{"report_id":"4e8a1952-4871-4b3e-a6be-255562c8ca4d","version":6,"status":"done","tags":[],"date":"2026-05-06T23:38:20Z","url":{"schema":"http","addr":"nadopro.xyz","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"title":"Nado Orderbook DEX | Unified Perps \u0026 Spot on Ink","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nadopro.xyz","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T23:38:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"events.framer.com","ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-12-30","domain_rank":206248,"first_seen":"2020-06-15T17:40:12Z","last_seen":"2026-04-30T16:46:48.429956Z","alert_count":0,"request_count":2,"received_data":22526,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-03T22:40:46.979571Z","alert_count":0,"request_count":1,"received_data":845,"sent_data":966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"webtrack.sale","ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-05T23:26:42.853157Z","last_seen":"2026-05-01T13:56:23.423831Z","alert_count":0,"request_count":1,"received_data":929,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-03T22:25:11.554838Z","alert_count":0,"request_count":1,"received_data":477912,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nadopro.xyz","ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-05-06T23:38:24.080864Z","last_seen":"2026-05-06T23:38:24.080864Z","alert_count":0,"request_count":8,"received_data":10333543,"sent_data":3957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-03T22:40:46.955695Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":682,"comment":"","tags":null,"fingerprints":null},{"fqdn":"framerusercontent.com","ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-04-30T06:40:11.209363Z","alert_count":0,"request_count":16,"received_data":2794670,"sent_data":7793,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1EDCMXD1BM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4da73d649f8845bf0248d2c3d70f1394","sha1":"e95aad0b07b7d1808f5ddee08bfc88425140782e","sha256":"bc806a30079aea77b452a7e3806438c401d092e2f7efbfcc4ab29fafec1a0fca","sha512":"4d0ab10eb2ce73b4723dcfbd71a1cd68cb2cba05ee5e3789c724346373846ea674aa871567304b8f01acf71a9a8e3e33908709e7e2d4ace182245634b8870727","ssdeep":"6144:W9Gn61niIJpgY4gnHua4vct+BwZ77u/i418YN9Bja:WLiIJF4gn3qi0Ta","tlshash":"dfa4e7ceb3d674625396f478903f018ba57b29a2b44cc899f189cce42e7465a4237f7c","size":477308,"data":"","first_seen":"2026-05-06T23:38:29.110535Z","last_seen":"2026-05-06T23:40:14.108428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f89d02cf78729e90937e33806032ad9","sha1":"4f2c95c550e88a5ee86c76bcbf0fb48b5995c27f","sha256":"f5877c3a37d034b47b842c5b45dca52f82feacd2c7e7b8163578142d8abee352","sha512":"61262372785d4c0b8a2e6080b7b5d40cf950a8152339105b17294d82db2a49b2f946dea2c230db37e7c9c306e137800ee05c0a225d4efa0e9f402fdd4853a476","ssdeep":"","tlshash":"39e02b2300624031464211797995a314b7e1904b28695f92fe8d5a199fa0e961ae7b0c","size":339,"data":"","first_seen":"2025-12-26T06:10:18.284506Z","last_seen":"2026-05-06T23:40:14.118439Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/framer.CKXVGFYY.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"19aa543d311ca1f990cde9f2ddbe7e7b","sha1":"91ed9286e8b52bc751f73a826b61285a3df52ccb","sha256":"cf12bdfc7f17df8e65fec240a2dffb5fa5e91b1832543155d9a797d71fe28d91","sha512":"093cf49f0b9f96ae0c98f0136229f5de5dca6c054662b6606eb1d443c40c48cdaff86228051f7238c979f1bb58d7e6ae29e35903394e1eb26344d53b4356183c","ssdeep":"6144:y2Rg74n/y/8gYZbIjDOWgIr1xv4xP6mZNhM+:Dg7Myyb4eIa","tlshash":"12a42aa63392b032d7ab417a90ba4005f3392894bc1a4558f2bd94cf2ba55d463f3f7d","size":452167,"data":"","first_seen":"2026-04-30T17:27:54.227006Z","last_seen":"2026-05-06T23:40:14.111039Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d1f9b335011e01fea3d8a02e55837c3","sha1":"8ebbae1f05c9106f6236547caeb849a5a87b23ef","sha256":"6832877c08e4ab95444dcffc4d9a7ee1bf4bb96fb911c0fffb4cb4f82b5da28b","sha512":"4d0048749c0d89aa04febd3a306b32c0a921abe5a81eddbc2b137955ff251f1e4a4f5da84c3421a664d7679478b3287c03019f72e6cda0f882d93db683de545b","ssdeep":"","tlshash":"dcd08c8c295b0cb150bb3b154f3f7200b006612390918d303e0ee3489f30e1bd794a48","size":211,"data":"","first_seen":"2026-04-30T17:27:54.242097Z","last_seen":"2026-05-06T23:40:14.118951Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/react.CwiVgP5F.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"12f8167f0247360429cca3607c2d62d1","sha1":"4e14465bb65f90bd8806ec4f784f843e0f47b6b0","sha256":"aa2cbb1748e5e05e8a5aed640fdb298ee96a51f1ab52d7a871287afa3e7142a9","sha512":"2c401512887d90ef552a184d3510e6ab2cda907d8ab63de380bdf9612afc56f938e2969398e78b8e9e2a059a8f0802b022c2d7b8c8948637349728069887f63e","ssdeep":"3072:l4tK9yhCn42lCoIX71RXGAwDOsXaSpdfgXBx:mb/v1RXGbD9Xbu","tlshash":"b1e309e831aab5626b9356b600af1607b33d18132c4c8870b111fd9e77f644991bbfed","size":144664,"data":"","first_seen":"2026-04-30T17:27:54.232916Z","last_seen":"2026-05-06T23:40:14.106662Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/motion.DrbhovQP.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"495d9573e343807adf28e365131784df","sha1":"fd50d6f95a6cdcbd212c84beb74bb557dc124449","sha256":"915032998a54c52298c89ab8f3d1c197a379904807453cf10dc75d05829f5550","sha512":"fba5289c494021a91fd9a867553cf001892c863672860766e43b7b9b619d962876a0ca7f370ae3b75362f848f41e63c5723182281081093a306beab9e535383d","ssdeep":"1536:rWwzuzeD/8xhIIoZbeuvnvHUJ27bZQhHImfmgDz9Rn3VOh6HOzn5FCOJ9:Cwzu9+ZvvrlKoKXozl9","tlshash":"5fe307e53391b122c3df8266c0af4745b33a18d42809403cb67da9df796190866fbf7a","size":145363,"data":"","first_seen":"2026-04-30T17:27:54.234757Z","last_seen":"2026-05-06T23:40:14.107182Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c78a01c0f8bd597e8a3911d1ff2be3","sha1":"f188b799b982293df6d9ca408d053bdf477060b3","sha256":"2b9645713f8114fbfc74819612156a666fa241cf0c47defcccf777b138d82d14","sha512":"dc5a196d6d560cfe3e4d794dc9cc2765061e4acfcd1f3d5ec9d26de1f48d659948d4a973509136d6e2ddfef57be65a990cb8d95e2db61821a7f03bcc638e07cd","ssdeep":"96:SsaMFaEZskwuld/P6Y/kDVNKc7Bnxl9F2TTMrKd7Lw4rxStg7+Y:Ss5VsRBTtz2v8F4rxStgyY","tlshash":"27