{"report_id":"4ed28728-169a-47a4-b4a2-4a195e90a179","version":6,"status":"done","tags":[],"date":"2025-09-20T19:57:54Z","url":{"schema":"http","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"104.21.17.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"title":"Rakow vs. Legia - Transmissão Ao Vivo"},"submit":{"url":{"schema":"http","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"104.21.17.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T19:57:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adstrim.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":313,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":8267,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"t.dtscout.com","ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":54823,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2806,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p.playnow.wtf","ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":8178,"sent_data":1810,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":6824,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":1036,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4915,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":90137,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zorroplay.xyz","ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3904799,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":128261,"sent_data":1390,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adstrim.live","ip":{"addr":"172.67.214.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":25072,"sent_data":1875,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":24943,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":3457,"sent_data":2108,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"moy.auraodin.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"x7i0.com","ip":{"addr":"139.45.195.12","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":110746,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"strumyk.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2064353,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":21,"received_data":2642165,"sent_data":12338,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"waust.at","ip":{"addr":"172.67.71.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":12843,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":1128668,"sent_data":2689,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8aaec0b4af88b029c6493ed500ba326","sha1":"8e87cc0645094eeeb09ef4dd605420d12dced5fd","sha256":"1f90df7bfabf881445a607d44762682d60b52eb79d517051dd607e64dc32bca2","sha512":"1304febba000ae8990048eff123c37ccaa91bf188db8092ce99b5b7ae060c335d689a57247840a591aa6b7e5509b08bdf5a1c1f69f1918d9926fb815783cc751","ssdeep":"","tlshash":"b7d023651976853075e803471075d7a5256425707711b7c092fecc1b6f11dd344b155c","size":217,"data":"","first_seen":"2025-09-20T19:58:28.219558Z","last_seen":"2025-09-20T19:58:28.219558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e1e753f543ab69894b98c449e10234d","sha1":"8ed53684f57e4c1e60ef3de40bf48d9e692fd3f1","sha256":"1a0a20c8c7ace362f60bd79417d8bd1d5ab34fecd8bd335e7aa1bd3952d84db9","sha512":"bcdd0e9111e3af80d5e721159c07d37ebde864c1e7a0753e15ddc8794a0793f9ec670078145d718e20392918460e494a5925222e4f45d5082f682fa2ced2ebe3","ssdeep":"","tlshash":"b89002d94005d01011a201436722774a682106891046100282290001300270b8611597","size":46,"data":"","first_seen":"2023-07-23T19:35:27Z","last_seen":"2026-04-09T22:38:46.577483Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-11T12:56:47.653722Z","times_seen":210357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/embed/796","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-04-11T13:22:19.536196Z","times