811eda7f1884a49087605bdaf2e217f0b39b4a8d60abcd9905f085d8ccfe0a","first_seen":"2023-05-14T05:59:15Z","last_seen":"2026-03-10T03:30:35.08321Z","times_seen":119,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/settings/395528","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:28:40 GMT","end":"Fri, 03 Apr 2026 23:28:39 GMT"},"fingerprint":{"sha1":"85:74:F2:79:0B:02:78:8E:1F:E8:80:75:73:6B:99:06:70:82:4A:1C","sha256":"29:2D:AF:FF:BB:42:24:C4:F8:F2:B4:C4:71:6B:6A:74:80:7D:0F:7C:8C:1D:6F:83:C8:8E:21:72:19:F1:5E:48"}}},"request":{"raw":"GET /api/settings/395528 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-04-06T02:29:27.81297Z","times_seen":7163,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":74,"dns":13,"connect":27,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b1.trafficdeposit.com/pivi/0/3/vid/h97RbWweFaaS1BiMkmVcdQ/1772056800/67af5240183ff/699e484b89314/small.jpg","fqdn":"b1.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/3/vid/h97RbWweFaaS1BiMkmVcdQ/1772056800/67af5240183ff/699e484b89314/small.jpg HTTP/1.1\r\nHost: b1.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7675\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Feb 2026 00:55:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2fu%2ByRKOM9ii8okzwY%2FiBdvEyz5UgM3pFUpoNNNazWTV2l%2BlsOt6YQhUeNxH7b11fsDqXmIVCkytQgSnD3%2BFfEiVMS%2BQyzQwfTBygu0N2J2wuylFYQ%3D%3D\"}]}\r\netag: \"699e486d-1dfb\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231cb23c63f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7675,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"85d14f332fac3ffb5df1dc7175cce16a","sha1":"2953af1c4e945e8f7f660c1af92e6a57ccc0551a","sha256":"04d71ce054130b163dd3b5caa840933dd946a41dd44b0dc6701081f4d40c1659","sha512":"308d3ea24f6b7930cf10f4cd37f50493f9503c9f6b395858546ffdb5699d1d1416da504300580c9293b8f436f8cc3345d340531f0b3f4b39e2a7d716e0401902","ssdeep":"192:QZzy041bEb0wyyu9GXvNmybX2+7OEYAH93ppgo:gy04eYwyy5XYOOEPxppd","tlshash":"76f17d2133e06411f86e05372337e3a03b677c15e293b759fc99a69a489724c8b593bd","first_seen":"2026-02-25T21:34:00.739479Z","last_seen":"2026-02-25T21:34:00.739479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":53,"dns":0,"connect":8,"send":0,"wait":12,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832747?id=1832747\u0026pid=__clb-spot_1832747_cbw_3\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /get/1832747?id=1832747\u0026pid=__clb-spot_1832747_cbw_3\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nUID=26022516332c842207f2a54c6e8598e584ec; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5904), with no line terminators","md5":"0221fc9e9d4210055129aa9d1d1fc326","sha1":"d5cdf43ffbe55b06916341406aae3ed28921bbcb","sha256":"bbdbfc712f8ab7878101c4f441df1ecce493917d9217ec5968f421b6b8a1b0ad","sha512":"5e6f139693783be30945f736e700bdd6e634643706356a6ea69395e829d08b45cff353d84c0d2249b9e81139e3de70c286c46a3fa77907e9d69bfffe9818920e","ssdeep":"96:96ZGsqMLKOs3sqMLKSUnsqMLKtisqMLKLpDLzvwSjfNAo:kZGhc1s3hcgnhcOihcwLwTo","tlshash":"76c1fb2a45cc8a425f2e6f2e915d0c8cc8e759d95a13b5c798f09d9847cc5fc062fcd5","first_seen":"2026-02-25T21:34:00.740276Z","last_seen":"2026-02-25T21:34:00.740276Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=327","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=327 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 13:47:54 GMT\r\nexpires: Thu, 25 Feb 2027 13:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 27935\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-06T08:10:06.5271Z","times_seen":65414,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":223,"dns":2,"connect":21,"send":0,"wait":13,"receive":5,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054430/177685198_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054430/177685198_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7244\r\ncf-ray: 9d3a5241aff01243-ARN\r\netag: \"9abfac376cf7bf1b8d185044b134fc86\"\r\nlast-modified: Wed, 25 Feb 2026 21:20:00 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 695\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9abfac376cf7bf1b8d185044b134fc86","sha1":"145c020dd7ad5b2dc12740266d3317ede4d334bb","sha256":"5af440e5e06086e317b9bc2a57db70f4775ccf2ae8dde88af0f6ff0e3b758fe7","sha512":"9a22bfae5be114302019bf0aaf26d536e094f044af424664537787dbd7c54b621eaba7cd55b718a67d658ebd9b451884a471d20e8db2b9ff1fb3c3f47d59997c","ssdeep":"96:o0K08DheIQpz+FdA4QkP//EK4jDa/ELmYT5ckoUVCdFCSs0o6r8OSm9HGuK+gnQ+:o0K0ppz+FXPaHa/Ef2jrfS6mXZF","tlshash":"39e1bfeed7687bbd91689cc11308a8746bfb540e928d3aa1523b44df1c7b27f75060ca","first_seen":"2026-02-25T21:34:00.741048Z","last_seen":"2026-02-25T21:34:00.741048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b1.trafficdeposit.com/pivi/0/16/vid/tD_6I5-9vE5r91pRSU675A/1772056800/67af5240183ff/699e246e616af/small.jpg","fqdn":"b1.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/16/vid/tD_6I5-9vE5r91pRSU675A/1772056800/67af5240183ff/699e246e616af/small.jpg HTTP/1.1\r\nHost: b1.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9716\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Feb 2026 22:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExrnSVylwik5x5r2cu1PpqnjTCER6wflVVbqHeDYXD%2FUK9j3sVA6b5SOsnwrhPi2kS6QEbvDQmQliiO7nAL9YUbpe07pnpeWdOc%2BE26iSMoMMgGirQ%3D%3D\"}]}\r\netag: \"699e28a9-25f4\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231bb15c63f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.9.100\", baseline, precision 8, 320x240, components 3","md5":"fd076d5225fb2d6964ff065b2249206b","sha1":"179d8c61e334ab9fccc6e88d782b44e8a876b8f9","sha256":"ec2c5bb6e964b80ef0b48e09fb95fba264b94c792a4a2f0abc4899b05d8e42a0","sha512":"15e4d986fd944d6dc53214b5720d23f59ca71ad8a67cb68f0ad5a5b88c18754a275422c8bbf9d0fc30d31bf386781f08eba952528abff0935893bb996b667e54","ssdeep":"192:DOY8nOnXlAg8xH71o6gr+ChwdG65OOvyvLib/prnX+zmROKVc8ya:DOY8nG0u6S+ZdG65/Iibpruz/K","tlshash":"6612ae1f181b7973c7ec3b796286ca70c003dda552492ca6831f3b03795676acb1222b","first_seen":"2026-02-25T21:34:00.741779Z","last_seen":"2026-02-25T21:34:00.741779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":52,"dns":1,"connect":8,"send":0,"wait":14,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/1/6/img/dqK9OPw1isOT4kw8HM_hkw/1772056800/618afb5ec39a8/699e670be0f2e/0.webp","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/6/img/dqK9OPw1isOT4kw8HM_hkw/1772056800/618afb5ec39a8/699e670be0f2e/0.webp HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24458\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Feb 2026 03:06:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSPCiWaAD9KDGm%2FLgGOfCXKPPPk2RMg2t6%2B3aUNlcC7fzY1cucbXwzt5SLXKV3jjrKACHlV9VIncwkf7pgw1CpWRIOfNUL8tPrBNjyb4m%2FOoHL%2BcPw%3D%3D\"}]}\r\netag: \"699e6742-5f8a\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\ncf-ray: 9d3a5231cb40c63f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0ac9b8b8a52b59082abc82ca031a4a1","sha1":"26eabdf224551c7431f36f2935880fef4e97db99","sha256":"964de847010333bbe6c6c68bc69eae31fda1902ce13dcc5a0e88f6b83ca4f479","sha512":"737612060ad42a01b1756236d059ff1b02577e62504b661f4e1a112a5a44154b187104f2c903b38b7f5b859d39a96c52fd9b2198c3b89ed7892beeb9f8939455","ssdeep":"384:i8xk21IJyR83VVGssdbhpdCTnPQ59ZiWvJO4IHqtFrR0/+SuiSF6ew2dqa:i7y4VVy9jd6nPQVJJOtElSJewMqa","tlshash":"22b2f1820bc78a0eb0dcd639eeda99d51c5a6c51587cae063d874b0c6b19f1444e7b37","first_seen":"2026-02-25T21:34:00.742621Z","last_seen":"2026-02-25T21:34:00.742621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":62,"dns":6,"connect":9,"send":0,"wait":14,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/11.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/11.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1829\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoYAxh%2BDCJyUE99%2BPmEQE85hmTajTqW4cNSdolf%2FMHNPS2TnkfdVXesuzNuord6%2FFuJdnFPbZXnYtYfMneCRAazmZn5zJX%2Fp\"}]}\r\netag: \"6224696c-725\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 670604\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523619135bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"38913d6af655465ede4461fc646c9a62","sha1":"aef1e1882e03af89307e1a84fdbe32afeb56c522","sha256":"36b22c642af10978dd9c3233bd3b1b2bbed4b2c7d9de72cfc51932cef3dd0f15","sha512":"7c352878dd6cab4f395a3394745e39033af6016f686c7a51adf036c6845e3c2aff7e20de7324c7b89b7cb33a343766466570d16fd3b9c23b7f3029a931d9b365","ssdeep":"","tlshash":"0a31d7d70da888a8ed55fe670e8006695038ec7811541a24563fd73dd9f2987e11e2a9","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-10T03:30:35.148549Z","times_seen":145,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/24.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/24.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1799\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I35egZKqd4OD8sHhaNAa5G1prwBhlRIKcC7OWkHNFopUJriTLZnOvt3xeFwbjLt2mm2kPt4GdkS1yBiK6VAIA6I3%2BLa1WeCO\"}]}\r\netag: \"6224696c-707\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 570677\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523649775bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fb97469cc6f6e4d50679653d0fecff15","sha1":"375e32334ef5aafcac3b996e0e7a1d56a94f4159","sha256":"870c8a61717aca164bef02675bb3ad0fa286e82df6323d80e347e6987d47d18e","sha512":"a95906cd33e47849479c15ec8b9b14ef5004e53292b3934af3a850adb14da993d8dd5ec1d498bfab4c7d6a08cdade6d5d7ed9097e4cb2b8d0febc1357e877503","ssdeep":"","tlshash":"d731096a4db8d53d82e92ab7902e5c3ee9280aba56600f9c0c18a81a29e41c53c72655","first_seen":"2023-05-18T23:02:33Z","last_seen":"2026-03-11T22:25:19.312801Z","times_seen":131,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/pixel/sbs?c=1","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marshalcurve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 21:50:10 GMT","end":"Mon, 13 Apr 2026 21:50:09 GMT"},"fingerprint":{"sha1":"9A:56:95:77:A1:65:26:5C:D4:EE:6B:51:52:AB:6D:6B:B8:DF:71:6A","sha256":"1E:95:15:15:35:5A:CF:38:C2:A6:83:37:07:B8:E7:78:92:5B:87:4B:D3:08:89:55:89:2E:CD:69:F6:16:93:1A"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: marshalcurve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15618914=1; slec50ea9a3e51a5ec5160f47477aeae3681=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: marshalcurve.