c1e8efa41ba17a04df319bb17f40967325c4597176012461fe8b1b66b4e4c10b2f69","size":5871,"data":"","first_seen":"2026-04-30T17:27:54.238417Z","last_seen":"2026-05-06T23:40:14.105947Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc2def72d95c20eb92b6a9043ff644c4","sha1":"69e21e543fac700eb0de5808710f4c7840d742a2","sha256":"7c2c91070f6472353dbf205a6800d8170d2f8c4eb6f6047ee6916bd9c8539c59","sha512":"a2326142ee7385036d3658b46d8a4398f2c50ab00876ba41fdc50cddf68d9a16f9e0d9a37b44f62c3db43da87f8adca206e933c8197cbe1d31e5a28f418e99ea","ssdeep":"","tlshash":"8e41a9aa23f32e328157b86c9e4fec44b765591f480a9d087c0c8885ef49c354bf6b5d","size":2168,"data":"","first_seen":"2025-08-26T19:42:55.091294Z","last_seen":"2026-05-06T23:40:14.119417Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3070e5fb3d7408792a98fb0c998e4049","sha1":"ac68aeb3a6381a93fe9104b8e744b596ee8cff1b","sha256":"5e170fdbc35fd0dcc11585c356caa00556e97c4ae4cd62e99d6a5be469dc4466","sha512":"047aaddb3fce3b446f085fff1c054e3636d0d15df4b0a553520f8ae6d86720d9f5c049d29187873d1f48f9b3cbbee8818b71190aeaa8f957507e4cf4889f1971","ssdeep":"","tlshash":"ee21253926c1107f4ab3b03d86afe98436361ad73805a522374d4450af0ae5d0eff79c","size":1344,"data":"","first_seen":"2026-04-30T17:27:54.245239Z","last_seen":"2026-05-06T23:40:14.119959Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e969b9bb0e10158787005a06c6bce71b","sha1":"beac1eebda58323a61854f9d0dfc5abab20e0719","sha256":"f1435ec7bc9c842dc4486f85d59c301567879aa78bebd1764f1a06456f6c2b6b","sha512":"02fd3436df0607658940f0e3f93656f9cb52f8bcc4a7a49d46a90bb8685d7acc99036382205d57adbbd2ec19b895c499ddc3802d7c51ae9c080006d56618ff8e","ssdeep":"","tlshash":"b0c0c0eb33027768139582c39d0c5142fb0808e559bd90f4f1f9c91a71c00c82181f3f","size":191,"data":"","first_seen":"2026-01-21T04:40:13.30806Z","last_seen":"2026-06-07T07:47:27.081327Z","times_seen":1853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7058f6bf3e97815e3bc99be3c1903feb","sha1":"fdbaed9d4861f910c52eca8cc2be9a35545e9b37","sha256":"9a8ae7e6636f90ce69786f2b9ae0eba21edea6aa5cff8c06c94101e67ac01229","sha512":"4a828edd6bb835ceba21eaf0d7674790552b06f8689e7d262bfd20dc92dfb440d814b4940b14bbcd77822d30a5e5b21b23599bf3075248ea77ebc2979c206f3d","ssdeep":"96:d5/SG400BU4JQRpjgPT00PO4X8xyAFOHDNRJ1BsF1BhC5:74RK4TRW7QHDaC5","tlshash":"03f1df88afb365268a57b176405f88093b36062f8cc56e46354c91b05fb7c3c97f0b8c","size":7881,"data":"","first_seen":"2026-04-30T17:27:54.246098Z","last_seen":"2026-05-06T23:40:14.120575Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.framer.com/script?v=2","fqdn":"events.framer.com","domain":"framer.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4855157c8cb534ae17ce06d9e9f185a6","sha1":"f22abdd9dc377b212643de05cb5930e32b4fdd33","sha256":"704aebb5888cc39c7b1a9089923075bdd324e30f5efbcf0a51f0f81429ba142a","sha512":"629dce57d08df2d7ff02c28957600ff31e14fe6aec71d1198ab25822011e21b4e6c5bcee6f2754a10a96c21ae16957b8231ea1bfb181b3ace816b32b8338ece5","ssdeep":"384:QK5vLv+ZxrqoGC0wS/eWKO64qhBBuxxxIbgpzfBq7bq278vyhOhRcRe1xZauZ+cw:QKpLv+reaS/P2BngpFq7bd8jcR4ZauZq","tlshash":"6e9208f36241313347ff42aba0624302673942e65416406ea63edb8a29719c617fbf7f","size":21233,"data":"","first_seen":"2025-11-17T20:53:42.877771Z","last_seen":"2026-06-07T08:18:10.272419Z","times_seen":6583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea9ea4ad286925a52009d071ab8af1c2","sha1":"ea72ccbf1bd71f74924c9ae1c954b0da6e082410","sha256":"c390a3926570c9fa61dc7cab8ff5944e8f795dc4d0fe12554dbb0745a094ea7b","sha512":"bfbcee04ca6d0ff6c460d6af686152defea745edcbf6113f678e27172471d2da73d65f1f7e7e02bf60925647dec3c1ebdb2ef2b0acf89cb1cd58b0cb1d324cef","ssdeep":"","tlshash":"bed08c0bc038101800b301153b4672433ec2412b1f44bc3038bc80303f2442f46506c6","size":213,"data":"","first_seen":"2026-04-30T17:27:54.247033Z","last_seen":"2026-05-06T23:40:14.121088Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nadopro.xyz/media/keys.mp4","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /media/keys.mp4 HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: video/mp4\r\netag: \"5dc0a3ecc1c8ece45c7b7f792b7aaf91\"\r\nlast-modified: Wed, 06 May 2026 14:41:28 GMT\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4Ud7AOWGmkZLCwXHL3UQ5wRP7Wrlf8GNwdWypczqWjX2zBWcNgGm4tuss7J4TyptHCDWXxKGTIUfiiolzVkW3%2FGB43FO7gMR2rE7EzsXqi%2BTl2WO8%2FDp1L7vfnKjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0c8fe7eb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2765449,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ee2634433a6e01836eb6ffaa3f2dbfc8","sha1":"b44f9ce9003d24eaebe5a42dc0cfe0320e50009c","sha256":"f7a456122b651a4bc58187641e6c36b4fcda4b0932c17983c073cdab3637e09a","sha512":"f3534c785d3c5d2370c778c73ca0afaa0bfd992840d307551bb96e0bc9f22a9c060ef62c0bafa036aa5646382f1a5552bca851938577eb9c6d42b723b440c547","ssdeep":"24576:9ZM7ybu9/27W6efh7MsQGo7eoGIKAWiPvqW5U5YRFW28HsmdAx:9Oyi9R6M7WNxKrWgOW28HsIAx","tlshash":"cc253318f74e40a4d83af6a568d45f6bc989ab4140808d99cb43bfffd901b5e21c7a36","first_seen":"2026-05-06T23:38:29.081883Z","last_seen":"2026-05-06T23:40:14.110527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":900,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1EDCMXD1BM\u0026cid=826877802.1778110676\u0026gtm=45je6551v9231144605za200zd9231144605\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938468~116363097~118463261~118694324\u0026z=1851779333","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:57.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:38:25 GMT","end":"Mon, 13 Jul 2026 08:38:24 GMT"},"fingerprint":{"sha1":"0D:B9:FF:64:5A:39:25:99:2C:9E:D0:B5:BA:0A:46:19:A6:86:44:5C","sha256":"C7:35:A7:4C:D9:72:32:5C:13:D1:DE:84:2E:63:3F:7A:FB:B5:54:6E:A5:72:5E:8F:B9:4C:A7:1B:EC:3A:AA:4C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1EDCMXD1BM\u0026cid=826877802.1778110676\u0026gtm=45je6551v9231144605za200zd9231144605\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938468~116363097~118463261~118694324\u0026z=1851779333 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 06 May 2026 23:37:57 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T08:11:23.858439Z","times_seen":940205,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":154,"dns":8,"connect":17,"send":0,"wait":38,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/framer.CKXVGFYY.