_seen":3113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-04-11T13:22:19.536196Z","times_seen":3113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87c725e214683adf9b74663ff14946ab","sha1":"ccbe1b6c564d65ad51f1488627d8ea8d1e97e131","sha256":"93e773869f7f7e03ab47466b60c2b9113b1da6b969d5963c03678e5a4c0e0807","sha512":"1e58750aa931cbda42301559e3502f01877a49aa3dd6384fc9146e4ea9e24bc11fa94db7a17ddb522aa2b4ccdf51c65f21329abb1c5cd8edc69bc22fb90f980c","ssdeep":"","tlshash":"fe1121ad306572be1ba315e4a137974bf271117c605c04324b5dc8f5ac75caf8623ac8","size":1000,"data":"","first_seen":"2023-05-26T08:35:46Z","last_seen":"2026-04-11T06:55:21.869124Z","times_seen":5323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/main-KyJ_MAIM.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2742654260c1583ca71db87c091c9abd","sha1":"f2a44b6165d3d84f071b485c672243aa8c272e48","sha256":"b96bd62d2109b62ac5b642b53057e3a0367e6380a1c93c962329d0e35f5f8bc1","sha512":"bc7d2e8ce0a93307f61d51bc612d7e953adf98b29700a3667b208a7a76943ae52efc2d054635db49da872b16baf0b4800007501879b33e1784207d2f15c2610c","ssdeep":"384:0f8zWvcsIDTNjCyyN7gOsHq6Z0CvXZFQ5MPE7YPx5uxOrAq1oIeJuB:s8qUrTNjByVsHq6ZtX8YAax5uIbte8B","tlshash":"0a035c5b0e589d3809a207f02f6ed777659cc131b0dbc3e5a3aed3182235566aee631c","size":38466,"data":"","first_seen":"2025-09-20T19:58:28.207634Z","last_seen":"2025-10-02T17:04:46.061196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be2d0eed5eded93d8440b1dae0f30960","sha1":"36e7177a4932c42e56d3e3f7b0580e4c88df96d5","sha256":"8368de6b02128e66831895a77f280482d7ed841a61c42d2304966f12a4efd46d","sha512":"185f6d9ce439ce4ddf557c13303790f74031c221e1578c98aee9a8b10e5ee6cca66c207b04686510faa128ccf19ea5f3c71d3494157709f5a7e984079c6c1ad7","ssdeep":"","tlshash":"8b110209b920b49661ab53fe811f000fb33098b7d89d58e057244cf59ef10ad05d7f0d","size":1000,"data":"","first_seen":"2025-08-02T17:09:38.072547Z","last_seen":"2026-04-10T16:55:30.109045Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.playnow.wtf/js/script.outbound-links.js","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"babccb83ba0cd1075ea3838f25a335c2","sha1":"3784528273ab18973d12293a349f9e701e326102","sha256":"cd8a3383086f55f72f2488d2bd6fe81c8538bac434d5095a36d32c07d89708ba","sha512":"1877f36dc4bdf39f91666c42f834e1f27b0e53060b702d469498aec6b42e18774b43d2f352c0f66f321ba248164e35a49774a9e221231ce11046056ceb150564","ssdeep":"","tlshash":"086194aa7e00f57854b9d237626f3317723b3563691884010528cdc03d28faba3b6ecd","size":3356,"data":"","first_seen":"2025-04-11T16:09:27.707192Z","last_seen":"2026-03-28T22:51:09.442438Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05cc20651118c2b15772a4d8330c1fce","sha1":"ccdd7b1ad7126d904f88512e5f4887774d11fbad","sha256":"b827299a53e58ed33aab9182054b103c1fdf8e7c82ba8a250c139dcae97d9aec","sha512":"ac03053a4e2b3edca6f5a87c734dca89a39c6b98a3fdead5e12da8231834174bad5719dcd1452df5bdd1a2858b02cdfc86b2f2829feb7ad7256046d7f6a1fcc8","ssdeep":"","tlshash":"97d023651c75893071d801471075d7a926642560772572c081dfcc1b6f11ed354f155c","size":217,"data":"","first_seen":"2025-09-20T19:58:28.22332Z","last_seen":"2025-09-20T19:58:28.22332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f33e62db902b4c5eafb0dfe150ca48a2","sha1":"f1edc071064e4e15de99687b9b96888a7148d275","sha256":"80e2a23afe17c3e4ad685806df80e16ac5a51dd015923b4cf6c53130fc73be0f","sha512":"6b43a520d143abf8d7b8311578f7d91d30e053edadbdf48f77e6b138a1731de68f6a841a69c0692e8421b666cfa640b01fe65dc8d6419192e975b9860225777b","ssdeep":"","tlshash":"4ae0dfbd04d38a1083ab31191d1e83ae74a65fb3240cab52fc5ec3506f12fbe81a65d8","size":367,"data":"","first_seen":"2025-09-20T19:58:28.224328Z","last_seen":"2025-09-20T19:58:28.224328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99a79e4d13