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054430/104224683_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054430/104224683_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6302\r\ncf-ray: 9d3a5241afec1243-ARN\r\netag: \"6050479efd74abd3dfc6a6f2b4f54559\"\r\nlast-modified: Wed, 25 Feb 2026 21:20:26 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 754\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6050479efd74abd3dfc6a6f2b4f54559","sha1":"da7496e4c01495857a38c620e315839ee2dd0e0b","sha256":"8452f292e6548c48adaea45d476e39a5895748b84a7def79dd91255f604f6c48","sha512":"0c6e66555af9fedaa132cef4a27a4b888e7dab69b9c92413c49cbd35b7024d0edfa619064013c720c12516b6899f5fdc5a26334c3751c7981d9c5e5a188b7bfc","ssdeep":"192:ILVpaQuGx8ayAnmSKcLRMrn18hYjWnbi5iOV99Y:ILDakx8NAnlKmMmhYjWm92","tlshash":"72d19ea4299bd14b853fa03c5691906ca853fa43641a3a9d27c4e15e0f4f05ac2bfa2b","first_seen":"2026-02-25T21:34:00.745116Z","last_seen":"2026-02-25T21:34:00.745116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-137797503-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=UA-137797503-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\nexpires: Wed, 25 Feb 2026 21:33:24 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 25 Feb 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119167\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344075,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"8633d88b635e54f41841cb9f5afdc447","sha1":"4fc22649ad797c289ffcd657b286e9f5971e7c05","sha256":"b001a7b6758530d824b8ecc6d2fb03a8db5e974733cd11668df2dd006f50c21c","sha512":"b18d7351e1b44fe50072ec2b5fee208d10f41f3628d07fad1a786dfefc82553b8754e5cb084f88be335ccd2edb7a034800ebbaba468fa123da14b3c5dce2361a","ssdeep":"6144:UkOidcI7obOXyIGU8JlDoD9fHU+O9N89YbD8qbt50rJ:5X+I7obOiE8HN8rqnO","tlshash":"b47408cdb3da742693a3a478503f018bb27b6992f84cc899f185d8d42d7069a4277f7c","first_seen":"2026-02-25T21:34:00.745963Z","last_seen":"2026-02-25T21:34:00.745963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":201,"dns":1,"connect":8,"send":0,"wait":21,"receive":28,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:22:51 GMT","end":"Sun, 24 May 2026 08:22:50 GMT"},"fingerprint":{"sha1":"51:4C:15:FB:47:44:FA:A8:E5:C3:C9:E1:C6:2A:CE:3F:1F:DD:7E:CE","sha256":"58:4D:39:CD:58:CF:09:A4:17:8E:80:49:FF:5C:B0:CF:61:C6:0E:57:8E:8A:0E:13:E5:98:09:4C:93:14:89:13"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-06T07:51:01.707935Z","times_seen":105002,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054430/177685198_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054430/177685198_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7244\r\ncf-ray: 9d3a52406eb5b28a-OSL\r\netag: \"9abfac376cf7bf1b8d185044b134fc86\"\r\nlast-modified: Wed, 25 Feb 2026 21:20:00 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 566\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9abfac376cf7bf1b8d185044b134fc86","sha1":"145c020dd7ad5b2dc12740266d3317ede4d334bb","sha256":"5af440e5e06086e317b9bc2a57db70f4775ccf2ae8dde88af0f6ff0e3b758fe7","sha512":"9a22bfae5be114302019bf0aaf26d536e094f044af424664537787dbd7c54b621eaba7cd55b718a67d658ebd9b451884a471d20e8db2b9ff1fb3c3f47d59997c","ssdeep":"96:o0K08DheIQpz+FdA4QkP//EK4jDa/ELmYT5ckoUVCdFCSs0o6r8OSm9HGuK+gnQ+:o0K0ppz+FXPaHa/Ef2jrfS6mXZF","tlshash":"39e1bfeed7687bbd91689cc11308a8746bfb540e928d3aa1523b44df1c7b27f75060ca","first_seen":"2026-02-25T21:34:00.741048Z","last_seen":"2026-02-25T21:34:00.741048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":60,"dns":9,"connect":4,"send":0,"wait":33,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js?","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js? HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d3a5230fdf55fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30775,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (30775), with no line terminators","md5":"557a6452b7ae766047b0f0f32af614b3","sha1":"99342cb294a3f59cf6b4c9ba097a9450ed0dcb1d","sha256":"5664c6186443296bfdd6eecad295eabaf70ffba751ece0b96be196c57b028fcd","sha512":"c28b628fdcf02f68d9bde822915c9a7011ddb1ca7a200a0f6cf8511466e618989e7b9e3e666ab8f9fb420b941eac2a485755ad8560a7e991410bd4c661c4c5ea","ssdeep":"384:mmHJ9MxalidgdECATi/5MHu8O8R0dQQZsr+vrru/KWFiWprIs3Ot6/ZAHFOSB3yB:mS9DBMOsgoww/bpr+6xCUN7UfcT/","tlshash":"e0d2c7cb38dbf0892222dc71245b71eaab1d1c957868097ecf43d960bcab78944f4dd9","first_seen":"2026-02-25T21:34:00.747011Z","last_seen":"2026-02-25T22:26:55.34351Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQW2oDMQy8Si+wRk+v3O/2t4WWHsDrZEM/koYslAR0+MoulNSDjZBG1owIKE9AE+kD5kfmR1IvmAokoYQq/vL65oK+XW/nyym1r6Mropo4gxGYz4VlLi5qRppdR0qoFHIkVSg2ZxdwdgiQskiPEgB6Bv94fxoXA+QF4EoKEfexjtmtV8jgikC9cSdNaL8qNpy5qWWupvNSMwrUOS9Bh3ux8IskfV4fAX+YOpVRmEJSHPCRrtvt1NzviMNb7pEOGzycdP4d6T80wfOk3Sb2h2OTlg0JKDzhoGzpWA/b5XvIxCFgsGNErE5iZa0ez/XzcBrV3hJ7LLzLpm2Fddmv0OJf4VL23GypTD/1qVm7zgEAAA==\u0026cb=e2e_699f6aa5db3bc7.01057606","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA1VQW2oDMQy8Si+wRk+v3O/2t4WWHsDrZEM/koYslAR0+MoulNSDjZBG1owIKE9AE+kD5kfmR1IvmAokoYQq/vL65oK+XW/nyym1r6Mropo4gxGYz4VlLi5qRppdR0qoFHIkVSg2ZxdwdgiQskiPEgB6Bv94fxoXA+QF4EoKEfexjtmtV8jgikC9cSdNaL8qNpy5qWWupvNSMwrUOS9Bh3ux8IskfV4fAX+YOpVRmEJSHPCRrtvt1NzviMNb7pEOGzycdP4d6T80wfOk3Sb2h2OTlg0JKDzhoGzpWA/b5XvIxCFgsGNErE5iZa0ez/XzcBrV3hJ7LLzLpm2Fddmv0OJf4VL23GypTD/1qVm7zgEAAA==\u0026cb=e2e_699f6aa5db3bc7.01057606 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: __uvt=s%3A32%3A%22a1b8016c9483f56b7c33b2431207e048%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Feb 2026 21:33:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sxyprn.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026sourceId=7942992\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026p1=7942992\u0026ax=0\u0026kbLimit=1000","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /smartpop/412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026sourceId=7942992\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026p1=7942992\u0026ax=0\u0026kbLimit=1000 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-length: 0\r\nlocation: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\ncf-ray: 9d3a5239db6d4e4c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2; UID=26022516332c842207f2a54c6e8598e584ec; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/main.ec6b4b16f390180dd31e.js HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.ec6b4b16f390180dd31e.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:53:39 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1611\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6oQVUKtRl2MYYxrQrujy3rE7sdLQKWumcD22DD5rPzf1fF%2FakKEimjWPRKgeFgN3UcRf0UeWlV7tzPcbLWnWxk9t11sS7W8ZZRcXsVp21NG9nN7\"}]}\r\netag: W/\"77bc545b5086d9e6afca7e528ac58943\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523d18ed8687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"baac19467fee0727b75c5f0ed3d96674","sha1":"a7944202e365e7a4b6dfbc1e704612681cd707f6","sha256":"d1d1c6aaa3e4e2f56bb4079b8c6fd2b8dcda794c1501952cd6ff5b6aeed46f5e","sha512":"711fd426d479b20e3b9cbc961ed03b5b077a8996171b41334c26dc67e260de2cd309f7c967a17fd5d8fab48d7c930b83804dc26828e0f38108bbc64d7095d495","ssdeep":"6144:KHmW9oO1EmZQHSBre0gnwJwtLvRXd2dhmpkAnuXZiEdh2q/ZqgDp6lbD78OrJATu:4Re0oYAWZzdXn13BI0tPqXQvq9j","tlshash":"a325398a7755b43646c69146e43f0203b335699a201a905cb3deecec665ceceb237b37","first_seen":"2026-02-20T18:20:29.311732Z","last_seen":"2026-02-26T12:27:09.12545Z","times_seen":35,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26affiliateClickId%3DorddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g%26ax%3D0%26campaignId%3D412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67%26campaignType%3Dsmartpop%26creativeId%3D95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba%26iterationId%3D1191989%26kbLimit%3D1000%26masterSmartpopId%3D0%26p1%3D8020834%26quality%3D240p%26ruleId%3D0%26smartpopId%3D15820%26sourceId%3D8020834%26trafficType%3DbannerIframeOrJS%26usePreroll%3D0%26userId%3D1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9%26variationId%3D35145%26webp%3D1","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26affiliateClickId%3DorddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g%26ax%3D0%26campaignId%3D412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67%26campaignType%3Dsmartpop%26creativeId%3D95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba%26iterationId%3D1191989%26kbLimit%3D1000%26masterSmartpopId%3D0%26p1%3D8020834%26quality%3D240p%26ruleId%3D0%26smartpopId%3D15820%26sourceId%3D8020834%26trafficType%3DbannerIframeOrJS%26usePreroll%3D0%26userId%3D1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9%26variationId%3D35145%26webp%3D1 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d3a523dc9a3dfec-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"37046a7c9f1df5274ef188c4429b48ce","sha1":"86399a052ec0bb9f821fc9e041facb10f577f3e9","sha256":"9f57dd445e6910f1f522ca4ee53bed32c90506dfef2579edef17398c2fc0e3e3","sha512":"5ebf40499434bf3185ff79bb5e383411f8a0447e5a70051f7847e7fb2929cd6ab545311a2bc469f908431f9b5af18cc97451ce3498c63d4705747a4b3f9702f7","ssdeep":"192:wDtRpZGl+8mkUWa44mn1w4Hu8nyayqh13/7VlloqJIwm13YVyQ13/7VlloqJIw1:aRUnmkt540+vlgQeH","tlshash":"6bf131fb861e24b706c04d5ebf1e78d86a5c40b74e9248efec489435412c3b222b779d","first_seen":"2026-02-25T21:34:00.748093Z","last_seen":"2026-02-25T21:34:00.748093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VD2dHAuMBSiTvHznaQwDaMTM9Ib5kQ5CngwxpU%2Fs%2B4etqmmsQgxapi8pGazMqCCEtrDv92U000uV05e3N75yYY7vDtP5DL4jF0wwrvNLoKU%3D\"}]}\r\nage: 482626\r\ncf-cache-status: HIT\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523eabbe43fc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-06T06:44:29.342344Z","times_seen":15994,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=109","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=109 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/on.js","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deputizepacifistwipe.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:43 GMT","end":"Mon, 06 Apr 2026 14:15:42 GMT"},"fingerprint":{"sha1":"61:C3:1A:A3:8F:26:5C:7D:48:B3:9C:81:0B:6B:FC:6C:F4:2D:0E:9B","sha256":"89:6B:30:99:27:13:BC:25:04:38:F1:B3:13:89:73:A6:7F:AF:92:99:EF:AF:00:29:E0:62:8F:67:CE:3D:A8:46"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: deputizepacifistwipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 25 Feb 2026 07:55:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699eaaed-11be0\"\r\nexpires: Wed, 04 Mar 2026 21:33:24 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72672,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"bccf0ee1386eaed685cbce60aa0f7932","sha1":"483ae7516160e4873f32be12084aeeb498823947","sha256":"0984eec1bc01af14e5ac26cb4f73ff4997c1f7899fd3f6d5c4f93f0b5ae07b14","sha512":"5185e4cf15e55264db961032903db0d2a9d9b34527365d6140363917a2e9b6a568dbf5b117d9b3d0163df64679f6dc76d46c4798004bda0765c6ec13b5d35614","ssdeep":"1536:e/j5W++p22/hw8BltXss5SH6DZ5zdxNNHZOWo:wc8s5h1dRQ","tlshash":"d2639799f695b865035390f852bf401da33a3d6ca4fc1168b181e8ea2c7cd4d9623f7e","first_seen":"2026-02-25T14:22:46.461901Z","last_seen":"2026-03-02T08:06:40.926806Z","times_seen":108,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":35,"dns":13,"connect":20,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/5.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/5.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1636\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXHLwiQ%2BJXUszuMo0IAOyh4vWwp4Xf6NE8Rlv4RxlhrAOBYqAg1r0483z0HVr11vIBECYhta37cLJwkSfIBRDPxqp8Iz%2BTmi\"}]}\r\netag: \"6224696c-664\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 571070\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523608f25bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"814048e914733e736d884522ac22d001","sha1":"b72ed5eb7455c2f72aa94a4421b44851e69aa961","sha256":"947a938e2dc4fd42a8442dc90e65f29e3c91f2699e2a5d4a3be960a944fe9f5d","sha512":"419a052490f59375b3bfa2beac73611b67f32bb28f6cd75887d662256895a96f419cd8abcb85731292b6c72d1285419307368955acc309079aef78d81138b5d8","ssdeep":"","tlshash":"b5310a4bb60c3f4ba5a5c07a58a623e675be11d0149e7bde570eaa08b531af131b8093","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.260026Z","times_seen":192,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":12,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/19.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/19.