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/framer.CKXVGFYY.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"19aa543d311ca1f990cde9f2ddbe7e7b\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"SNgnHdpnw-_GjZ8o3bUiVboxnwMVUgygMvCMd29w-DQlyAC4jbGRCA==\",cdn-downstream-fbl;dur=3\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: SNgnHdpnw-_GjZ8o3bUiVboxnwMVUgygMvCMd29w-DQlyAC4jbGRCA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":452167,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42390)","md5":"19aa543d311ca1f990cde9f2ddbe7e7b","sha1":"91ed9286e8b52bc751f73a826b61285a3df52ccb","sha256":"cf12bdfc7f17df8e65fec240a2dffb5fa5e91b1832543155d9a797d71fe28d91","sha512":"093cf49f0b9f96ae0c98f0136229f5de5dca6c054662b6606eb1d443c40c48cdaff86228051f7238c979f1bb58d7e6ae29e35903394e1eb26344d53b4356183c","ssdeep":"6144:y2Rg74n/y/8gYZbIjDOWgIr1xv4xP6mZNhM+:Dg7Myyb4eIa","tlshash":"12a42aa63392b032d7ab417a90ba4005f3392894bc1a4558f2bd94cf2ba55d463f3f7d","first_seen":"2026-04-30T17:27:54.227006Z","last_seen":"2026-05-06T23:40:14.111039Z","times_seen":5,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T23:37:54.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 23:37:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDget5Y5PzCG9m%2BKyV2vS3U%2F%2FQo9tgs8t11J%2F%2BhmdGI134TwFmhuP3lzSNYlApp4MYI5t4hKi3ymNfTzGKQp44vd46q0%2BNPzzFG4H4TKDT%2FCyn8ct8T50HT2BUO3HA%3D%3D\"}]}\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f7bd0c3de070b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":323851,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (430)","md5":"6c3c95f536b817b4d33a53c24218b712","sha1":"cefeb7ee631151e1d6160b70751fcfdad0684266","sha256":"1e2abefa0730c532f3dcdfdafd10bd98fda519c99d8da4c49cd1406ea503b83c","sha512":"a50b3c9bb6a567e4c9f3c1e17dced0f29f067705164a7c723c3c0557679c2f29045d90da1e707cedb0b6cfb7238c10349c004347772953e5bfcd7aeadd52fd05","ssdeep":"1536:xDTkCGddXc9XcwXceuWoxzCzkF3RNij5l23P:xDT5cgfbuWoxzCV2/","tlshash":"d76472136176e0202cd755bdeb6a620c3a299107ff32c6a532dd039f4fc9ee895527ac","first_seen":"2026-05-06T23:38:29.084513Z","last_seen":"2026-05-06T23:40:14.114846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":62,"dns":43,"connect":1,"send":0,"wait":300,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.framer.com/script?v=2","fqdn":"events.framer.com","domain":"framer.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.framer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 25 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:84:63:04:E8:2A:8D:0B:58:40:BC:87:03:08:7B:6D:3B:F6:9A:E9","sha256":"44:21:6D:9A:27:E5:6E:1C:19:CA:2C:7E:3F:81:67:51:DD:6E:FE:BD:D3:0E:C8:25:D0:AA:E4:C7:E3:CA:E0:3B"}}},"request":{"raw":"GET /script?v=2 HTTP/1.1\r\nHost: events.framer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 7698\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nx-amzn-trace-id: Root=1-69fbd0d3-34cb47fe055ba35b73f2bb50\r\nx-amzn-requestid: d4b8e240-ee1e-46cd-a5a0-40f009eecfb9\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-amzn-remapped-content-length: 21233\r\nx-amz-apigw-id: c92RGH-7oAMEPBw=\r\ncache-control: max-age=300, stale-while-revalidate=2419200, stale-if-error=2419200\r\ntimestamp: Wed, 06 May 2026 23:33:17 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 79cf3ce01a6f4dda5cddf27b94ad6a3a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 1MXTUW-2ix5NKTdz-AXWYLGulqnjnATNTnjRsIlytOVbHylVxJ2HLQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21233,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"4855157c8cb534ae17ce06d9e9f185a6","sha1":"f22abdd9dc377b212643de05cb5930e32b4fdd33","sha256":"704aebb5888cc39c7b1a9089923075bdd324e30f5efbcf0a51f0f81429ba142a","sha512":"629dce57d08df2d7ff02c28957600ff31e14fe6aec71d1198ab25822011e21b4e6c5bcee6f2754a10a96c21ae16957b8231ea1bfb181b3ace816b32b8338ece5","ssdeep":"384:QK5vLv+ZxrqoGC0wS/eWKO64qhBBuxxxIbgpzfBq7bq278vyhOhRcRe1xZauZ+cw:QKpLv+reaS/P2BngpFq7bd8jcR4ZauZq","tlshash":"6e9208f36241313347ff42aba0624302673942e65416406ea63edb8a29719c617fbf7f","first_seen":"2025-11-17T20:53:42.877771Z","last_seen":"2026-06-07T08:18:10.272419Z","times_seen":6583,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":41,"dns":20,"connect":8,"send":0,"wait":345,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/react.CwiVgP5F.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/react.CwiVgP5F.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://framerusercontent.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"12f8167f0247360429cca3607c2d62d1\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -3-Ob52h2swCmuMBo6YGmdmBuIoyTvAXke8CuTZXlpWdR8AAVdD0kA==\r\nage: 27635\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"-3-Ob52h2swCmuMBo6YGmdmBuIoyTvAXke8CuTZXlpWdR8AAVdD0kA==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144664,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28526)","md5":"12f8167f0247360429cca3607c2d62d1","sha1":"4e14465bb65f90bd8806ec4f784f843e0f47b6b0","sha256":"aa2cbb1748e5e05e8a5aed640fdb298ee96a51f1ab52d7a871287afa3e7142a9","sha512":"2c401512887d90ef552a184d3510e6ab2cda907d8ab63de380bdf9612afc56f938e2969398e78b8e9e2a059a8f0802b022c2d7b8c8948637349728069887f63e","ssdeep":"3072:l4tK9yhCn42lCoIX71RXGAwDOsXaSpdfgXBx:mb/v1RXGbD9Xbu","tlshash":"b1e309e831aab5626b9356b600af1607b33d18132c4c8870b111fd9e77f644991bbfed","first_seen":"2026-04-30T17:27:54.232916Z","last_seen":"2026-05-06T23:40:14.106662Z","times_seen":5,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/react.CwiVgP5F.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/react.CwiVgP5F.