b7a19f00e6e0b48aadd279","sha1":"b706868b141a329793e31071fbd9285ea6c1c9bc","sha256":"e49ea49d65f839e84ed8ffa10c5afa22747d2d159b3b7637134344b0d6825b71","sha512":"3b6df94124d91be8337eb859011cd59ac590a486d9825b97b923189c40eee274c1dd383bb5baaccf54de7eb2b425f6c5d9943ebe25461c0e91d89040bf0d3a5c","ssdeep":"384:+v0a/K7iYFRdYts+0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOIf:+K72sxQ80GaIoQPzahq/AMOY","tlshash":"97c2e5a7321eb91a8719626150ef2ec5a2cc48c4718f1b7ce724e93634d753485ebef8","size":27990,"data":"","first_seen":"2025-09-20T19:58:28.225355Z","last_seen":"2025-09-20T19:58:28.225355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@0.3.13/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","size":525081,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-11T13:56:00.301567Z","times_seen":2319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/z-10354046.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8bb746c8b30bcd1b27f6f282214bfd8","sha1":"4e6c367ab1cec0cd7f685e06fcbed695bb6ab5d8","sha256":"d3602a56389eeb2f917d68c90aec538717bf743583a21d68c89b2a40f6f61378","sha512":"82e06cde934baa28a928e7e3eff948de740cd042e69a172ef58bc98877c80199793a9db9ec89138cc0a2d5db888e9dfc194d4268b349020abc83a653bfe4ecb2","ssdeep":"6144:b+rFR9B39Gjd6Y3jeumFQg/BJz0GO9A/TGEOBsBrufLnprr:b+RRr39GjgY3j7mFQg/LzK9A/TGEOBY0","tlshash":"d3442a493352b2f63bd250d55c3ba506e2365059780d8428f6ecc9d2a9afdce6232f7c","size":268084,"data":"","first_seen":"2025-09-20T11:28:53.514657Z","last_seen":"2025-09-20T19:58:28.196825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5ba582239bd12c5522a7ff8d3e2a05","sha1":"0630428218842438adf3d6e78daeb8b92da237bc","sha256":"3406b467b990ba19a59ff0007c5fb46ce3d8fa6775dea175ef751abf529ce3c6","sha512":"4c9d8c4448ff36b51a689cb0b713f77d5802a18c7afb46481da154f6b9cf3f89235a6f22a3746cebee34f3aef7b5f72760173c1c791853180cfd5e2a7ef29eac","ssdeep":"192:dZxws3BGXiq9Y5v/P3Ycfj3b5Gs9YtQ4D17k5J2/qnpzxUFAYNX:XXqIP3Y0j3b5GsAT65fplUFAIX","tlshash":"1122c78a7548f91d55292470092fbbc2202aefb56425871cd2a1fdbc7b307c4b6a9fc7","size":10034,"data":"","first_seen":"2025-09-20T19:58:28.195738Z","last_seen":"2025-09-20T20:19:11.685621Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/embed-Dsiktr_f.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fffcdfe1e350e055876c67f2ff70a647","sha1":"90a2eb928ad95ac1ac0bd584c097c8af0c2cb5b0","sha256":"6817899839b9a5b78b785c5dd4a936fc59d7a6072aaf505a94841323f941da9a","sha512":"38172cdb16a075b2e3583e51fee9f752b59f54db57d4717fb316b05890edaefff5155f5aedee88ba02871118bd26c075d4ef5d6cde3f202496943e59ddfe8cd1","ssdeep":"","tlshash":"3d01429c3581b07463b549fd1cbb0909f22cfca5b8088044c56083ea3c63989401ff39","size":671,"data":"","first_seen":"2025-09-20T11:28:53.537042Z","last_seen":"2025-09-20T19:58:28.204276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/embed/796","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16024be6b819af79ecacd290f22479f6","sha1":"18e1ba050ce1ea55be5b87d1bd52d57644229c38","sha256":"08cdda4136320231a9ca880b4f2b387d85c2dfe6490e3bcf959528dfc9e43af6","sha512":"902b92f2d7d66a610de7199f84cdd657a12a002a07eda119fa3af0cfa74473689be974ff98149190295ddf1affcf77456bcc5ca0dfd02eb81237df7af3ee6d38","ssdeep":"","tlshash":"7b1100753a1a1534c5c5408b317ee7a93e3220317b02a084c3adcc289d18e8314efcbe","size":902,"data":"","first_seen":"2025-09-20T19:58:28.226219Z","last_seen":"2025-09-20T19:58:28.226219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-11T12:58:00.226142Z","times_seen":3671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.playnow.wtf/js/script.outbound-links.js","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"babccb83ba0cd1075ea3838f25a335c2","sha1":"3784528273ab18973d12293a349f9e701e326102","sha256":"cd8a3383086f55f72f2488d2bd6fe81c8538bac434d5095a36d32c07d89708ba","sha512":"1877f36dc4bdf39f91666c42f834e1f27b0e53060b702d469498aec6b42e18774b43d2f352c0f66f321ba248164e35a49774a9e221231ce11046056ceb150564","ssdeep":"","tlshash":"086194aa7e00f57854b9d237626f3317723b3563691884010528cdc03d28faba3b6ecd","size":3356,"data":"","first_seen":"2025-04-11T16:09:27.707192Z","last_seen":"2026-03-28T22:51:09.442438Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/z-10354046.