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1372\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXSXXxkWuos0%2B6ijHWplSKFRQeJ4Hw%2BuxfCdbWRhgVxQpAt3jIZN0bV%2BtnMi2KaNjAUqTlJfczAn7qBj1WUfVAWXkqDIVzsp\"}]}\r\netag: \"6224696c-55c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 579144\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523659ae5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"eef616c9508a5c4aef6c6036130bf895","sha1":"e2988b1bac263f803f2fa52f640964d496bac1b9","sha256":"e03aa019497c54e56e9e40117563f0c38286d490b1cafcbee382c7689d32a852","sha512":"cab77ba27d6210f7a4bfde0a41bf841bddbaa2ace944cdacd164e5540e09d4bc983fd253088165fa4171ae67ceaca03e3477a4775766806b5e61a23c2737484c","ssdeep":"","tlshash":"2521d8d14b71fc66442cd276d34ac935841200e53009d543a279b02fca5bd5223b06ba","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.268649Z","times_seen":149,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/0/12/img/x4n-Gth_0yqa7BnaqPb3cg/1772056800/687bcca5cb061/699ef7d00100a/0.webp","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/12/img/x4n-Gth_0yqa7BnaqPb3cg/1772056800/687bcca5cb061/699ef7d00100a/0.webp HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13784\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 13:23:49 GMT\r\netag: \"699ef7e5-35d8\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZU9h5qFrtmInDTpqXy8nCYCPiDjzBh0IGHkLKqC3OpI%2FHibbvrqVtWODavgoKC8AsCduqAjCqVK3qQn68x8YFyPGV9jHpT%2F5febCrI9KJ1Bqfe1jxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523d7aa74e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"344bd9b4a14238395b3192fb476f2184","sha1":"1214c772062de1cd088ff036c5b1d47add7e12da","sha256":"0bf5a0afae33da0c8eb322de3ced813ac6916f3428a9cac8485edac7c821fe14","sha512":"20b1fafcc5e5ed269d1252679fc727a494739111d354c490368e32e137a6e9b8ad41ff9a4d92a4b522fd428ed89953ee478daaf666e874105c7f775325eec0cd","ssdeep":"384:QKZHe635LuLMQXetnphECgJDf6xLL9POPFz:QUHeGuo1fhoopQPFz","tlshash":"2e52c06c194d94b96e2761f592a824394ffea2d16ecd9cf53bcd823073e2e32c952604","first_seen":"2026-02-25T21:34:00.751916Z","last_seen":"2026-02-25T21:34:00.751916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026quality=240p\u0026smartpopId=15820\u0026trafficType=bannerIframeOrJS\u0026stripcashR=0\u0026forceClient=1\u0026usePreroll=0\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=5","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026quality=240p\u0026smartpopId=15820\u0026trafficType=bannerIframeOrJS\u0026stripcashR=0\u0026forceClient=1\u0026usePreroll=0\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=5 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d3a523f9ac14c11-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 25 Feb 2026 21:33:21 GMT\r\nage: 7\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8522,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1275c628c1cc4e9afb0f1c8c3b6a5908","sha1":"629e9ea15f1b1964005334bfbb387d68ed5d28e7","sha256":"07a6b32b48da980236d344344803663c479f372d278071f9448e201750f6c17c","sha512":"45d6bfff940a5c10d0e3c2a0c404fcb515d75fb8a199da9af67c65aa04558233ab1b2442d39b511875a32bf1458166c8a056bfb2a8b8b4d18a261dae3b400da7","ssdeep":"192:R3kw8DrtWjqWjxWjTLZaEUDlstWdBWdcWdKBldcjTMltW2WNWw7ZqHA76tWGW9WF:R0wCrtWjqWjxWjvUOtWjWmWdjAtW2WNi","tlshash":"9f0202f35acc493b5f0622d8c5897a0de5672a1be5c9f39883c98e5b46f5cd9210cf22","first_seen":"2026-02-25T21:34:00.752745Z","last_seen":"2026-02-25T21:34:00.752745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772055120/214542252_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772055120/214542252_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17064\r\ncf-ray: 9d3a52406ebdb28a-OSL\r\netag: \"ca3abc0aa9d4279c1ed8ba6f013d9c1d\"\r\nlast-modified: Wed, 25 Feb 2026 21:31:43 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 54\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca3abc0aa9d4279c1ed8ba6f013d9c1d","sha1":"958dae30f5229f6c4be3b7cb6f24600658764674","sha256":"a12cccbf8f078439f1e01b7cdf09a931fbad8407d47cab57ea2a2730144307c2","sha512":"fae71ce00e81a976a1d699642c6b96ded1b5a220e0bcdd88f37f067e7b3539f61ff548035e898d15257f5365d1afc039aa31cde2bccc9f9371fd57f85bb329e4","ssdeep":"384:VagklGzzWRZeqhFj/JJnFWg4FHFMWgLIoH9TUNNxu0bmpJXGWm8mg:JklGziRZeqhF14KdUlkJXG47","tlshash":"2872d18c46d0b4749263664c07930b8f11266edbd09f83c8e6a7e85b5e37bf345d9913","first_seen":"2026-02-25T21:34:00.753523Z","last_seen":"2026-02-25T21:34:00.753523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":61,"dns":10,"connect":4,"send":0,"wait":19,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.176.181.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://sxyprn.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e110771a9bd44e7f6b978a35a5451c44","sha1":"b9e70fd0f0d70aa8ca64093369c6cf08f49c89eb","sha256":"7973abbff90674d95613cd5de75a24a699df9a7e13bc96141a94c34453d4ff0b","sha512":"d7204f94ee9ad91b26a5860c3ee33d426d3ed3ec6b9e0ed4e69f67eec6661a0dfc167839edb171dfefc73de59f94dbf2d46e4529f6697309f3a579e53c8a25ef","ssdeep":"","tlshash":"9f9002014b51440d64c540095503aa0408ca0a57602c4090040163051e094262484223","first_seen":"2026-02-25T21:34:00.718135Z","last_seen":"2026-02-25T21:34:00.718135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/28.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/28.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1585\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqQJweaJ3mY3wrSbKfJBKR3TXiNDZLFtcsTMObvIOviRt2tF3XyskdpWn%2FJrsJEyW7VLP80U0ojtkTRCBkqmliilxqJELr2m\"}]}\r\netag: \"6224696c-631\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 660362\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236393a5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"458a0afaf273cc6268dad98356518412","sha1":"ed49f3c3e4d83c61a11bde6c82fb4f8c199ce769","sha256":"e9098d693ee590443e9eb7b9daf6b374266171ded8a05b001b7a66b9b811e4d5","sha512":"bd3dfa716635cbf94244af99351287a243e2e662aa467e1028cd2088370da743d89f1a0889ee9e917001e49fed462e41667156d1fa74b482f00e9f3957935d5d","ssdeep":"","tlshash":"4131ea9623b53a7499060b6f6a5d8cd81094da28cb5485f3610de431354206f65cee43","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.294892Z","times_seen":79,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b1.trafficdeposit.com/pivi/1/5/vid/WtqrbPGEZUu9R84gtwXn2w/1772056800/5fe8b4a3935ca/699eb4106b631/small.jpg","fqdn":"b1.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/1/5/vid/WtqrbPGEZUu9R84gtwXn2w/1772056800/5fe8b4a3935ca/699eb4106b631/small.jpg HTTP/1.1\r\nHost: b1.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10395\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 08:36:54 GMT\r\netag: \"699eb4a6-289b\"\r\naccept-ranges: bytes\r\nage: 2000\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FG20%2FAUlt07FqzLyP%2BNzuS7XWMDlS7qDvP7lOreAU7XKnJf3EEIWeP9iizBG%2FcxoiKKNLvYPL5xvyTXbZ%2Fe12NyaL%2FMo9UbZ3udy9lleydSlz7TdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523d7a994e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10395,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc61.9.100\", baseline, precision 8, 320x240, components 3","md5":"6e65cb83dc593ad869b594be313f2269","sha1":"9faa20259638b86bb5c0a8a8eefdea9e8cf5d642","sha256":"82bdeab16fcfeab0be8084729b93fea94ff24db4eace78dd6fe076e76ee125db","sha512":"a33f0eeff4023e89209ca98d69aa6b7ae7097575bb9d86a2b64c0aeb1e8e418d757ff24fd98fe4dbe648b1a7fd131d2bb3fd1640822a9bd9e9d81dfeb81882e2","ssdeep":"192:x6CHgYb96vG4rTiNHdCatl+qUE6QbBoRHXt/juHIxAse2iJ6FKo:QNo96vJiNHY6FbKHXVioxAse2iwFB","tlshash":"7322b0073ee0432db2c425729e71c84689b4040be9b5ca8fb35e2e9c4c73e564cd2a9d","first_seen":"2026-02-25T21:34:00.7549Z","last_seen":"2026-02-25T21:34:00.7549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/css/theme.css?38","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /css/theme.css?38 HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 20:06:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"698b8fb4-1caa5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 583450\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlSTK46%2B%2FQcmXR%2BMcqpQbkheaZ%2BqNAf0LDLIoxO4R2Mh1EXiAWf2p9ilUSSe8VsXWdOtITSjjh2GPMefp5DXx2gumBp6kZ5sVHs%3D\"}]}\r\ncf-ray: 9d3a52252bdd2dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117413,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2830)","md5":"20acbb8f08b70f20b7bf7e47dd2c73fb","sha1":"714d6252da2ef5d5863da58ca6c1027df15fddf7","sha256":"cac30f21fa265fe9d8b10c5a37014803eda3e98d138304cd23eed2f8b74f55dc","sha512":"16be4406e192e0fa7b232f3c86109f78f5ee530ad911bddb3531ac5074e2c7601feb8538164cf9031a5fa410fdf98647815acd3708f2ba0c24ef089911ca02cb","ssdeep":"3072:BfptdU+teoL3oh7PqSaMEq/r1dGHqFxP2:BfptdU+teoL3oh7PqSxEq/r1dGHqFxP2","tlshash":"a1b3d49e66731c88b437c00acf26378953292d1fed259dbdfe6161289f8159ca0f3b64","first_seen":"2026-02-25T21:34:00.755792Z","last_seen":"2026-03-11T22:25:19.304266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/lazysizes.min.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /js/lazysizes.min.js HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Mar 2022 11:14:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6225e922-1a63\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 492397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rhu1DEf%2Fi7q4LT8qHxOZrk5Ui%2B9isSw8MLF9lt%2FrVWTHC7N%2F3nDP8w5czNN3vwCxtJnkUFGT4kpp65TlyMEXVc2aazWxO76OOs%3D\"}]}\r\ncf-ray: 9d3a52253bfb2dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6755), with no line terminators","md5":"0508afadd8850af8c32076e83ec5c3a7","sha1":"9f6c7fcb46836b6aa0852205c2dec836d6245333","sha256":"0977fd57728130160687936aeea6f3628f0238e54f3860aaeff9add19e1e77c1","sha512":"90985007cd95e38af0e592e3eef720f89015572450d9df1b85621242dccfe9f9a5d4bdda140d437756b8464d7925f5d5137de2092c2d8350ac101a3dc7557f92","ssdeep":"192:sO+402wu7y72uBX48ppq77UExVKvgGVb8Q4DqHZn2HOklZ6fx:sO+40Qy72uZ07UEPdGVb8Q4DqHZn2ukw","tlshash":"bad1f7deb576b0b7b8576874913f120ea2337423b8468865a9bdd0c01b3cd992233e3d","first_seen":"2023-03-07T01:27:40Z","last_seen":"2026-03-26T01:32:38.04488Z","times_seen":263,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d3a522ebd665fc4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30775,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.176.181.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://sxyprn.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e110771a9bd44e7f6b978a35a5451c44","sha1":"b9e70fd0f0d70aa8ca64093369c6cf08f49c89eb","sha256":"7973abbff90674d95613cd5de75a24a699df9a7e13bc96141a94c34453d4ff0b","sha512":"d7204f94ee9ad91b26a5860c3ee33d426d3ed3ec6b9e0ed4e69f67eec6661a0dfc167839edb171dfefc73de59f94dbf2d46e4529f6697309f3a579e53c8a25ef","ssdeep":"","tlshash":"9f9002014b51440d64c540095503aa0408ca0a57602c4090040163051e094262484223","first_seen":"2026-02-25T21:34:00.718135Z","last_seen":"2026-02-25T21:34:00.718135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"protrafficinspector.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/17.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/17.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1528\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDpLLVHCHIVaYXjVVv9WX48aIcl0yG3rk3TSbBOkuQNp6vt%2FgEZx1XLne%2FEGHJXkYbE9d%2F%2B3mSUHeII5dW2kbA5RFQU3wIJS\"}]}\r\netag: \"6224696c-5f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 402529\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523618f45bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"779f2c87eaf3163319f807e47b47b34a","sha1":"9f5179fa982dd760469d02b5d832eb7f6c32f371","sha256":"b6c4c8421e3893279b86719d6ea3548d0131fac1d94513210c1fc2c05f80094e","sha512":"da97da39290454a82117cb541e4ded5433629b72b18618ce0d71c19f7f916ac51b38bb7e4818633cc882085508e25195fd8a9a61b9db6c8f518b0d54195edcb2","ssdeep":"","tlshash":"773149c0a3963070c0c236b79637e80a3171f94dc6e88318605a83a9b683d608b9be4c","first_seen":"2023-05-21T20:15:25Z","last_seen":"2026-03-11T22:25:19.229246Z","times_seen":98,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/10.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/10.