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"12f8167f0247360429cca3607c2d62d1\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"pfSpRNWcpT0kPXkSyBGy3K-wJjHOqgDIv9kt-Oy3G771mbVeJpnMww==\",cdn-downstream-fbl;dur=2\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: pfSpRNWcpT0kPXkSyBGy3K-wJjHOqgDIv9kt-Oy3G771mbVeJpnMww==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144664,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28526)","md5":"12f8167f0247360429cca3607c2d62d1","sha1":"4e14465bb65f90bd8806ec4f784f843e0f47b6b0","sha256":"aa2cbb1748e5e05e8a5aed640fdb298ee96a51f1ab52d7a871287afa3e7142a9","sha512":"2c401512887d90ef552a184d3510e6ab2cda907d8ab63de380bdf9612afc56f938e2969398e78b8e9e2a059a8f0802b022c2d7b8c8948637349728069887f63e","ssdeep":"3072:l4tK9yhCn42lCoIX71RXGAwDOsXaSpdfgXBx:mb/v1RXGbD9Xbu","tlshash":"b1e309e831aab5626b9356b600af1607b33d18132c4c8870b111fd9e77f644991bbfed","first_seen":"2026-04-30T17:27:54.232916Z","last_seen":"2026-05-06T23:40:14.106662Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/shared-lib.DAPTc5OJ.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/shared-lib.DAPTc5OJ.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"47c27fd7ec9a233a407a21baf10dc98f\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 20\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"Pmr4P8XmvkWYTdrQ_gLWGkNFhoogNhWonKuLZLr6LgW1BJ2I85g7LA==\",cdn-downstream-fbl;dur=25\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: Pmr4P8XmvkWYTdrQ_gLWGkNFhoogNhWonKuLZLr6LgW1BJ2I85g7LA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309606,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"47c27fd7ec9a233a407a21baf10dc98f","sha1":"6e41bfcd282d4af26ede8e3c6d829a085d4febf2","sha256":"6039ff19da7fb4272cf5ad65d561afa9d60e77dd32b97733ae9dedb7d5fbb693","sha512":"ef0e5cfe09046f27b92d52a8bfc3bcd8b4980f54f6c9c5745dfd1ded937a4d91c5f2c92878bee2930ccbd55a6fd01e5401d82d8ad57b9700cd8fca763669d842","ssdeep":"3072:uy2AxUlyJhC4zoB09ykJT1Fk1t3wltmhAOOwwAa/NzPPyQoxb+Z/238UEB:SihNzwoykFc1dwLmhsiaVDydxb+I3g","tlshash":"4964e6e633567023c3ec12a714a90502f37658c99c0a152cba7c68db7da1d5a62fef78","first_seen":"2026-05-06T23:38:29.086711Z","last_seen":"2026-05-06T23:40:14.113842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-1EDCMXD1BM\u0026gtm=45je6551v9231144605za200zd9231144605\u0026_p=1778110674985\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1539303726\u0026_eu=AAAAAGA\u0026cid=826877802.1778110676\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938468~116363097~118463261~118694324\u0026sid=1778110675\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnadopro.xyz%2F\u0026dt=Nado%20Orderbook%20DEX%20%7C%20Unified%20Perps%20%26%20Spot%20on%20Ink\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1296","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:57.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-1EDCMXD1BM\u0026gtm=45je6551v9231144605za200zd9231144605\u0026_p=1778110674985\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1539303726\u0026_eu=AAAAAGA\u0026cid=826877802.1778110676\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938468~116363097~118463261~118694324\u0026sid=1778110675\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnadopro.xyz%2F\u0026dt=Nado%20Orderbook%20DEX%20%7C%20Unified%20Perps%20%26%20Spot%20on%20Ink\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1296 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://nadopro.xyz\r\ndate: Wed, 06 May 2026 23:37:57 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T08:09:46.638045Z","times_seen":16208064,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":61,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/assets/eleven.js","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zS4IX7F4lCyNhauhheUlF60mPyISCxWJqL10rqyziuNzZn98j%2FDI97WH6bt2H5H9zwctKBGsgfgLidh1EXp64ZtJgGCtnRUdIoZrOEz%2BLAeEckfGddEyDcRcqv2%2FEQ%3D%3D\"}]}\r\nlast-modified: Wed, 06 May 2026 14:41:31 GMT\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"e28c89f8964236aec24f22a889ed5efb\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f7bd0c78e53b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7113933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62851808d35a19a388e28322acb50c32","sha1":"9246ecbbf04b8321f24277696e6da8e50e453c3b","sha256":"1dcc048947d4b37eb39849e83a5a99a6e5d5448d0871e1a2f1265c0c2b956ad5","sha512":"d1a55d3b22d1ee3091f90b55fa323ab28cea8348c4f9b8fcfd9dba59bb8174720004b5fd0ae42d72bbd2f648be559898aefbade4ba6478c6d2267bd8c8dddf84","ssdeep":"24576:apfRyhK29Fcq5jIDfgVoOVta8ZIWAcFBra+y:aK4MO","tlshash":"c42507cf27d9b5551212307b3d1a2093e4aecc99b98ccd94f797ac2ef84c72ca1b5624","first_seen":"2026-04-24T15:23:09.416345Z","last_seen":"2026-05-27T01:11:41.354041Z","times_seen":166,"resource_available":false,"data":null}},"time_used":2056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":1537,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://framerusercontent.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 191\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: \"e969b9bb0e10158787005a06c6bce71b\"\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cDUcIRCjPrPf_53fwAg0iXQXT2uCLA2D1ErmMiahrcC7kreiUGoU0Q==\r\nage: 27635\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"cDUcIRCjPrPf_53fwAg0iXQXT2uCLA2D1ErmMiahrcC7kreiUGoU0Q==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"e969b9bb0e10158787005a06c6bce71b","sha1":"beac1eebda58323a61854f9d0dfc5abab20e0719","sha256":"f1435ec7bc9c842dc4486f85d59c301567879aa78bebd1764f1a06456f6c2b6b","sha512":"02fd3436df0607658940f0e3f93656f9cb52f8bcc4a7a49d46a90bb8685d7acc99036382205d57adbbd2ec19b895c499ddc3802d7c51ae9c080006d56618ff8e","ssdeep":"","tlshash":"b0c0c0eb33027768139582c39d0c5142fb0808e559bd90f4f1f9c91a71c00c82181f3f","first_seen":"2026-01-21T04:40:13.30806Z","last_seen":"2026-06-07T07:47:27.081327Z","times_seen":1853,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/7BQHu_eaCqUtY9Z5hDwBTCDMSpg4ENIMT1H2cz734Bk.DsfhbN-N.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/7BQHu_eaCqUtY9Z5hDwBTCDMSpg4ENIMT1H2cz734Bk.DsfhbN-N.