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8bb746c8b30bcd1b27f6f282214bfd8","sha1":"4e6c367ab1cec0cd7f685e06fcbed695bb6ab5d8","sha256":"d3602a56389eeb2f917d68c90aec538717bf743583a21d68c89b2a40f6f61378","sha512":"82e06cde934baa28a928e7e3eff948de740cd042e69a172ef58bc98877c80199793a9db9ec89138cc0a2d5db888e9dfc194d4268b349020abc83a653bfe4ecb2","ssdeep":"6144:b+rFR9B39Gjd6Y3jeumFQg/BJz0GO9A/TGEOBsBrufLnprr:b+RRr39GjgY3j7mFQg/LzK9A/TGEOBY0","tlshash":"d3442a493352b2f63bd250d55c3ba506e2365059780d8428f6ecc9d2a9afdce6232f7c","size":268084,"data":"","first_seen":"2025-09-20T11:28:53.514657Z","last_seen":"2025-09-20T19:58:28.196825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","size":396431,"data":"","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-11T13:52:58.29041Z","times_seen":608837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","size":396431,"data":"","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"436507f80595ab5a95ba101bd78b01f1","sha1":"3d1462c1235144b85d3b5aaab78982b8e51fe781","sha256":"7493006938e9dc96b2b0118c129aef64e389b9ea84af31cd9e4615074fd17609","sha512":"43cf8d6a9f0b64813bfa610324011c1d6f9ea308f7afec076dbf3b95460b67ea7503f86d91fe8de8fc97213cf109654e9816913b8d853d52cdd8cad7e6ac66d1","ssdeep":"","tlshash":"b21100753b1a1534cad5418b317ee7a93d3220317a02a184c37ccc289d18e8714efcbe","size":902,"data":"","first_seen":"2025-09-20T19:58:28.228181Z","last_seen":"2025-09-20T19:58:28.228181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a774e3f3f50d990ee426b47a7a5e033","sha1":"9aa8984d60feb823b28791881bf02f3a0e9caf1c","sha256":"b869dcaa9146835641bfdf2eb8f89a7333dfb5b3e3acb61cf77f5bdc1488c281","sha512":"bc13482b39099c513154042ebb239bbd84fae0b144176f3a294fb46cf1734bcf7add238bc70c416bbc3332e8ef6a36236b3570f6c9c8ad65a1aef2b805f1356a","ssdeep":"","tlshash":"0ae026283db7e161012734eb2b3ec0526226c01dad24d78298feca989dd0ff00926dd0","size":332,"data":"","first_seen":"2025-04-16T10:55:46.992611Z","last_seen":"2026-04-09T22:38:46.669862Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1b6b10377155f764e1f8594ac32ed2","sha1":"aa0d6886a2c1c90b095e698cab0c212ecfcd6e37","sha256":"c21a1fecde338a7ac39f952f1729441b91ebed2bfd57796b8b1d69238974cb77","sha512":"1839bda8401da86e3b3347270ac417f880ed898092b423894c140a5f26fd3188d3951c5d0817eb88ee04d3881f11af025415a81454bd9ac91363d03c3aaf1570","ssdeep":"192:dvbg5ZCGX4umHsXRhyqD0igwQs6LHE2YaOyC3UN+WYa5nrXl8ONIJ:999ChyqDpgwP6LHEH53UN+fa9ruOw","tlshash":"3022e88ab54cf96dd62824b1011fbbc32029ffb150548a1c92e0fdac7b347c465a9fc6","size":10076,"data":"","first_seen":"2025-09-20T19:58:28.189903Z","last_seen":"2025-09-20T19:58:28.189903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"p.playnow.wtf/js/script.outbound-links.js","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.playnow.wtf","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 19:00:04 GMT","end":"Wed, 17 Dec 2025 19:00:03 GMT"},"fingerprint":{"sha1":"A4:B3:48:4D:3E:0E:9B:4B:DD:05:B5:07:1B:49:C8:A3:77:DB:2C:0A","sha256":"EB:F7:E8:FC:1C:1E:68:B0:C2:B3:42:EF:9A:AC:C1:93:6E:92:57:80:A1:19:84:C4:C4:F3:10:39:B2:6F:97:36"}}},"request":{"raw":"GET /js/script.outbound-links.js HTTP/1.1\r\nHost: p.playnow.