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1836\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcH2%2B1p1Q56GUgvpccfm1rfkY5jaANe%2FLj6L1fmuWm8ppP%2Fv%2BsNy9oWXU3Q000AVkIOI6SIYtOmbIJKRmNddxX9xNxo8Va0B\"}]}\r\netag: \"6224696c-72c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 747402\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236598d5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5c9eada2267eadbcf732f3228cc72f86","sha1":"559798bc2a4601772da56b7c8787a322ff080829","sha256":"14a6a0628d10970dd5af1a48628a607034f81a01eefdf302a00eae31c00c1e09","sha512":"713037d791b86b8b2996793f8c10b21274f5da774759e16907dcadcd94f94260d2f676ffea3ef813260da8a17b70b5b8943bdab305a144ffbfb57e22c508ebe8","ssdeep":"","tlshash":"9b3119eb74b4fcbc6678f3512ba3203015a3e2a6c0e66a6c49b021717090ec569d2529","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.24122Z","times_seen":83,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2.trafficdeposit.com/pivi/0/12/img/qjWHr6NFqJHh_Z_irRlxtg/1772056800/5f3950a938042/699ef68b55c1d/0.webp","fqdn":"b2.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/12/img/qjWHr6NFqJHh_Z_irRlxtg/1772056800/5f3950a938042/699ef68b55c1d/0.webp HTTP/1.1\r\nHost: b2.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7864\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 25 Feb 2026 13:18:14 GMT\r\netag: \"699ef696-1eb8\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYkt9GmKn2nc3HnyHY6HaQmkpmf%2BMbNOFschV1oCapEZseJD7%2BgsLbMT3m9tXRFopiWa84HOnEUDTkVxAL25Te1VMtmdlbA3%2Fn5uJ8Mofuuv2mxFig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3a523d7aa44e46-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x477, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"157b7208d7b82520231944a39f7f4ff8","sha1":"cb10520d79ef8ca74902022f44d1b2b7295a4f6d","sha256":"2d6d7026405bd9a1d5cb872dd8a91636209a51301f3383369555dce9176bd904","sha512":"ce2f7078343fbb282a82d84eafb4fa5937a6180d045ec94306d4d67088c4861dd32b4d3831402ebe770aeecb92e5d902d3e6e7da03282a5039deec97a2d9e751","ssdeep":"192:6iig0WHfkMnohxPGVSjZuU5d9L3NDk4BJigY+XDZEtcFv+:z0Wbo3uVUnd9LdDkqigT+7","tlshash":"cff19ee9a18e1d7746524098076dfaf98c71d193f39e07e35f3677061abac400b48a87","first_seen":"2026-02-25T21:34:00.75981Z","last_seen":"2026-02-25T21:34:00.75981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/e7/1b/13/e71b13312082539e211f40b180b929f1/1680663431.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 02:32:52 GMT","end":"Mon, 06 Apr 2026 02:32:51 GMT"},"fingerprint":{"sha1":"8A:68:C7:51:16:AB:C0:0E:F3:A6:17:12:E1:07:66:95:36:27:86:2F","sha256":"79:02:9B:96:2C:55:77:35:46:DB:5C:3A:D0:CB:0C:13:BA:42:DE:12:27:8F:10:39:52:51:F4:1C:0A:CA:0E:E5"}}},"request":{"raw":"GET /si/e7/1b/13/e71b13312082539e211f40b180b929f1/1680663431.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 70608\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 05 Apr 2023 02:57:19 GMT\r\netag: \"642ce38f-113d0\"\r\nexpires: Fri, 27 Feb 2026 21:33:28 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"61b6bebe0cb42acfc8731bdca04aa71a","sha1":"d396876682997f10b3bf721df1204677e3b5b0be","sha256":"3bebac68fde7ea059ec5422cb3162c3765ff43c7263e9be6e6b324b73ad0e6f2","sha512":"6883904fb678ea57cbedbd3753c93f5e8f73a79b8abf79fefed3ca2ea0d3eb635c9843419cfda66a561addaed6c68d67151ed51270d31ed3e597e67215173e5a","ssdeep":"1536:xK57wBBmhOG4aC7NV3fwtbCj9Q4tsd8aB0oqaoPHmqrfTwHMX:xK1wBgNZaNV34Cj9Q4Sd5aosPd/wsX","tlshash":"0c63010ed38967b86ec02b9fb3097f408b2473acc719c0d768b059b7a346c1961b7d5a","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-04-04T18:45:43.286561Z","times_seen":838,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":112,"dns":68,"connect":19,"send":0,"wait":38,"receive":28,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/44/b1/0b/44b10b6e356d5cc0e4e5fd7b99b474f3.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /44/b1/0b/44b10b6e356d5cc0e4e5fd7b99b474f3.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 40852\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fcded65d306ee229397d4b4d92f1e7c7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":113253,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cacc0bfb132ffbbf4b53ed5e26b2d402","sha1":"f1e5390428951d29b313f1beba4d27aceb89446e","sha256":"2d946abecc831b31d45a86817327be630b3103b18a6c257200c2d73734d9300f","sha512":"af4a16eb723074da6dd2d9b8a4b196d4396e571e24c9f8cf7ded4c897a950a0f044e4a56aa417a116589eb1a79bf9dc3a531bd3139945a2af42d284b0d9f5d77","ssdeep":"1536:B9G5BDb4zi2+kxAnW4CtgjvG+ldwK0IP8HL7OBIfPl+BwQeo7i6zNkvl:B84zi2++4zvVUr70IfP0Br7dzNkN","tlshash":"d6b3f7c83f60f56c2356703b223fa40af0794e41509ce55ce25bf9b82e69b2ad93e754","first_seen":"2026-02-25T21:34:00.761566Z","last_seen":"2026-02-25T21:34:00.761566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":312,"dns":27,"connect":93,"send":0,"wait":101,"receive":94,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2c640e5f9f28944bd00da064b6efa1b0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":61,"dns":1,"connect":17,"send":0,"wait":20,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-hls.doppiocdn.net/checkUrl","fqdn":"edge-hls.doppiocdn.net","domain":"doppiocdn.net","tld":"net"},"ip":{"addr":"65.9.46.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doppiocdn.net","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 Aug 2025 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:A9:8F:EC:5F:02:7A:E5:A0:EA:82:F2:10:8A:B7:16:60:77:BD:F6","sha256":"16:FB:E2:95:2B:C0:93:2B:2A:74:68:85:44:91:D8:83:4C:12:38:3F:76:63:E0:A4:DB:7F:EB:BA:44:9B:BE:B2"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: edge-hls.doppiocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 14\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:10 GMT\r\nx-orig: b-hls-master-03\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, s-maxage=30, no-transform\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 45dd809f59d41e37e5154e0bcf279646.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MXe640tmD_6Qr_nEvc8Ok6B2I0OsUyB_1TiTqZWkQ0-M_s9-wIOjIg==\r\nage: 19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5adb849d1e5031fa27c14f861f6700da","sha1":"a5b1658db04aa9183a780d00838f638c7936446a","sha256":"c45272c1b33373d94fb6786698d5145ba0cb558fc7494d91cbbb380b4fc561a8","sha512":"a374a90a76975de194372e165257859df9ff755a45cdc5468b95d3b9c9d16a19180d5476cbac5f45df52af8972324477cd2895471820f5ff0c35cb77772dea46","ssdeep":"","tlshash":"b360000c0c000000c00033c00f000030300000f0cc0000ccc0c0000000c0c000000003","first_seen":"2023-06-18T17:20:58Z","last_seen":"2026-04-06T07:09:35.29497Z","times_seen":2088,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":131,"dns":85,"connect":9,"send":0,"wait":12,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 12:43:29 GMT\r\nexpires: Wed, 24 Feb 2027 12:43:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 118200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":181,"dns":2,"connect":9,"send":0,"wait":10,"receive":6,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054640/214542252_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054640/214542252_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17980\r\ncf-ray: 9d3a5241aff41243-ARN\r\netag: \"faa8cf6caa8c729d455a4e21d0a9db85\"\r\nlast-modified: Wed, 25 Feb 2026 21:23:12 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 568\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"faa8cf6caa8c729d455a4e21d0a9db85","sha1":"3180db8b23e9088a0d832a8c56a91de216963260","sha256":"f05cc1ef89090f4630ffdc3cc8ab7887777d5ab5e8c44df598637a289a785411","sha512":"f73320f06dc2de9896baabbaf08d23e7cba6afa758e678d2684d805936382c4c6e3d9235dd56bd775f6c48ea47721bc9dfb98a0465d2c1a840e515fa75d6dd1b","ssdeep":"384:N3w3bRdtiQB7fh+wEIFHPGmGa2QLSRD3Bulp3VIfyg9W6eeZ:+3b/MQZfqSHPGmG2LSRDOplIfSFeZ","tlshash":"9382e1e17a80ce6d1c3d75aed3dc24fbe086e756023279472a1344afb669d2dcd70066","first_seen":"2026-02-25T21:34:00.763593Z","last_seen":"2026-02-25T21:34:00.763593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/bn.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 25 Feb 2026 07:55:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699eaaf0-1416c\"\r\nexpires: Wed, 04 Mar 2026 21:33:24 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82284,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fa07e65a55a0bb7c0bda926c228d23ac","sha1":"6b354fa76165fe06ee4788aa1e3de9ad18c33948","sha256":"185b9818915e1373e24d8391e60c5637595c7e8a0b40718ced087cc58f719089","sha512":"616d4018264f496b21c6aed3b205cd01fcdf8a51ebd56b0328eb0a15603edb0b014a1c7474c2d175f49676a74d616d38371392d47bcb6695da53ba226403619a","ssdeep":"1536:QN5OA5b8+Iea+BLbaopPSePDbP5zfgK45liVBgyud+8iTy3:QNwLr+B1FPHZ4hLrvCq","tlshash":"4b83d795ba91b431425790e892bf401da23b3d68a4fd5038b1d2e8de2cbdd8d5223f7d","first_seen":"2026-02-25T10:45:15.842646Z","last_seen":"2026-03-02T00:32:20.436102Z","times_seen":48,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":32,"dns":1,"connect":17,"send":0,"wait":30,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a.adtng.com/get/10013369?time=1649773464795","date":"2026-02-25T21:33:25.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ang-content.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Sep 2025 00:00:00 GMT","end":"Mon, 19 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:85:31:86:5B:3D:BC:C6:72:9A:EF:DB:90:03:59:87:52:43:B0:5A","sha256":"90:34:33:39:E2:D4:23:D7:93:5E:3D:F6:82:61:E0:CE:2B:1D:64:66:59:0E:7F:95:8A:5B:1B:6D:25:4B:8D:D8"}}},"request":{"raw":"GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.19.9.1\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Nov 2018 14:17:11 GMT\r\netag: \"13a3-579af30f7688b\"\r\nexpires: Thu, 24 Apr 2025 01:07:43 GMT\r\ncache-control: max-age=10488628, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nage: 4962108\r\nx-served-by: cache-ams2100110-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 55, 35605\r\nx-timer: S1772055205.279340,VS0,VE0\r\naccess-control-allow-origin: *\r\ncontent-length: 5027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5027), with no line terminators","md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:SyJLyojtnYt2b4PIdQXahVCzS3u7CuEi7rh2dC2+A4coFLULlpUsPK:rmXax3GCri7rpA4TFejC","tlshash":"1ea18301197529364cf82561911f2e6f42a286255a9bbca1c3c2fe44fcf5e53145bff3","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-05T22:01:59.34148Z","times_seen":2319,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":63,"dns":4,"connect":26,"send":0,"wait":27,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.campfirecroutondecorator.com/static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4","fqdn":"www.campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /static/video/bn/edc/d93/c54/edcd93c54016e766fe5a9ef145fd01634c32a0b6.mp4 HTTP/1.1\r\nHost: www.campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 820203\r\nlast-modified: Sun, 15 Feb 2026 18:56:12 GMT\r\netag: \"699216cc-c83eb\"\r\nexpires: Sun, 26 Apr 2026 21:33:28 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-820202/820203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":820203,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a3b98c80c70230b4d4b1a67890d6f719","sha1":"edcd93c54016e766fe5a9ef145fd01634c32a0b6","sha256":"b6341e56208c159ca7c2e043f6fa0b0fdabf6ddcb0ac2df1b5498f5f16691c6b","sha512":"8bf9bf444401291bfc6ff7806672016cfeeac57252ac772c493972726b8ca531bd0c5fd4b244158cbc1fa3d51971bc895247df90199646685cd569c632cac9c7","ssdeep":"12288:aZiuRJdakCucCX8yBO0a2MmscT1SAA+NOGnS:6iHkCyRBOh/pch5AQxS","tlshash":"5f05be6e0d969132ff4cfa3e94a4c457d8e05615c986c71f791c09028bbf29a0bbf879","first_seen":"2026-02-25T11:34:45.748782Z","last_seen":"2026-03-07T11:08:12.422079Z","times_seen":11,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/app/domain-checker/get-check","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncf-ray: 9d3a523ffec2dfec-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/abc.gif?action=sbSignupWithModel\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026stripcashR=0\u0026thumbType=SChatBest\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=5\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fsxyprn.