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"b430fcf94a10962a5cbd77ad77b3fef8\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 18\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"eQLiTorzEdsfCLqIQdmbqCjH-kTd2ow79biIcKHOnBnz1ICSpUP3Yg==\",cdn-downstream-fbl;dur=23\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: eQLiTorzEdsfCLqIQdmbqCjH-kTd2ow79biIcKHOnBnz1ICSpUP3Yg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":579457,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"b430fcf94a10962a5cbd77ad77b3fef8","sha1":"0182e1cba9f7f3e73167e74bb527dc550943e80c","sha256":"bb3ca7fd3c6ac90baea8e101551784e72d165320a09bbb5892cb673125f9a306","sha512":"c48fbd12c94652f8f3e4773a69fc476b9dac087ecb629087a9f9a04cb46f201b41804dd6f91122aed1550ebb92f1bb2071da3dd452347e0620ad4a114a535613","ssdeep":"6144:cofQ8QRHFonBfWsBYWA1ReOkZpWRux0yV/KD:coAkZU49KD","tlshash":"4dc4e59ae30268b8498e03bdf06ac80da9355117e55d40547adfa15e10aff8c31fefb9","first_seen":"2026-05-06T23:38:29.095694Z","last_seen":"2026-05-06T23:40:14.109988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/DXhTzQFk3.CM7UbKLe.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/DXhTzQFk3.CM7UbKLe.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"8afb6d500e6ee94387e562a55140dc5d\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 20\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"u7T1zrKgV1CM_y0QKxhrPFK9JYEykZMY2pP5KjCGSfF0MltnMpjNyw==\",cdn-downstream-fbl;dur=24\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: u7T1zrKgV1CM_y0QKxhrPFK9JYEykZMY2pP5KjCGSfF0MltnMpjNyw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10888)","md5":"8afb6d500e6ee94387e562a55140dc5d","sha1":"ece9feecde77436954880dd890af263a832e140c","sha256":"c1d83f3f84dc2c52c7d699534a68c5f3818dc62042eb5fb6aca6e065e75a1147","sha512":"7a373817460c3f63a657222fc5b6f078ffff97a336766764bd6afed5ee69430a6c4b48dc0f23dd3cdb28af5a1f4b8a7611918135245f89f87772894a9150e91c","ssdeep":"192:4+ub8xLppnaTaYE/6u3/B933f5jZClQbK6Vx219JwdL:/H1aTaYA6u3/B933f5jZC6gJeL","tlshash":"b5321f6fd118f51849bbe788d0ba62096219c066f6d540fcd88f2b0dd0be4a4b6633bc","first_seen":"2026-05-06T23:38:29.096625Z","last_seen":"2026-05-06T23:40:14.10785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/MCTjpDaPC6iNCUs12hwMqjRS7w.png?width=1063\u0026height=1062","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/MCTjpDaPC6iNCUs12hwMqjRS7w.png?width=1063\u0026height=1062 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Tue, 17 Mar 2026 18:04:57 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-69b997c6-00d90850466553825231deb9;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 68a8ebc2-592f-437e-9369-086f2db09827\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"7e66b8232be24fef4436ffd7e6c2aa26\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qU3pf_1KnTmzNCp11BqckEd3KIbwdvgXHImf_leiC-ngZWtGShvYTA==\r\nage: 4339978\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"qU3pf_1KnTmzNCp11BqckEd3KIbwdvgXHImf_leiC-ngZWtGShvYTA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355888,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7e66b8232be24fef4436ffd7e6c2aa26","sha1":"9597ade2962fcf0a6046c636142cab47ee6daf46","sha256":"c3244636646dd5f3c5760319f1168e68b184f43da0d4832c8921ff194527ef4f","sha512":"d834d429b6be7151de467a204474629d2d3dc16c1fa851fa6992e717f1fb549c8295b172fc964710636df6053ef1b0e223e044509bc5ddd2f054c4e1857531ec","ssdeep":"6144:A00w+UFDJVJAK8JCT4vaK9LrpjY1qEw1GwNpkPcGBYSgCbuyCq3i50drGgF00VCy:A00ajTXK9L1jY1yVNpGcGfgCKyC9INHL","tlshash":"027423e4ece21165853e85a74f48e93ba69175fc61e03c41df19c0cf778be90e41972a","first_seen":"2026-04-30T17:27:54.231127Z","last_seen":"2026-05-06T23:40:14.117462Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":21,"dns":13,"connect":1,"send":0,"wait":4,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/fonts/8mfNQmmwQqovOIxWLI9wzlD77A.woff2","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /fonts/8mfNQmmwQqovOIxWLI9wzlD77A.woff2 HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\netag: \"595096d222ca6b81a3fbeb355d643b1f\"\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9%2BygszBDoW1u78zME4MRxq1FHR1h2l1QZezFC18EMsiRmEaFiz%2B2Xs9WfOwj69igWZAiwX1a88MOMIRDhMt2wmdSeVyYgbSnzg7wUHcFEcPQrrUhEQFjT%2F3lolvwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0c8ae7bb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 41540, version 1.0","md5":"595096d222ca6b81a3fbeb355d643b1f","sha1":"f267cd4269b042aa2f388c56f8b23dc33943efb0","sha256":"42d47f8ff0d777b8de8a4e473e65bbcc1fbf6852a44ab9c76314484584441b0a","sha512":"d966590e7f1e9e018ea5f291b4078bdde1659cb881fba1bb078724054c9411819a02ffa0dd488d6cf8b3b54bb3dd35cd05baf730241369a6b1c06c801963e61f","ssdeep":"768:WmsZmkiUxplMEV8CedxGcL9FlxGyTN6Ch1XuGcpLw7WIFFN+0oLBVXK13pW:WmsZUUxvMEiCeucL9JGyfXuGcq7JFML/","tlshash":"f913022cb84bf66767e8c130da463f57b06c91bf646e2189f80d6460e4a3110e50b77f","first_seen":"2025-10-23T09:28:01.682524Z","last_seen":"2026-05-06T23:40:14.114364Z","times_seen":13,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/fonts/arYBeahdUWxxAw4xCZKphQvSkk.woff2","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /fonts/arYBeahdUWxxAw4xCZKphQvSkk.woff2 HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\netag: \"83684c2eb47101222da285a858e49d6f\"\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOLaPa26xTlm%2BBdLxcJM5g0wy%2FYPv4dNFuzmpihDrwAsQ6aGaDPZaF9%2BQKHRXDtp%2Fr56G0HC5Uo1dI0pla3sZkDGSGA3VSg%2F%2F1CVR8ZjcxBapqMmc3xVcm5%2FLH6Rsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0c8ae7ab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 25344, version 1.0","md5":"83684c2eb47101222da285a858e49d6f","sha1":"6ab60179a85d516c71030e3fc4264aa6142f4a49","sha256":"a669a819bfb22dc0bce391922c4ce598b47696583a1ff241a3866c792f3c4171","sha512":"9e029bab1a1fbbf49d1257d4606cf110674b615ac78f69c2a7adb7b2d2b2612bf1596b291d65a62751baf61d6b8d447bdea5fe78e5205aac8c36cd1da554ced4","ssdeep":"768:V86s0ZErWYNmK+ULV85kp9gPcWK4ulzcTKqpzF:uUErcK+Mgq9CcWT5F","tlshash":"81b2e23a50e7813aea8f3632d3d584ac370759d9443407c2d2a365dec944ea2f70dd9e","first_seen":"2026-03-06T20:11:35.777429Z","last_seen":"2026-05-06T23:40:14.112298Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/framer.CKXVGFYY.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/framer.CKXVGFYY.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://framerusercontent.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"19aa543d311ca1f990cde9f2ddbe7e7b\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: EFrVh-NEAh6tqe_9r3mzxPur45tcFAZybkcFeoqPYlZig_DCkKVRqg==\r\nage: 27635\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"EFrVh-NEAh6tqe_9r3mzxPur45tcFAZybkcFeoqPYlZig_DCkKVRqg==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":452167,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42390)","md5":"19aa543d311ca1f990cde9f2ddbe7e7b","sha1":"91ed9286e8b52bc751f73a826b61285a3df52ccb","sha256":"cf12bdfc7f17df8e65fec240a2dffb5fa5e91b1832543155d9a797d71fe28d91","sha512":"093cf49f0b9f96ae0c98f0136229f5de5dca6c054662b6606eb1d443c40c48cdaff86228051f7238c979f1bb58d7e6ae29e35903394e1eb26344d53b4356183c","ssdeep":"6144:y2Rg74n/y/8gYZbIjDOWgIr1xv4xP6mZNhM+:Dg7Myyb4eIa","tlshash":"12a42aa63392b032d7ab417a90ba4005f3392894bc1a4558f2bd94cf2ba55d463f3f7d","first_seen":"2026-04-30T17:27:54.227006Z","last_seen":"2026-05-06T23:40:14.111039Z","times_seen":5,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/images/wc8pqR5LBbEVWxp1osOZX7NNo.png","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:57.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /images/wc8pqR5LBbEVWxp1osOZX7NNo.png HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nCookie: _ga_1EDCMXD1BM=GS2.1.s1778110675$o1$g0$t1778110675$j60$l0$h1539303726; _ga=GA1.1.826877802.1778110676\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"d3b8ea74733053ddb8d962824ae20b86\"\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\ndate: Wed, 06 May 2026 23:37:57 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3dTKlT8G4djI3bjYkeP5lkFZ4lWVkJKFHumU5KbdPEnrLdfLoFWXFZNsvNdQ6EZNEZ%2Fx%2BKVZIUVL%2BAaPZb4IK09My%2BD1Y3xjF6swKlsmSEx4twEsFA5d%2BnWiMqhJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0d82eefb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2012 x 2012, 8-bit colormap, non-interlaced","md5":"d3b8ea74733053ddb8d962824ae20b86","sha1":"3c92d16720024a8eef0d0c53e0252d09ac9b6fbe","sha256":"701bbd114ac88c95815cfc79a8ef763dfc9210dddec349410f1b445d1aa8c79a","sha512":"feb1a373311407d525d5a62a0373f09f7e869229b7937613be1cb4294f893c25f1440217ec1ddc72ce1c27a63673bff24079f5566e1012e36ee2311b4ca9b25a","ssdeep":"192:afC9U+O3nefnRqY7bq177L3s4C3oMofUgCMQ1werK85p3VTQOvzRV2U7Pk:afC9w3nefnR/q1zLC3oWgcRjp3VM+rk","tlshash":"dd325bcf13371940d50b53b2694baa0878bce6096d26a4fbbdbc545a3fc60181d772aa","first_seen":"2026-03-06T20:11:35.785827Z","last_seen":"2026-05-06T23:40:14.112848Z","times_seen":11,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webtrack.sale/p/62gzAzvto","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 19:52:55 GMT","end":"Sat, 27 Jun 2026 20:50:17 GMT"},"fingerprint":{"sha1":"96:26:37:92:72:27:EC:AD:98:B7:DA:A8:7E:44:8E:44:29:9E:F9:1A","sha256":"61:C0:9B:77:A8:C1:0A:C4:C4:5D:1D:C2:65:8C:38:FE:BC:3A:F8:CE:13:8C:57:0B:41:A1:50:81:38:BA:7E:DE"}}},"request":{"raw":"GET /p/62gzAzvto HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-dns-prefetch-control: on\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSJxTOK4TKpnW%2FPi5hMxbo3ut3sC8U58MlAlp1BmWKZ8BBmwKaP4emDgwkvN6Sk%2Fo6FmgwsPC5lEu9TdMbf6zSNVQO4otDOyMg5a%2FdE8Gzi50B0YuEBfigePwst3%2FIH0\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f7bd0c7c91d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-06-07T07:38:49.75284Z","times_seen":90022,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":139,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/images/6mcf62RlDfRfU61Yg5vb2pefpi4.png","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /images/6mcf62RlDfRfU61Yg5vb2pefpi4.png HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"db6a29faf5b73637ef4772fff25558ee\"\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZ8Wr2e5Sv1dks4XpTtcdewtbeRUD6O91sbYWzBZYqYs%2Fi1w79sy9RKyAk0HZcZXhrfaRWoEm%2FmOMxHIqOlhVchGbDoGCjf%2F22iqaTeBY%2FRdpl5cEPTN6tj0eY2WFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0c7be56b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"db6a29faf5b73637ef4772fff25558ee","sha1":"e1c7b1af4d57aa94dda69b71107e727a0a356ea4","sha256":"f55dfc553c100e6da0ad95258a042b4100f0ff4bb03a5313d1f541984275e262","sha512":"55ce6d388d7c95957d79fa1d98ccc035c173239f239ca010d1d4019a49cac4a49c4bb669543dd9af7183659f3e8cff0cd50259e608635d3aa8339a4a3893d4d1","ssdeep":"768:0SHxyYCqIIzI64PxjRqAQcc9kAMCE/Dwv4GaUg:0SHiYN4pjRqSckAyu4Gah","tlshash":"95f2f2b01fac58ecc336ea2364a9e5c0871a565d9544c9487b0c8ef69f6c68bdc0f379","first_seen":"2025-11-04T11:03:10.775151Z","last_seen":"2026-05-06T23:40:14.109042Z","times_seen":12,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":484,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.framer.com/anonymous","fqdn":"events.framer.com","domain":"framer.com","tld":"com"},"ip":{"addr":"13.249.8.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.framer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 25 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:84:63:04:E8:2A:8D:0B:58:40:BC:87:03:08:7B:6D:3B:F6:9A:E9","sha256":"44:21:6D:9A:27:E5:6E:1C:19:CA:2C:7E:3F:81:67:51:DD:6E:FE:BD:D3:0E:C8:25:D0:AA:E4:C7:E3:CA:E0:3B"}}},"request":{"raw":"POST /anonymous HTTP/1.1\r\nHost: events.framer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 876\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":876,"data":"[{\"source\":\"framer.site\",\"timestamp\":1778110675800,\"sentTimestamp\":1778110675812,\"data\":{\"type\":\"track\",\"uuid\":\"2667e40e-32a0-4f36-f08b-8b42e9c6b979\",\"event\":\"published_site_load_error\",\"message\":\"SyntaxError: JSON.parse: end of data while reading object contents at line 1 column 2 of the JSON data\",\"stack\":\"V@https://framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs:3:221\\n@https://framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs:3:3449\\nt/\u003c@https://framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs:1:49\\n@https://framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs:3:3468\\n\",\"context\":{\"framerSiteId\":\"79b455c8d0ab5d429717025fa2a441a41327369bc5ea51a3d557cfe9486d2c76\",\"visitTimeOrigin\":1778110674441,\"origin\":\"https://nadopro.xyz\",\"pathname\":\"/\",\"search\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 0\r\ndate: Wed, 06 May 2026 23:37:56 GMT\r\nx-amzn-trace-id: Root=1-69fbd0d4-32150d131f9c7bb1307956d0;Parent=1fd1406bafc5a355;Sampled=0;Lineage=1:c457ad49:0\r\nx-amzn-requestid: f766b1ea-cd0b-4f2d-a6af-926df7a63003\r\naccess-control-allow-origin: *\r\nx-amz-apigw-id: c92RMHyUoAMEKQw=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 79cf3ce01a6f4dda5cddf27b94ad6a3a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 3YaMkd6oXYQg5v9wXVIN7keJOkxieTPdwNpwDHrekmQFQ4gaEdvCZA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T08:09:46.638045Z","times_seen":16208064,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":424,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/script_main.CHLW2Kuh.