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /abc.gif?action=sbSignupWithModel\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026stripcashR=0\u0026thumbType=SChatBest\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=5\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fsxyprn.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 9d3a5241bd9a4c11-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/a7/creatives/221/1559/824119/1171923/1171923_logo.png","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a.adtng.com/get/10012877?time=1633701610566","date":"2026-02-25T21:33:25.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ang-content.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Sep 2025 00:00:00 GMT","end":"Mon, 19 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:85:31:86:5B:3D:BC:C6:72:9A:EF:DB:90:03:59:87:52:43:B0:5A","sha256":"90:34:33:39:E2:D4:23:D7:93:5E:3D:F6:82:61:E0:CE:2B:1D:64:66:59:0E:7F:95:8A:5B:1B:6D:25:4B:8D:D8"}}},"request":{"raw":"GET /a7/creatives/221/1559/824119/1171923/1171923_logo.png HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Dec 2025 22:01:47 GMT\r\netag: \"4054c-6452779a288c0\"\r\nexpires: Thu, 04 Jun 2026 15:08:45 GMT\r\ncache-control: max-age=10711756, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 984675\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nx-served-by: cache-ams2100127-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 480, 0\r\nx-timer: S1772055205.483864,VS0,VE1\r\naccess-control-allow-origin: *\r\ncontent-length: 263500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":263500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 950 x 250, 8-bit/color RGBA, non-interlaced","md5":"131cd8d70f6f65c503a8af8d70b31709","sha1":"7b0d1b80894398cbda7f4ddb0af88e1ba84c67cf","sha256":"9059c065573c4c8aa76f2ba9edf8b02685d4027222df210ed97fb932eceedd6b","sha512":"f80366c3e125c64865f78a65bc6792a4e0d5efe562c1de30c2ccb4f769fc07aed2b38bfa9e10361ac42c84d43b9ef7776fa017e7617af44abded0747bc091739","ssdeep":"6144:xzWsyPIwLWJldn5K192QvbaoE5bDMb1WrGIluYAxpUch:cLQlJ5AYcaf5XMkGIcY+p3h","tlshash":"8044235b105ba9b40c44f4e1a0efc17a328c02efd5fea61f0565c5a290fe0b2a634f5e","first_seen":"2026-02-25T21:34:00.765012Z","last_seen":"2026-03-10T03:30:35.05787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/check.html","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deputizepacifistwipe.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:43 GMT","end":"Mon, 06 Apr 2026 14:15:42 GMT"},"fingerprint":{"sha1":"61:C3:1A:A3:8F:26:5C:7D:48:B3:9C:81:0B:6B:FC:6C:F4:2D:0E:9B","sha256":"89:6B:30:99:27:13:BC:25:04:38:F1:B3:13:89:73:A6:7F:AF:92:99:EF:AF:00:29:E0:62:8F:67:CE:3D:A8:46"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: deputizepacifistwipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 25 Feb 2026 07:53:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699eaa60-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1986\u0026rd=1986\u0026fd=528\u0026bv=26.2.5027\u0026tmpl=136","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 22:53:11 GMT","end":"Sun, 24 May 2026 22:53:10 GMT"},"fingerprint":{"sha1":"ED:51:C6:32:50:BE:DC:21:A3:AD:D6:A1:DB:98:F0:08:AD:BF:E7:A2","sha256":"56:84:BB:23:CE:A6:AD:BA:2E:8A:D0:F9:92:4F:17:BF:64:9A:7D:1C:AC:77:10:4A:32:94:E4:15:91:57:B1:A8"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1986\u0026rd=1986\u0026fd=528\u0026bv=26.2.5027\u0026tmpl=136 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:26 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":300,"dns":15,"connect":93,"send":0,"wait":108,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/25.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/25.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1760\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8Ewv%2BhHXO0LFKRWT%2BF0%2By1xnzjwVK1M0%2BdcT0Ehl1lKIeaEAYXjOhYciEwSmdHinqslC4QkkPnv51LqwDEbuwws9PomFABi\"}]}\r\netag: \"6224696c-6e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 156168\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5236291f5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1c8b91f044168b0694d3c7b744ae1081","sha1":"72d6f54aa77110d3cdaccbc79a2704a85912e869","sha256":"32a093b097496d0cf8ecff2973bca08fa70a3d707f284eff6c33d56f61915197","sha512":"223f0b829a550d68ea01626caae2e8349a4766da426c22d15d16b6d19301deda6ebf8c43b7a6bbf7b89f41aa7acd0867e5d7b5b780601216541755ce71d1fd00","ssdeep":"","tlshash":"21311d96cac0c67d4717b2ce2901d94b2b1675b55826615f232c392105bc3e6d0f3f76","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.19196Z","times_seen":193,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-65GXH7VZ2F\u0026cx=c\u0026gtm=4e62o0h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-65GXH7VZ2F\u0026cx=c\u0026gtm=4e62o0h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\nexpires: Wed, 25 Feb 2026 21:33:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140391\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"35e205394e53b5f4352fd9a62c2af1e3","sha1":"ec79dd269863c453ffd842cb462fd238948eb635","sha256":"0a5a66a54bf8fc37e5c643adc5bb065eaba4427bc04eb5731df5204d02a05cd0","sha512":"f0472d72e0a88b5184a02c4d2986170b90b149eb5ac97f3d08d26ec38847d1f5213aa764b45ad9b8f7d139d13453afc121a4bc13d565da96dcbea29896c17353","ssdeep":"6144:3mkOidcol7ob7XyIGQf8JlVoe9fHU+O7N8pAbDXqbHvs:3X+ol7ob7igf8oN8IqI","tlshash":"879419cd73da74269396b478503f018ba57b69a2f84cc899f189cce42d7469a4233f7c","first_seen":"2026-02-25T21:34:00.766463Z","last_seen":"2026-02-25T21:34:00.766463Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:39:28 GMT","end":"Mon, 04 May 2026 23:38:03 GMT"},"fingerprint":{"sha1":"DE:44:B7:F9:65:9F:D2:6E:27:46:3E:12:7A:23:24:E9:D7:2B:16:7E","sha256":"E1:09:99:E2:19:59:48:E0:83:95:4C:4F:63:09:68:08:82:8E:16:17:8D:20:09:B6:93:1D:B5:84:B7:46:68:C1"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCzzwLHPyuy8rdjtOGaTx%2B5QOllgC1X5RtN64jm0H%2Bm4HRX8JgTJ%2BLq1wRpaeJ%2FZqh95lsxCpAB54d5cYe8ykPRu%2Bt3B5vaV%2F3BETYLcbQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d3a523c0cda0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-04-06T04:46:05.170127Z","times_seen":2357,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":120,"dns":13,"connect":8,"send":0,"wait":114,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.1.17\u0026zoneid=\u0026e=ClWarning\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fsxyprn.com%2F HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2; UID=26022516332c842207f2a54c6e8598e584ec; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /static/666f9884/s/widgets/v4/Universal/saretarget.1fd1b4780fb0f6ba15d6.js HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.1fd1b4780fb0f6ba15d6.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Feb 2026 09:53:39 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin\r\nage: 1604\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ajd0oZBXeWz4GEJZyIYsI1FAp5fJcNIjVuRu28jqD9QgYh744GFsDrO1qpAldMwD%2FfikDvKpKQLYSHrN%2BJr0XBV1V1Qn5K9uWoMt1S2u9ARtlyVT\"}]}\r\netag: W/\"bef7aca313d9f99ebe956099d5af8580\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a523d18f78687-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8044), with no line terminators","md5":"bef7aca313d9f99ebe956099d5af8580","sha1":"452270357b06bf39c78447fe484419fb864cc2df","sha256":"0e6e4f467ca6dd01ed457a2cf80c8bfbd72f5fb734c32bebb94970fafcf5a3c5","sha512":"667713b37f4bcc293f943bed44b1a1fd6b56992f0c529bb35af577beee7b96de820b984b260af8330b0b5e18f3c1054dbd04363d465c816568f20e217ba3634f","ssdeep":"192:y1sjMoq08NF4KeirOdmpMWysnfUcgczmji4:lQoq08feiV8snfET+4","tlshash":"dff174c97283f6a156e79169903f6203f22d5a25782ee550f653fa807828cdbc172e27","first_seen":"2026-02-16T16:38:19.740574Z","last_seen":"2026-02-26T12:27:09.113495Z","times_seen":56,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/main2.js?94","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /js/main2.js?94 HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 31 Jan 2026 08:12:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"697db967-148be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 575752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UI0B0aB2Pnlx5MjPKp1oYlVpb7Z4GYMtw8y34wczHdya9G83onwgrLkWnWyMU7k2JLw4ZCt8lsyFuBiECSrtWY30FYB5ADZA5Nw%3D\"}]}\r\ncf-ray: 9d3a52253bfe2dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1134), with CRLF line terminators","md5":"a3906ad414085b2c70dfd3b8d5f37609","sha1":"b98323929dbad6944052c6166c3a02d298916c5f","sha256":"1f34943f2f33e25a4f30856349a7510e53b87cd49df65f280636ea7918b9564f","sha512":"e154e5c860e87d915e36345a63ac42df74c5c3fea801cb00b6c385b33cb78fd0f8ae10f329b93fb6c8fbb7e893b2edf3a4648733e9107e643e9fcf8dcccab9a2","ssdeep":"768:hmOL8NI5n1em1GhTPBS1ScStfHE6OUQLyH3XLy24O+O+FlcO0NkMFl3MZfZlm7EX:LcWqtdTTPi2O0NkMQDFZV0b/ErFKY","tlshash":"c383e45876ad262e85f333aa553f0255ce7dd0711406c52cf8bc84c82fe8f49a36ae6d","first_seen":"2026-02-05T04:12:35.365344Z","last_seen":"2026-03-11T22:25:19.217271Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/23.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/23.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1511\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PuRkOV4VlNrNGceDlbkK0z9LZ3nlhvtxe8yzBJxAl6OrsMMNQHiIbsiLEjlVVwr9NirQkBoHAfWaGUWcIxXynALDc97xPq5\"}]}\r\netag: \"6224696c-5e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 760463\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523629195bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fff07b4ccebe15aef6ae6b41e1031d39","sha1":"0122e46fd0801dd5a1e16df595a1f5d5efa96093","sha256":"eb34c0e4a8c1a476d73c51d5d060e10816d86aab3683640191baf857bddaa313","sha512":"a158d9ad59b0309815dce944c45cce1cdf25c888ef4fc558b7c5228f8273e8a261a7af521a32af2148c3144075e59add02b9aee13352eb5d53a03f5e344d7c5e","ssdeep":"","tlshash":"6931298da3e5df9db8903b23a2cc8f54799238a2e021ed85432561a51ed284840f64a4","first_seen":"2023-05-21T20:15:25Z","last_seen":"2026-02-25T21:34:00.769554Z","times_seen":93,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3.trafficdeposit.com/pivi/0/17/img/GgZhgGkopHt8_95Fp-CCOA/1772056800/618afb5ec39a8/699e19af080ec/0.webp","fqdn":"b3.trafficdeposit.com","domain":"trafficdeposit.com","tld":"com"},"ip":{"addr":"172.67.212.