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"e8c78a01c0f8bd597e8a3911d1ff2be3\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: o_J5eTrp7jfbP_Ldv6AncIUoiIrOgC2nNjOlDPlaXqzW59ET4kEEmQ==\r\nage: 27635\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"o_J5eTrp7jfbP_Ldv6AncIUoiIrOgC2nNjOlDPlaXqzW59ET4kEEmQ==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5871,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3495)","md5":"e8c78a01c0f8bd597e8a3911d1ff2be3","sha1":"f188b799b982293df6d9ca408d053bdf477060b3","sha256":"2b9645713f8114fbfc74819612156a666fa241cf0c47defcccf777b138d82d14","sha512":"dc5a196d6d560cfe3e4d794dc9cc2765061e4acfcd1f3d5ec9d26de1f48d659948d4a973509136d6e2ddfef57be65a990cb8d95e2db61821a7f03bcc638e07cd","ssdeep":"96:SsaMFaEZskwuld/P6Y/kDVNKc7Bnxl9F2TTMrKd7Lw4rxStg7+Y:Ss5VsRBTtz2v8F4rxStgyY","tlshash":"27c1e8efa41ba17a04df319bb17f40967325c4597176012461fe8b1b66b4e4c10b2f69","first_seen":"2026-04-30T17:27:54.238417Z","last_seen":"2026-05-06T23:40:14.105947Z","times_seen":5,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":24,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/motion.DrbhovQP.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/motion.DrbhovQP.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://framerusercontent.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"495d9573e343807adf28e365131784df\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 19\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"89vuV8B28F-yahSf2z6MeGwh2HUrtg-vwNd5Jl4-vZMVtSX6dSyTZg==\",cdn-downstream-fbl;dur=24\r\nage: 27635\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: 89vuV8B28F-yahSf2z6MeGwh2HUrtg-vwNd5Jl4-vZMVtSX6dSyTZg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145363,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57322)","md5":"495d9573e343807adf28e365131784df","sha1":"fd50d6f95a6cdcbd212c84beb74bb557dc124449","sha256":"915032998a54c52298c89ab8f3d1c197a379904807453cf10dc75d05829f5550","sha512":"fba5289c494021a91fd9a867553cf001892c863672860766e43b7b9b619d962876a0ca7f370ae3b75362f848f41e63c5723182281081093a306beab9e535383d","ssdeep":"1536:rWwzuzeD/8xhIIoZbeuvnvHUJ27bZQhHImfmgDz9Rn3VOh6HOzn5FCOJ9:Cwzu9+ZvvrlKoKXozl9","tlshash":"5fe307e53391b122c3df8266c0af4745b33a18d42809403cb67da9df796190866fbf7a","first_seen":"2026-04-30T17:27:54.234757Z","last_seen":"2026-05-06T23:40:14.107182Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/augiA20Il.u6_uZecy.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/augiA20Il.u6_uZecy.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 856\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: \"7c0cc1da31445ff77e21cec7558a85da\"\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 20\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"glwUaMkJuy_RA-tphezJUJfBB8NlIiv_dr6Syq_CvRM8jIrd53lh6w==\",cdn-downstream-fbl;dur=65\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: glwUaMkJuy_RA-tphezJUJfBB8NlIiv_dr6Syq_CvRM8jIrd53lh6w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (808)","md5":"7c0cc1da31445ff77e21cec7558a85da","sha1":"88e761007457e93985d384c68f12b26898cba32e","sha256":"a61b7b5ef4e4423b64d1e44eb23c89e72ff096cfb4a81bd8bd2eff1f6942b9bd","sha512":"af82ffbf98401ecfda4fdd93c24e0895f378da69bf8c7459b8eeed7eb47eb2fe12a6ee03a9fec260ae81b634738b87626ecdff6b0e66c111b125e82194e893a9","ssdeep":"","tlshash":"631152c3394dd33a3479c89e90ba155813b6be58b3edc9c70841417b536c3818472ee2","first_seen":"2026-05-06T23:38:29.107666Z","last_seen":"2026-05-06T23:40:14.116885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadopro.xyz/images/wc8pqR5LBbEVWxp1osOZX7NNo.png","fqdn":"nadopro.xyz","domain":"nadopro.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:57.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadopro.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 14:09:11 GMT","end":"Tue, 04 Aug 2026 14:09:10 GMT"},"fingerprint":{"sha1":"71:D6:84:2E:A0:04:0F:79:58:60:DD:42:C7:51:EF:F4:1F:29:5F:74","sha256":"C0:DA:A3:5B:93:0A:5F:8D:AF:22:9E:2D:FD:ED:22:7B:45:4D:EC:65:F4:6D:7E:5E:D1:52:9A:8B:C6:7D:9C:20"}}},"request":{"raw":"GET /images/wc8pqR5LBbEVWxp1osOZX7NNo.png HTTP/1.1\r\nHost: nadopro.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nCookie: _ga_1EDCMXD1BM=GS2.1.s1778110675$o1$g0$t1778110675$j60$l0$h1539303726; _ga=GA1.1.826877802.1778110676\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"d3b8ea74733053ddb8d962824ae20b86\"\r\nlast-modified: Wed, 06 May 2026 14:41:27 GMT\r\ndate: Wed, 06 May 2026 23:37:57 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5l7hGZQTphGkFKgwANednRNxlR0RYDgdPanRU3Taxvsw94QUlzGQzxwKusEX5W1%2FBO4uygH%2FIafxU7CqEQ%2BAWuLIdjH4S46R1PIQWKhQYKJV7AYweGvZ70FhOnBUEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7bd0d82eeeb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2012 x 2012, 8-bit colormap, non-interlaced","md5":"d3b8ea74733053ddb8d962824ae20b86","sha1":"3c92d16720024a8eef0d0c53e0252d09ac9b6fbe","sha256":"701bbd114ac88c95815cfc79a8ef763dfc9210dddec349410f1b445d1aa8c79a","sha512":"feb1a373311407d525d5a62a0373f09f7e869229b7937613be1cb4294f893c25f1440217ec1ddc72ce1c27a63673bff24079f5566e1012e36ee2311b4ca9b25a","ssdeep":"192:afC9U+O3nefnRqY7bq177L3s4C3oMofUgCMQ1werK85p3VTQOvzRV2U7Pk:afC9w3nefnR/q1zLC3oWgcRjp3VM+rk","tlshash":"dd325bcf13371940d50b53b2694baa0878bce6096d26a4fbbdbc545a3fc60181d772aa","first_seen":"2026-03-06T20:11:35.785827Z","last_seen":"2026-05-06T23:40:14.112848Z","times_seen":11,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/motion.DrbhovQP.