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficdeposit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 17:40:31 GMT","end":"Sun, 26 Apr 2026 18:30:40 GMT"},"fingerprint":{"sha1":"96:3A:82:29:9A:32:BE:71:13:3D:59:1D:43:26:45:8E:0D:F1:E4:4E","sha256":"F8:89:01:99:A5:CF:E6:E2:D3:D0:D7:D4:17:29:A1:8C:38:CA:4D:D8:74:F9:CC:26:37:FA:67:77:A1:19:65:F8"}}},"request":{"raw":"GET /pivi/0/17/img/GgZhgGkopHt8_95Fp-CCOA/1772056800/618afb5ec39a8/699e19af080ec/0.webp HTTP/1.1\r\nHost: b3.trafficdeposit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 24 Feb 2026 21:36:37 GMT\r\ncontent-length: 22456\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"699e19e5-57b8\"\r\naccept-ranges: bytes\r\nage: 1999\r\ncache-control: max-age=7200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRzvTR1lb%2FO%2BOGV1NSjAXo6Ib51933Hy6rfm%2F3t6wKxyRnVi%2F%2Fs1eOfb2JE9lJC438xG8rQNnQZ1SEqxW%2B0PD%2BVAEiKzrRv7HsTAPXEi%2BkCYUe6Fjg%3D%3D\"}]}\r\ncf-ray: 9d3a523ad86b9780-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c84b4aaea0c8ed15df5f7fb532a62eb2","sha1":"a49ff4f96315bce7cbaa4ac5795487ab14746861","sha256":"75fed85309dd6a30646f50b75850673cdf107de40059524e2f42992bc6afdb5b","sha512":"d6257a1b70a4481e92feac933b0806c2c56861c30681811dc6237189c88cd9d9722b6b99814c318a43c76a7180eeb7ce72449a2870f1b70c1874a222253b22fc","ssdeep":"384:Lq7gOYczbSUVpgJLXrYrui1GodL24lzgC4rESQ798wLW6luPq:hOYcCUVu6wY24zgC4rMZZLbluPq","tlshash":"16a2f105a672192f48d79de7912e37a7838dd1f0d208b481b100321eaf3f9b53f2498a","first_seen":"2026-02-25T21:34:00.770462Z","last_seen":"2026-02-25T21:34:00.770462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054790/106000135_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054790/106000135_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8928\r\ncf-ray: 9d3a52405e8cb28a-OSL\r\netag: \"dbfd187ed747d274782af46e36793002\"\r\nlast-modified: Wed, 25 Feb 2026 21:25:58 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 401\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbfd187ed747d274782af46e36793002","sha1":"3b4478f682d213d92bc5efa15f39b177daf2f67e","sha256":"05e01bbffb6ead3d843ac488281b399a5f62cbd4fe44b5f7f521a615f2bfe8ce","sha512":"de28f79eec15fcc042ffd478f330fe4d6c9053684903129971c96dbd53ac0ef6d974588c82f909b810f269dc59f19ea72a44ccde0241802e5df8eeedf64213c3","ssdeep":"192:xQ2hIdX7vq0Wyn8x9znNcvLxInKKE9Ahn4zaMod:dIdXzWyJvV6KH964z1u","tlshash":"25029f785f604e30d52a444505a1946b4e6cedda47bf09b82c7e19ec2bc0f2c8ed246e","first_seen":"2026-02-25T21:34:00.771745Z","last_seen":"2026-02-25T21:34:00.771745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":60,"dns":12,"connect":1,"send":0,"wait":20,"receive":2,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026quality=240p\u0026smartpopId=15820\u0026trafficType=bannerIframeOrJS\u0026stripcashR=0\u0026forceClient=1\u0026usePreroll=0\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=5","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026quality=240p\u0026smartpopId=15820\u0026trafficType=bannerIframeOrJS\u0026stripcashR=0\u0026forceClient=1\u0026usePreroll=0\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=5 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d3a52400d124c11-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 25 Feb 2026 21:33:21 GMT\r\nage: 7\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8522,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a395b07ad8df3a2f9cc22f2c2aa59d4e","sha1":"9f23781cc5dcc4f3f5fccdac767181e059445c06","sha256":"03dc46cfaa613df51dda0aa5438a552a8ae725053c0d9ec1bca4f11459c9e0b6","sha512":"19ece9952b3845fbb66c794b7b16c77a0cc15f077a38ce6795ee8ef8d28b0f277ae54d52d296e7404441530af4b74ba0d12d519d55a79ca69fd73488da093bd1","ssdeep":"192:k3kw8DrtWjqWjxWjBLZDPDlstWdBWdcWdiBlkejTMltW2WNWk7Z/FA76tWGW9WR2:k0wCrtWjqWjxWjXOtWjWmW+jAtW2WNWB","tlshash":"2c0201f35acc493b5f0622d885897a0ce9672a1bd5c9f39983c98e5b46f5cd9210cf22","first_seen":"2026-02-25T21:34:00.772702Z","last_seen":"2026-02-25T21:34:00.772702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 12:43:29 GMT\r\nexpires: Wed, 24 Feb 2027 12:43:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 118200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-06T08:39:59.03899Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/1.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/1.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1709\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APm%2Bga6hfBxfL%2BEr8i9cIa382nlTFmlLpG%2FIw8zxwOUerPjNfSLgq6c0EZwJwjFHbDuz1m35XWhmDd4urvTZV%2B0EdDEKd1mD\"}]}\r\netag: \"6224696c-6ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 415080\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235e8a55bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6f85ad3dee0c2fa376443343567199de","sha1":"cafd53f1e7ab17a29740ce77573758a7ffe98458","sha256":"fde74cae158ad327f33bb7d2c61d7c431b786f287869155a38d65cb6b2eac5a4","sha512":"7d778a487ddcfb227cf72757dc2ae1263ca171ad39414ff5d2450c2737a2703c2a6e06482ff461bd1eb3b046597d57fc2e061542ed3b48cec1dc37567fab176a","ssdeep":"","tlshash":"40311d5447202da7cd13b6467b1954fcd63342bf704b54209afc7f1d23e1b4c5151250","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.095818Z","times_seen":206,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/31.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/31.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1832\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzS9mIt%2FR9tR4QBJbFV68gr2p8hcyXKUik8ewoY3cuiKn6ykwc%2FEILauXmB4wZ1gKtZ7X2WtyFig9%2BxEtxcZZDPAOUK4%2FAl8\"}]}\r\netag: \"6224696c-728\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 466554\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523618fa5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8e589eaeb3ff0e9597b484b1e049a276","sha1":"eabc013017b0b3f17b180fe95cc7a0ed13b7ff17","sha256":"f0665cebff5952278759c1a2722a54b05ad9e643c7ff958665c9da646d7c4573","sha512":"82f286d40c173ee36c920babf8af364adb16fc781626d51d5e360cf300306d2dd98d2ed30c27e97adacb425be8d5b41b2dccaec007c7f585c1950394685928a3","ssdeep":"","tlshash":"9531f70a718c09a4d6a050f2a69c9f41e12a0d24f2db033eb3758996139ee8cf083d1a","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.210213Z","times_seen":141,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/32.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/32.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1755\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukJ0DL2ll%2F4FbpqJvKeN7UefCngw8erAKa5M2oMBJYQJm%2BC9XIhwuoSWcGUUrxAcQusqc%2BeKJyYJDvh%2FjgQ9Rhpy2FyqAeIv\"}]}\r\netag: \"6224696c-6db\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 581592\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a523649655bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a183034c1153a6f5229d58d6efae36d4","sha1":"ec4cc61afc9c4c6d8414b61e64596079bf04ef8c","sha256":"321954fa251e86eb675cdc6d5134e3b9f0fc9c3e70288cf9005377216f75cd3d","sha512":"72f176739e9632cc5bdf78b6e291a837a2a48ef4ee06d12d37cb0119906ceb7b734c6bf883f83dd2b1848465fb76bdbaa79b66351f79ac8388e268dbe07ad1f4","ssdeep":"","tlshash":"0f31c97534df9e73dcbe20a7acca9e90f46128f955d70651a041818f4fe2317911c59d","first_seen":"2023-05-14T05:59:14Z","last_seen":"2026-03-10T03:30:35.132409Z","times_seen":112,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/395528?host=sxyprn.com\u0026ev=228\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fsxyprn.com%2F\u0026sid=190f161c-22fc-4415-8a92-424d34c27f85\u0026i=1\u0026kw=porn%2Cgratis%20porno%2Canal%2Cfree%20porn%20videos%2Cvideos%2Cmovies\u0026s1=subid1\u0026fs1=1\u0026url=https%3A%2F%2Fsxyprn.com%2F","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 23:28:40 GMT","end":"Fri, 03 Apr 2026 23:28:39 GMT"},"fingerprint":{"sha1":"85:74:F2:79:0B:02:78:8E:1F:E8:80:75:73:6B:99:06:70:82:4A:1C","sha256":"29:2D:AF:FF:BB:42:24:C4:F8:F2:B4:C4:71:6B:6A:74:80:7D:0F:7C:8C:1D:6F:83:C8:8E:21:72:19:F1:5E:48"}}},"request":{"raw":"GET /api/users/395528?host=sxyprn.com\u0026ev=228\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fsxyprn.com%2F\u0026sid=190f161c-22fc-4415-8a92-424d34c27f85\u0026i=1\u0026kw=porn%2Cgratis%20porno%2Canal%2Cfree%20porn%20videos%2Cvideos%2Cmovies\u0026s1=subid1\u0026fs1=1\u0026url=https%3A%2F%2Fsxyprn.com%2F HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-length: 0\r\nset-cookie: nauid=r13DBTMKrxT8JlOFzxHu; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":15,"dns":1,"connect":27,"send":0,"wait":27,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/ren.gif?sid=H4sIAAAAAAAC_1SSvY_jRBjGx7vbgcSn6JAsdAVIJDt27MTmCnQnDgSCXcQuuoLmxp5xbi4Tj_HYSTY0exxCQjR3HVQ4T3YvEiAE_wHKQnUCse5S3DYI0dEgnUSHko20MMX7Mc8Uv_eZ99NJeUYaKNni3Xf0WCrFtv0mtV-8LlOuh8be2bcd2qSX7esybXuX7dEy5INXnJbXpC_Zb4i4p7dd6lDqUMd-XeYi0aPtlQqZfRs6zZA2Pbfp-B5G-f97U1owzAIfnJGnIXn9xO_JB5DxHGn_-9eE6RU6e_lav1Ss0DkGfPZ-2kv1MEX_okxyC0k6W7-GNjUhX2xAp7P1BNCDo-UEiGRNNp57iCidrTERDY7PSSMFkSLij2E4mEOoOSSbI9Z3IPkpAWKOnV2k_fs7Oh-yg3OVLdWabD36G3JYk62HzyLtf3dVyZG9p1VZSJ0ajJIKcjSH7M6RlScoxhbk8ARx8TEk_5VsP3obaf9o1ygNyReXXBoEjt9pN3zO3YbnO7wR-E6nEXLXDQPqBDQQK4tkMgczmyiNhVJaKBMLZWahzxe2RwMvdlirnYQ87lCPeR4XEQ0Dl1IWxh2U8W1IfhdxfogsP0RP3jvd_xPmZgXDLZiCYMCrY66Ma6r7XJkyctbZXedWNdVFd8KOddEVKQHL7yLn1ZHMPjR3EBeb03Fi-FQvA4uKasoiXk0lLzYm2Rl5amXdX3sRemJh-1SwkLWE7zBfxL7TponX8TodJphotQMHRlaQZgPMWBjLmpD5z8jk6Y0aETuBUSeI5ZNg5fNgwwrsZoVx-rUZHWR52ox1H1xXyIotFAfWRJ2RZ6bv7V_9cYVw5Z8vIeIHr37zwm9_3LjyGeK8QpZXuCV_Iuiq2z_sZoXsyzFbfudewQqxCSZrYn30C2JZk8ffurbarEtvfo44O4TJHpD1gdEEUWZBSQIlLu5ZVMH8p48u6on5BN3cQqSsaaRy6yhSubp3jmnkwvbdqNUOgrZI2jxp8Zbb4qFPReixsO2Fno_C1PKrW7N_AwAA__96foY91wMAAA==","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marshalcurve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 21:50:10 GMT","end":"Mon, 13 Apr 2026 21:50:09 GMT"},"fingerprint":{"sha1":"9A:56:95:77:A1:65:26:5C:D4:EE:6B:51:52:AB:6D:6B:B8:DF:71:6A","sha256":"1E:95:15:15:35:5A:CF:38:C2:A6:83:37:07:B8:E7:78:92:5B:87:4B:D3:08:89:55:89:2E:CD:69:F6:16:93:1A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1SSvY_jRBjGx7vbgcSn6JAsdAVIJDt27MTmCnQnDgSCXcQuuoLmxp5xbi4Tj_HYSTY0exxCQjR3HVQ4T3YvEiAE_wHKQnUCse5S3DYI0dEgnUSHko20MMX7Mc8Uv_eZ99NJeUYaKNni3Xf0WCrFtv0mtV-8LlOuh8be2bcd2qSX7esybXuX7dEy5INXnJbXpC_Zb4i4p7dd6lDqUMd-XeYi0aPtlQqZfRs6zZA2Pbfp-B5G-f97U1owzAIfnJGnIXn9xO_JB5DxHGn_-9eE6RU6e_lav1Ss0DkGfPZ-2kv1MEX_okxyC0k6W7-GNjUhX2xAp7P1BNCDo-UEiGRNNp57iCidrTERDY7PSSMFkSLij2E4mEOoOSSbI9Z3IPkpAWKOnV2k_fs7Oh-yg3OVLdWabD36G3JYk62HzyLtf3dVyZG9p1VZSJ0ajJIKcjSH7M6RlScoxhbk8ARx8TEk_5VsP3obaf9o1ygNyReXXBoEjt9pN3zO3YbnO7wR-E6nEXLXDQPqBDQQK4tkMgczmyiNhVJaKBMLZWahzxe2RwMvdlirnYQ87lCPeR4XEQ0Dl1IWxh2U8W1IfhdxfogsP0RP3jvd_xPmZgXDLZiCYMCrY66Ma6r7XJkyctbZXedWNdVFd8KOddEVKQHL7yLn1ZHMPjR3EBeb03Fi-FQvA4uKasoiXk0lLzYm2Rl5amXdX3sRemJh-1SwkLWE7zBfxL7TponX8TodJphotQMHRlaQZgPMWBjLmpD5z8jk6Y0aETuBUSeI5ZNg5fNgwwrsZoVx-rUZHWR52ox1H1xXyIotFAfWRJ2RZ6bv7V_9cYVw5Z8vIeIHr37zwm9_3LjyGeK8QpZXuCV_Iuiq2z_sZoXsyzFbfudewQqxCSZrYn30C2JZk8ffurbarEtvfo44O4TJHpD1gdEEUWZBSQIlLu5ZVMH8p48u6on5BN3cQqSsaaRy6yhSubp3jmnkwvbdqNUOgrZI2jxp8Zbb4qFPReixsO2Fno_C1PKrW7N_AwAA__96foY91wMAAA== HTTP/1.1\r\nHost: marshalcurve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: uid_id2=20881576-5dd2-451d-8517-9d229801808e:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15618914=1; slec50ea9a3e51a5ec5160f47477aeae3681=[4323737]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: marshalcurve.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 41a334777e274d6a706360afe4bcb963\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1772054430/104224683_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:11:07 GMT","end":"Mon, 27 Apr 2026 19:11:00 GMT"},"fingerprint":{"sha1":"95:87:F7:B2:07:D4:3A:48:BE:90:98:F5:45:15:05:06:8B:B4:39:67","sha256":"CC:75:3E:07:98:4E:4B:15:73:6E:A2:1C:82:05:9B:CA:9D:FC:5D:C8:28:4D:27:9A:A3:DD:2B:25:99:8B:B3:45"}}},"request":{"raw":"GET /thumbs/1772054430/104224683_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6302\r\ncf-ray: 9d3a52406eecb28a-OSL\r\netag: \"6050479efd74abd3dfc6a6f2b4f54559\"\r\nlast-modified: Wed, 25 Feb 2026 21:20:26 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 754\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6050479efd74abd3dfc6a6f2b4f54559","sha1":"da7496e4c01495857a38c620e315839ee2dd0e0b","sha256":"8452f292e6548c48adaea45d476e39a5895748b84a7def79dd91255f604f6c48","sha512":"0c6e66555af9fedaa132cef4a27a4b888e7dab69b9c92413c49cbd35b7024d0edfa619064013c720c12516b6899f5fdc5a26334c3751c7981d9c5e5a188b7bfc","ssdeep":"192:ILVpaQuGx8ayAnmSKcLRMrn18hYjWnbi5iOV99Y:ILDakx8NAnlKmMmhYjWm92","tlshash":"72d19ea4299bd14b853fa03c5691906ca853fa43641a3a9d27c4e15e0f4f05ac2bfa2b","first_seen":"2026-02-25T21:34:00.745116Z","last_seen":"2026-02-25T21:34:00.745116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":67,"dns":11,"connect":4,"send":0,"wait":18,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/src/rta1.svg","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /src/rta1.svg HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 27 Apr 2025 09:10:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZ6WuTdaURYQhru5sH5NxAwSKuYijBjXhFpjEPCdOyxshNVkDmB2ZMV%2BdqZizlkZ%2FH7EFdAxDBTskGkfAQQhpkxoWYS8Bbarg2I%3D\"}]}\r\nage: 582962\r\ncf-cache-status: HIT\r\netag: W/\"680df49e-1fc\"\r\ncontent-encoding: br\r\ncf-ray: 9d3a52254c152dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"450adb58071174842d77bcf60f310b46","sha1":"5e81e07ccf89f9015ae65f0cbeed1f4fe98098a2","sha256":"bc365d7a936cd849a278b0ab358e034f535320476be2a0528eb92651ad23b9f6","sha512":"7240b1ec4c3b0e002691d67ae8cf10dfd71b34b9e535565a8353eb1a68e5ced5a31a79d22f382bf91707eaba1c8a2a24fe27c320cef329b046a33d12c944c334","ssdeep":"","tlshash":"fef00ec16b4869cdc14cdd1b2e23f8818386b4ebeb7402ccd3b7150aa271ad2741c2a0","first_seen":"2025-02-14T09:43:43.130099Z","last_seen":"2026-04-05T21:22:59.902373Z","times_seen":115,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marshalcurve.com/50/ea/9a/50ea9a3e51a5ec5160f47477aeae3681.js","fqdn":"marshalcurve.com","domain":"marshalcurve.