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/motion.DrbhovQP.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"495d9573e343807adf28e365131784df\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"iCXH8cN_9nyrWMdxoCwJVlPUlwBf46nG1u3gIpX262l_MkhEeBgYSA==\",cdn-downstream-fbl;dur=2\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: iCXH8cN_9nyrWMdxoCwJVlPUlwBf46nG1u3gIpX262l_MkhEeBgYSA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145363,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57322)","md5":"495d9573e343807adf28e365131784df","sha1":"fd50d6f95a6cdcbd212c84beb74bb557dc124449","sha256":"915032998a54c52298c89ab8f3d1c197a379904807453cf10dc75d05829f5550","sha512":"fba5289c494021a91fd9a867553cf001892c863672860766e43b7b9b619d962876a0ca7f370ae3b75362f848f41e63c5723182281081093a306beab9e535383d","ssdeep":"1536:rWwzuzeD/8xhIIoZbeuvnvHUJ27bZQhHImfmgDz9Rn3VOh6HOzn5FCOJ9:Cwzu9+ZvvrlKoKXozl9","tlshash":"5fe307e53391b122c3df8266c0af4745b33a18d42809403cb67da9df796190866fbf7a","first_seen":"2026-04-30T17:27:54.234757Z","last_seen":"2026-05-06T23:40:14.107182Z","times_seen":5,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/Huk6mhS3i.CNk3qo6u.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/Huk6mhS3i.CNk3qo6u.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"fe6967545e9705149acb8cec08342fff\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 20\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"EVT7vjuNQ9Mz22cL0k9ngC6s_nZibOMJ9q4xjJbypaI9c4v4WWF4vA==\",cdn-downstream-fbl;dur=24\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: EVT7vjuNQ9Mz22cL0k9ngC6s_nZibOMJ9q4xjJbypaI9c4v4WWF4vA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21756,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12136)","md5":"fe6967545e9705149acb8cec08342fff","sha1":"52b9be89c2c473e637378b4dd77058a2a2febd2d","sha256":"1a7bb45a1611121eeb0e91516918ea7548162da813bd5728780b128feee8ddfc","sha512":"3f4cacaa823fc743452d9dbbe0a584c5d23f7d6942bca5f55752eb08ecc4c95e4db45de3d3fdf22a9c3259e965011f6543adc6d6166b0b1a55bd7aa821f33932","ssdeep":"384:Pjn59TjVYYkYibm9Fge2Z6bJCQ8bz+MHn+X8l9bfQE3Gdjt:P3TRuQge2Z61CQQCYvXIFdjt","tlshash":"b3a2d61b622475b466efd28de02a4305733ed1a0e755006cf86c6ede91ac9b072b27fd","first_seen":"2026-05-06T23:38:29.10846Z","last_seen":"2026-05-06T23:40:14.113316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/sTk0ANN2h.EYHKazjN.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/sTk0ANN2h.EYHKazjN.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: W/\"ff4ce81a18d7bde9383a922ba3307581\"\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"REC\",cdn-rid;desc=\"trMD4HhQgVDrQdY_fEJB6XK9u8Xc3cU6MULtQwBmTObd5NfkXlHaqg==\",cdn-downstream-fbl;dur=23\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: trMD4HhQgVDrQdY_fEJB6XK9u8Xc3cU6MULtQwBmTObd5NfkXlHaqg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7585,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7537)","md5":"ff4ce81a18d7bde9383a922ba3307581","sha1":"f638da47034676ab570c0593a1b5e53a47d53537","sha256":"d4ba54f401477463dc2bf1670f084711f449db15aa56a22fe36ac2ef430d340f","sha512":"5d691cdc215a1eae0137b92816c0c15f9839507b2f41b29923437992731c4150f31fa334a5c84465ad3c81da33c8e6e13f91de46c91d9e6b1c13701c97b0c4a2","ssdeep":"192:5uby/ymudAzmFbsOceXUgubXmrhQckeCGd8v8DvzA/:N/GdAzmFechDkeCGdtrA/","tlshash":"67f1b81b6230f17c9dfba18de068511a6415c028fb79849895ee5a0f82bc5cc78977ff","first_seen":"2026-05-06T23:38:29.109438Z","last_seen":"2026-05-06T23:40:14.111758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:58.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /sites/6sKC01WBGFkjCmDasQ3665/rolldown-runtime.Bog7j6PM.mjs HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nadopro.xyz/\r\nOrigin: https://nadopro.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 191\r\ntiming-allow-origin: *\r\ndate: Wed, 06 May 2026 15:57:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 0\r\nlast-modified: Tue, 31 Mar 2026 14:32:11 GMT\r\netag: \"e969b9bb0e10158787005a06c6bce71b\"\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-edge-internal-latency-nonoverhead: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"S_HF57TQqJAUUfRZMFgE5AGTqVG2vOm8o47LSM_-GE9ofZOq69Ky8A==\",cdn-downstream-fbl;dur=2\r\nage: 27638\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: S_HF57TQqJAUUfRZMFgE5AGTqVG2vOm8o47LSM_-GE9ofZOq69Ky8A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"e969b9bb0e10158787005a06c6bce71b","sha1":"beac1eebda58323a61854f9d0dfc5abab20e0719","sha256":"f1435ec7bc9c842dc4486f85d59c301567879aa78bebd1764f1a06456f6c2b6b","sha512":"02fd3436df0607658940f0e3f93656f9cb52f8bcc4a7a49d46a90bb8685d7acc99036382205d57adbbd2ec19b895c499ddc3802d7c51ae9c080006d56618ff8e","ssdeep":"","tlshash":"b0c0c0eb33027768139582c39d0c5142fb0808e559bd90f4f1f9c91a71c00c82181f3f","first_seen":"2026-01-21T04:40:13.30806Z","last_seen":"2026-06-07T07:47:27.081327Z","times_seen":1853,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1EDCMXD1BM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadopro.xyz/","date":"2026-05-06T23:37:55.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=G-1EDCMXD1BM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadopro.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 06 May 2026 23:37:55 GMT\r\nexpires: Wed, 06 May 2026 23:37:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157306\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"4da73d649f8845bf0248d2c3d70f1394","sha1":"e95aad0b07b7d1808f5ddee08bfc88425140782e","sha256":"bc806a30079aea77b452a7e3806438c401d092e2f7efbfcc4ab29fafec1a0fca","sha512":"4d0ab10eb2ce73b4723dcfbd71a1cd68cb2cba05ee5e3789c724346373846ea674aa871567304b8f01acf71a9a8e3e33908709e7e2d4ace182245634b8870727","ssdeep":"6144:W9Gn61niIJpgY4gnHua4vct+BwZ77u/i418YN9Bja:WLiIJF4gn3qi0Ta","tlshash":"dfa4e7ceb3d674625396f478903f018ba57b29a2b44cc899f189cce42e7465a4237f7c","first_seen":"2026-05-06T23:38:29.110535Z","last_seen":"2026-05-06T23:40:14.108428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":216,"dns":1,"connect":20,"send":0,"wait":42,"receive":65,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