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marshalcurve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 21:50:10 GMT","end":"Mon, 13 Apr 2026 21:50:09 GMT"},"fingerprint":{"sha1":"9A:56:95:77:A1:65:26:5C:D4:EE:6B:51:52:AB:6D:6B:B8:DF:71:6A","sha256":"1E:95:15:15:35:5A:CF:38:C2:A6:83:37:07:B8:E7:78:92:5B:87:4B:D3:08:89:55:89:2E:CD:69:F6:16:93:1A"}}},"request":{"raw":"GET /50/ea/9a/50ea9a3e51a5ec5160f47477aeae3681.js HTTP/1.1\r\nHost: marshalcurve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:25 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34690\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: marshalcurve.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3c6b97ba5d973c9a149e38d520b3f409\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d18ea2c8d41dcd0cc6492ec824a41ec","sha1":"7dcb5273d21f12102fab58a372d03c9259d97792","sha256":"40c96df929790a45977390be3a806da146b2782eea9cb3719ac41795c2bebd96","sha512":"e74e138c8b0135896c81c0dbd874a509e0062cc4bf7e3aec6849954101cff0ff25866c0912489e53732c3ea1fc150531cb951065ada8d64782f9b7fef2d9095c","ssdeep":"1536:g5txSqiMKZ1GQDSAiLoHL0cTIgV2BOPsuUd7s/KwR1wwurV4aYLuvGgIo5+phrtz:gD2MKHGQDSAiLoHQcTIgV2BGsuUd7s/p","tlshash":"9793d84c3f82b0d41397707b762f912bf23b5c855868e88de243adac5da9719a337e05","first_seen":"2026-02-25T21:34:00.777233Z","last_seen":"2026-03-11T22:25:19.195534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":269,"dns":26,"connect":92,"send":0,"wait":96,"receive":92,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"marshalcurve.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/a7/creatives/221/1559/824984/1177166/1177166_banner.gif","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"151.101.67.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://a.adtng.com/get/10013369?time=1649773464795","date":"2026-02-25T21:33:25.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ang-content.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Sep 2025 00:00:00 GMT","end":"Mon, 19 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:85:31:86:5B:3D:BC:C6:72:9A:EF:DB:90:03:59:87:52:43:B0:5A","sha256":"90:34:33:39:E2:D4:23:D7:93:5E:3D:F6:82:61:E0:CE:2B:1D:64:66:59:0E:7F:95:8A:5B:1B:6D:25:4B:8D:D8"}}},"request":{"raw":"GET /a7/creatives/221/1559/824984/1177166/1177166_banner.gif HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ncontent-type: image/gif\r\nlast-modified: Mon, 02 Feb 2026 19:53:49 GMT\r\netag: \"75d73-649dcae780d40\"\r\nexpires: Fri, 05 Jun 2026 22:00:25 GMT\r\ncache-control: max-age=10634748, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 524354\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\nx-served-by: cache-ams2100118-AMS, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23, 0\r\nx-timer: S1772055205.279453,VS0,VE1\r\naccess-control-allow-origin: *\r\ncontent-length: 482675\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":482675,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 950 x 250","md5":"a84a667485657337516dc40f2f1b31fe","sha1":"da96bac69caa03ae9b346bd1cd108e2553fab581","sha256":"a4c4c93a49f25e143ae88a905131bc3ea008d6b6a4fb8fa1ec2e0e639b5c1c7b","sha512":"0f8d136afa910a9c1073efa0736196c833d6fefee7c77e8d426295cde3cbca10b99fa62aabe348b4602edaeb1e504e4499538a35335e5bcb4ef9ec9e1e674284","ssdeep":"12288:Arf/995fVIfKs+7FKm2ml1KK0yCEx0T6S:AJnfVfs+RKJmlcICv","tlshash":"6ea423bbc7241d32e614f4a7b8a3edcd2c0425a0a4511f2b81b9f4b972541dbbd41bbe","first_seen":"2026-02-25T21:34:00.778065Z","last_seen":"2026-02-25T21:34:00.778065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":28,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026sourceId=8020834\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026p1=8020834\u0026ax=0\u0026kbLimit=1000","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /smartpop/412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026sourceId=8020834\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026p1=8020834\u0026ax=0\u0026kbLimit=1000 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-length: 0\r\nlocation: https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1\r\ncf-ray: 9d3a5239db5e4e4c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":64,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/app/domain-checker/check-result","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:29.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 240\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":240,"data":"{\"checkId\":75,\"currentDomain\":\"go.xlivrdr.com\",\"requestSignature\":\"1772055208-81676f8164e229e44f684ae7181e29ff\",\"configLoadTimeMs\":178,\"result\":\"success\",\"resultResponse\":\"{\\\"it\\\":\\\"works\\\"}\",\"checkPerformTimeMs\":161,\"resultStatusCode\":200}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 25 Feb 2026 21:33:29 GMT\r\ncf-ray: 9d3a5241fa53dfec-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=20","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=20 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sxyprn.com/js/jq36.js","fqdn":"sxyprn.com","domain":"sxyprn.com","tld":"com"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:24.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sxyprn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 23:18:33 GMT","end":"Wed, 08 Apr 2026 00:17:09 GMT"},"fingerprint":{"sha1":"28:22:C2:0D:5A:7D:F7:A6:2C:E8:6F:8B:63:C3:F7:E7:8F:FE:F0:0F","sha256":"A3:0B:4C:D3:29:50:D6:AE:2F:F5:8A:8B:E0:3B:03:AF:18:83:F9:8F:56:48:ED:BF:55:87:A6:0C:EE:1B:FA:78"}}},"request":{"raw":"GET /js/jq36.js HTTP/1.1\r\nHost: sxyprn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=4mhrc2rqlesd38s5mknlo31pur\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Mar 2022 11:14:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"6225e923-15d43\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 405938\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZeCLn8i7ScVk7R2FEW40LIOs2B4%2BE%2BlZKXg%2FSsQ432EMgayNK3Cj5nk%2FhO0JyHH0HCP8n2CS9oAS7MfV9Y7haSouSfs479fIoQ%3D\"}]}\r\ncf-ray: 9d3a52253bf52dbd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bd2abf70e699a2791d8280473dab7d97","sha1":"638551b5fa3af66063e4b03d031f1819d4325df1","sha256":"22098889a3d150df9706ff90386764f183274d40903f5eee2ec97fef24e2c5b4","sha512":"0d7e2bdddfe4fd0b8265a95a1718c4be7b99d9368a71da1ae04dbe7d6d1df543974d88363c62faa3a22d426584ebb80a19726d0a058074397fa3a17d17a6f4ba","ssdeep":"1536:SjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:SIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"ce9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:32:14Z","last_seen":"2026-04-03T13:07:06.808326Z","times_seen":620,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:25.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 19:42:30 GMT","end":"Mon, 13 Apr 2026 20:42:29 GMT"},"fingerprint":{"sha1":"8B:86:62:5D:DA:6E:E7:85:65:6B:22:08:36:15:D6:DB:74:49:2C:2B","sha256":"6D:A6:50:F6:E9:17:78:60:D1:93:0B:C8:DA:F9:CA:2A:05:CB:D7:92:7D:75:CC:F0:30:1E:F7:E9:C8:4D:03:BB"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 872\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Feb 2026 13:17:25 GMT\r\netag: \"699318e5-368\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 585132\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9d3a522d0ba71806-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2367,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2367), with no line terminators","md5":"0c555b31f3c5ac6e8fac5e9ea971be55","sha1":"0f29568667c9788fb16f187e21083ed68d0144ef","sha256":"0ab0d9f38b39e4747469f444ce0345ad6cff5432d1de399d664c4958736e4e78","sha512":"61b934da6538155bce466614ea0d2ee0c5c68fb8fd89b5d366e68591d17ba5e708360b5074f7bacc416916e9db38506f83a33b55554a2700c9de103431c6469a","ssdeep":"","tlshash":"4341e2ee25a0fda0069a714c712b180af1bc35e0e3ace9c69fba84b47d3d6445151aed","first_seen":"2026-02-16T14:18:21.37662Z","last_seen":"2026-03-23T06:05:48.059911Z","times_seen":304,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832745?id=1832745\u0026pid=__clb-spot_1832745_vzh_2\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /get/1832745?id=1832745\u0026pid=__clb-spot_1832745_vzh_2\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=26022516333b96e39ff435487f9dc3337a8b; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5904), with no line terminators","md5":"34e427495d351ed22c2a52c8ce9df1a1","sha1":"5ce9af57ae0577ff79df24d14b7f38b59006d950","sha256":"4e9c51ea947bec682e193b27ac918504b7089304b2c010072b15bd960ac06cae","sha512":"7369e0d6c95105be16c1a900e2a28dd867ed5dce50b7601dbcfe375210e8eef9c51dc09b9bb4384b1da4aa06aee2e6fa8205dfba962b2574f9c1cf7144b4f206","ssdeep":"96:9emS/V0KtUaaQ/V0KtUaTC/V0KtUae0s/V0KtUaH7Tmo:odjtUaFjtUaOjtUaetjtUab6o","tlshash":"c1c1e95a3c181591e7ec4d1009fa3d7e68ee6cf0aba7c87de69474c831477e122740a7","first_seen":"2026-02-25T21:34:00.780082Z","last_seen":"2026-02-25T21:34:00.780082Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 17:59:07 GMT","end":"Sun, 29 Mar 2026 18:57:26 GMT"},"fingerprint":{"sha1":"D8:90:15:25:BE:A4:0D:51:36:13:98:6A:55:67:E9:89:A0:1F:33:65","sha256":"1A:48:7A:6B:F9:AC:ED:16:93:7B:9E:2F:2A:5B:E9:24:DA:28:AB:03:08:13:63:0A:49:9E:94:69:F6:9F:84:DA"}}},"request":{"raw":"GET /widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPXddbRXW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rq6tJa.N6eNbt9pqdpbqJeJdOKKZdq87bXB9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=8020834\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=8020834\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1 HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sxyprn.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 07:39:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlL0cx4RYr6eRAksrVyKOARLowV378igiHTfgrXwo43PJSjJ30EVpz3Lunq9pC72cVmavXSNklbxr6F2ZFb6FIFDc1rR2tlqAyOj4qDhJ96fkppz\"}]}\r\nexpires: Wed, 25 Feb 2026 21:34:14 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 253\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d3a523c1e6fc6d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"5ed0b88432b807087aa361436bef78b5","sha1":"06ee9750974a0895adf2442b9eccdb8c7b043df6","sha256":"9cbc3a935fa3fde1a9222a4d4c164890ad05388923dfa1d242c2df0f40770d88","sha512":"c010545d0b36ed73d121e9bf0f44dcf7ba20808ae5cf0c541b679074ad0726060a071e5b473024afc456323c155eaa0a9d7db2306a64bab6b053b7bd458ce99b","ssdeep":"","tlshash":"ae21d255d804c40d65709277be513226d40f770eea607fe4ec2148dfd869fc94299947","first_seen":"2026-02-20T18:20:29.239575Z","last_seen":"2026-02-26T12:27:09.152519Z","times_seen":35,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":122,"dns":11,"connect":12,"send":0,"wait":14,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 25 Feb 2026 21:33:28 GMT\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-04-06T08:39:59.041658Z","times_seen":3390,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":81,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW2oDMQy8Si+QRe+V893vFlp6AK83Cf1IGhIoCejwlV0ooR5shDSyZkRAtgHakD6hbZm3pFFwKjAJTagSL69vIRjX2/18OU3t6xiKqC7B4AQec2GZS4i6k1pophyywBJIVoqzWQgEByRIWaRHEwCjm6A5oKBTGMTH+/O4mKAoADdSyLhrCLTwXiGHGwL1X1ZpQru9YsOZm7pxdZ2XaihQZ1uSDo/K4RcTSLrsI+APm05lFKbUlwdipOv1fmoRD8Rh1HqkwxMPW53/QPqHYVbFzZGA0khmsD9mhrkRdxSZfchNwdOxHq6X7yEZh5hBz3EUSYRo9Xiun4fTqPaW2C1rQ27ruu7rrkKrttZlISm4tFyS/gD8xCvV5wEAAA==\u0026cb=e2e_699f6aa5db2531.43671924","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW2oDMQy8Si+QRe+V893vFlp6AK83Cf1IGhIoCejwlV0ooR5shDSyZkRAtgHakD6hbZm3pFFwKjAJTagSL69vIRjX2/18OU3t6xiKqC7B4AQec2GZS4i6k1pophyywBJIVoqzWQgEByRIWaRHEwCjm6A5oKBTGMTH+/O4mKAoADdSyLhrCLTwXiGHGwL1X1ZpQru9YsOZm7pxdZ2XaihQZ1uSDo/K4RcTSLrsI+APm05lFKbUlwdipOv1fmoRD8Rh1HqkwxMPW53/QPqHYVbFzZGA0khmsD9mhrkRdxSZfchNwdOxHq6X7yEZh5hBz3EUSYRo9Xiun4fTqPaW2C1rQ27ruu7rrkKrttZlISm4tFyS/gD8xCvV5wEAAA==\u0026cb=e2e_699f6aa5db2531.43671924 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: __uvt=s%3A32%3A%22a1b8016c9483f56b7c33b2431207e048%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 25 Feb 2026 21:33:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sxyprn.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/22.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/22.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1596\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDtdZEnjQ7T5nKWN4cgPr6DT1VfChwaRnVrxcCvjzqjxdDrlUd9flMrGCFh%2F8LGVU0NEA5n%2B34oVsku52k1HV%2Fg902gp1MnX\"}]}\r\netag: \"6224696c-63c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 660761\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235e8a65bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"02581cd06f8bb795fb082eb9b56f45fa","sha1":"8a0cde5cf97a75c2bc952b3373dfa4454b2d4ad8","sha256":"8b1538be2a9ac31725d925b89a2fa83f426f5640674f80736589b3978f0148e6","sha512":"57cb5fb213ab4137484a1fccd8bfdf2e86f54c29735116800609584f13b2266e4dde1f57bf83d27d7ae8de9785d02bec7c5f66e0b32e43d09e841181dc46d531","ssdeep":"","tlshash":"0f310ace2a23c48ad0f2e4aeaa105d0eb13341e42a8ecc5c09c6c36a5251c1e8ed4995","first_seen":"2023-05-18T23:02:33Z","last_seen":"2026-03-11T22:25:19.316279Z","times_seen":124,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:22:51 GMT","end":"Sun, 24 May 2026 08:22:50 GMT"},"fingerprint":{"sha1":"51:4C:15:FB:47:44:FA:A8:E5:C3:C9:E1:C6:2A:CE:3F:1F:DD:7E:CE","sha256":"58:4D:39:CD:58:CF:09:A4:17:8E:80:49:FF:5C:B0:CF:61:C6:0E:57:8E:8A:0E:13:E5:98:09:4C:93:14:89:13"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0908bf20d882069d8dc1bfdcf3e\"\r\nexpires: Tue, 24 Feb 2026 17:35:54 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3IAAAAAwBuUwKCQH3zAAAAAwBJRPCVwG3fAwAAA\r\nx-77-nzt-ray: 2a494a1555527522cc6a9f69a3753934\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122444,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26affiliateClickId%3DorddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g%26ax%3D0%26campaignId%3D412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67%26campaignType%3Dsmartpop%26creativeId%3D95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba%26iterationId%3D1191989%26kbLimit%3D1000%26masterSmartpopId%3D0%26p1%3D7942992%26quality%3D240p%26ruleId%3D0%26smartpopId%3D15820%26sourceId%3D7942992%26trafficType%3DbannerIframeOrJS%26usePreroll%3D0%26userId%3D1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9%26variationId%3D35145%26webp%3D1","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/widgets/v4/Universal?action=sbSignupWithModel\u0026affiliateClickId=orddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g\u0026ax=0\u0026campaignId=412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67\u0026campaignType=smartpop\u0026creativeId=95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba\u0026iterationId=1191989\u0026kbLimit=1000\u0026masterSmartpopId=0\u0026p1=7942992\u0026quality=240p\u0026ruleId=0\u0026smartpopId=15820\u0026sourceId=7942992\u0026trafficType=bannerIframeOrJS\u0026usePreroll=0\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35145\u0026webp=1","date":"2026-02-25T21:33:28.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26affiliateClickId%3DorddNHdLHTPHNVS4ASOpqttnqrdNPVVLdbZW6V10sqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7anWmffiqbWayjWq2ujO2qzTOuamXOyvR0riqWIgI9Q_umntlVNLPS501bpXSuldK6V0rqarbZ65XSumssnlqqnlqc50rpXSuldK6V0rpXSuldM6V0rix_58lIiPUP7nOcVSxEBHqH90rqJ5ZZbtq5.KaZqa69c5uJta7J7aNqdt93B9g%26ax%3D0%26campaignId%3D412f7a962d9424535d6d4c3935b3543d69cd9cb90ff91897093c0637560cef67%26campaignType%3Dsmartpop%26creativeId%3D95bbcc7ec052f272b908d7273f184c2af04b1262fa56f2b28d707121dda460ba%26iterationId%3D1191989%26kbLimit%3D1000%26masterSmartpopId%3D0%26p1%3D7942992%26quality%3D240p%26ruleId%3D0%26smartpopId%3D15820%26sourceId%3D7942992%26trafficType%3DbannerIframeOrJS%26usePreroll%3D0%26userId%3D1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9%26variationId%3D35145%26webp%3D1 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d3a523dc9a9dfec-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3ea67630e81561c1aeace39ad5070904","sha1":"e6737a120ae31519ca09a1266258d108f67d2bdb","sha256":"7429bc13cf5bf696d8158c36fa1aedb9247eabb4273dfe254c28c8d5bd917ba6","sha512":"1bce47e17c5116183a578e33b0a62d11ef49cdb6fce21a69636a9a20d0807d778b129e6d5df4fbd22b51c2e4eb087c22a9b5b626d91e42db0e722c4fad718852","ssdeep":"192:wDtRpZGl+8mkUE5quNwUw4Hu8nyayqh13/7VlloqJIwm13YVyQ13/7VlloqJIw1:aRUnmkt5FTwvlgQeH","tlshash":"0ff131fb861e24b706c04d5ebf1e78d86a5c40b74e9248efec489435412c3b222b779d","first_seen":"2026-02-25T21:34:00.782075Z","last_seen":"2026-02-25T21:34:00.782075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 25 Feb 2026 21:33:28 GMT\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-04-06T08:28:28.770734Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 25 Feb 2026 21:33:26 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9eb9ae1aa3a066551342ebea4b0d1abb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-06T07:52:28.368921Z","times_seen":13341,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/1832748?id=1832748\u0026pid=__clb-spot_1832748_bsh_1\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:26.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:26 GMT","end":"Mon, 06 Apr 2026 14:16:25 GMT"},"fingerprint":{"sha1":"85:77:E6:5E:D4:BE:49:73:17:56:86:31:7A:75:3C:24:4F:8A:A5:06","sha256":"4B:B7:43:58:9A:29:42:50:60:05:09:AA:C2:67:67:50:9D:79:D4:74:B0:D7:03:C3:71:2B:12:AC:D4:A9:5E:BF"}}},"request":{"raw":"GET /get/1832748?id=1832748\u0026pid=__clb-spot_1832748_bsh_1\u0026jp=_clagvpxayguijizyuvimep\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=I6gan6qaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=960558340055552\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1429\u0026rlp=%5B0%2C16%2C163%2C108%2C5411%2C2083%2C257%2C1938%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\nUID=26022516331063695b49ae49d0ab0577c78a; Path=/; Expires=Wed, 31 Mar 2027 21:33:26 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5904), with no line terminators","md5":"72afe2e2d487024819dc1717b285f47b","sha1":"b417e705d966e794ffc4a5698cb38ef0aac6b117","sha256":"84fd376b2a8ec294011a1c7a5479168520a371bca0a74ab6579d36287ee1e4ed","sha512":"5b1f0899b4049ca438330950aff80773fec1c764fff11012e75302a3a94af71dd3eec4bcd65d9ad489c0b1dbb158d00346deb9ac08dbb1484f361ec7a60887ca","ssdeep":"96:9oV/yRZrv0JS2CXEy/yRZrv0JS2CXEA/yRZrv0JS2CXEV/yRZrv0JS2CXE36spqF:qoZ70JFyoZ70JFAoZ70JFVoZ70JF3rpi","tlshash":"07c1e82651c9e3857ab1bb39a723995c35dd0192ce0580b897fdf30255d361abe48f30","first_seen":"2026-02-25T21:34:00.78354Z","last_seen":"2026-02-25T21:34:00.78354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deputizepacifistwipe.com/solid.gif?z=1941843\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cS4aLVmaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=2086458246989312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1861\u0026rlp=%5B0%2C16%2C163%2C108%2C9688%2C2726%2C275%2C2581%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"deputizepacifistwipe.com","domain":"deputizepacifistwipe.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deputizepacifistwipe.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:43 GMT","end":"Mon, 06 Apr 2026 14:15:42 GMT"},"fingerprint":{"sha1":"61:C3:1A:A3:8F:26:5C:7D:48:B3:9C:81:0B:6B:FC:6C:F4:2D:0E:9B","sha256":"89:6B:30:99:27:13:BC:25:04:38:F1:B3:13:89:73:A6:7F:AF:92:99:EF:AF:00:29:E0:62:8F:67:CE:3D:A8:46"}}},"request":{"raw":"POST /solid.gif?z=1941843\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.17-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=pY3-7bDVIe5O\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cS4aLVmaHR0cHM6Ly9zeHlwcm4uY29tLw\u0026afid=2086458246989312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1861\u0026rlp=%5B0%2C16%2C163%2C108%2C9688%2C2726%2C275%2C2581%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: deputizepacifistwipe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\nUID=2602251633f29fd0ae90ae43c1b6b3ce0bcf; Path=/; Expires=Wed, 31 Mar 2027 21:33:27 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-06T07:31:32.417342Z","times_seen":20522,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yps.link/emoji/24/8.png","fqdn":"yps.link","domain":"yps.link","tld":"link"},"ip":{"addr":"172.67.220.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:27.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yps.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 16:40:53 GMT","end":"Fri, 08 May 2026 17:37:31 GMT"},"fingerprint":{"sha1":"73:C0:92:1A:FD:66:C7:F8:74:FE:34:82:85:17:AB:32:AF:F1:73:92","sha256":"12:3A:0A:6C:AA:80:F1:C0:1B:0C:A9:51:35:A1:F1:AE:17:E7:4A:12:7F:2A:E6:6E:79:EA:D7:B6:D1:59:AF:64"}}},"request":{"raw":"GET /emoji/24/8.png HTTP/1.1\r\nHost: yps.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1800\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Mar 2022 07:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSNi2vUnMa6p%2FbCi%2FPVAKga4XYDNAF%2Fg3Fq373M9NZC4H0pCHqRe7Pb7wbhrTUcUVIdj0Bl2O8cBVRvx7Dg%2Bdp1dxoRgNI10\"}]}\r\netag: \"6224696c-708\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 582877\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d3a5235e8a45bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b1d88c3f812ce0629a5fc8d44bd58652","sha1":"9c53d58de55761e59b481390ed8046b435f801df","sha256":"06915c6aedc4acedb3f40e9489138fd2c7b596be80a21b85d2532566af69aeba","sha512":"289ae4904638dc3a27a25ff6ebd3309f7e7003f46aaa6d620df54f26cb48ee2d440f8e9dfdf1ffb0c88795e38ce8405b1e735ba8dc1b9e844a94929ccf26d02c","ssdeep":"","tlshash":"6431e9365ad05083d988d8450da73d20c8aae1ff17d7c64277c3ce5ba5a9da8047f397","first_seen":"2023-05-13T12:30:55Z","last_seen":"2026-03-11T22:25:19.309669Z","times_seen":186,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sxyprn.com/","date":"2026-02-25T21:33:28.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sxyprn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sxyprn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 21:33:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 1396174\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIumwIYVrDYSZeCJ8xUXYOUvJEbEwyMQ4RsBZkghRIG4vWCLfj%2BqJf7UzMDGS2VPdijij4YZnEgZTiG7Imlz40ZHjPyzF8zLGHSqhJSyYvc%3D\"}]}\r\ncf-ray: 9d3a523d88f743fc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-06T04:46:05.2176Z","times_seen":10545,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":38,"dns":10,"connect":8,"send":0,"wait":16,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}