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3356), with no line terminators","md5":"babccb83ba0cd1075ea3838f25a335c2","sha1":"3784528273ab18973d12293a349f9e701e326102","sha256":"cd8a3383086f55f72f2488d2bd6fe81c8538bac434d5095a36d32c07d89708ba","sha512":"1877f36dc4bdf39f91666c42f834e1f27b0e53060b702d469498aec6b42e18774b43d2f352c0f66f321ba248164e35a49774a9e221231ce11046056ceb150564","ssdeep":"","tlshash":"086194aa7e00f57854b9d237626f3317723b3563691884010528cdc03d28faba3b6ecd","first_seen":"2025-04-11T16:09:27.707192Z","last_seen":"2026-03-28T22:51:09.442438Z","times_seen":218,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":198,"dns":185,"connect":8,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CckdVU9K.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-60c8f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43178\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWIOBqQo%2BAk%2F6JyDNv0Wb%2Fxo9szhI0JH0D38ZO6w8sge5MVkHmxnfyWvWf%2FAcC5rOkbsOJFhGEY%2FXYUoo7hzGGmMUpakBfocRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e4703d1d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36040)","md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.14110553189067343\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:57:48 GMT","end":"Wed, 12 Nov 2025 12:55:14 GMT"},"fingerprint":{"sha1":"D4:3E:2D:C6:F4:04:8A:A6:38:80:A6:3F:B8:36:DF:7A:79:B8:B0:6B","sha256":"99:E2:A7:FD:97:EE:35:E5:8B:A6:DB:25:80:B5:FA:55:8E:72:BD:17:CC:CA:CB:6A:DF:CC:70:31:68:4F:F2:57"}}},"request":{"raw":"POST /ut/hb.php?cb=0.14110553189067343\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1145\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wFCT%2FKlogpZ50F39WvNr8p7OGELNz6XHqeVULTHAAlZ9NQkR22DBKMCBjjaTP4aW5trFwPXmWYiU9IhZcsLkM5QJ3Ymj6%2F1DjA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e4723bbfb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":34,"dns":32,"connect":1,"send":0,"wait":157,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js? HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9823e4751aa656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10076), with no line terminators","md5":"ca1b6b10377155f764e1f8594ac32ed2","sha1":"aa0d6886a2c1c90b095e698cab0c212ecfcd6e37","sha256":"c21a1fecde338a7ac39f952f1729441b91ebed2bfd57796b8b1d69238974cb77","sha512":"1839bda8401da86e3b3347270ac417f880ed898092b423894c140a5f26fd3188d3951c5d0817eb88ee04d3881f11af025415a81454bd9ac91363d03c3aaf1570","ssdeep":"192:dvbg5ZCGX4umHsXRhyqD0igwQs6LHE2YaOyC3UN+WYa5nrXl8ONIJ:999ChyqDpgwP6LHEH53UN+fa9ruOw","tlshash":"3022e88ab54cf96dd62824b1011fbbc32029ffb150548a1c92e0fdac7b347c465a9fc6","first_seen":"2025-09-20T19:58:28.189903Z","last_seen":"2025-09-20T19:58:28.189903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 2791292\r\nx-served-by: cache-lga21931-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 705719\r\nx-timer: S1758398253.596586,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-11T13:53:55.412712Z","times_seen":448330,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":91,"dns":1,"connect":27,"send":0,"wait":28,"receive":8,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/c.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"172.67.71.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 16:08:05 GMT","end":"Mon, 17 Nov 2025 17:07:33 GMT"},"fingerprint":{"sha1":"36:D8:6B:24:C6:E6:C8:AF:63:96:50:56:1D:40:88:5A:A9:5C:22:D2","sha256":"8E:A4:C7:DE:BE:00:BB:C8:F8:96:8E:5D:C3:FB:2A:0F:1C:7B:8B:FE:DA:35:BE:35:F2:6A:6E:DB:B2:D6:B7:34"}}},"request":{"raw":"GET /c.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 12 Jun 2025 10:32:15 GMT\r\netag: W/\"684aacaf-2f55\"\r\nexpires: Sun, 21 Sep 2025 19:09:36 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2876\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dc6ukSHr7lx83n9lyLvu3AAdoN2iJhCBq87fnPIFlBxTLy88w2JXeov%2Byshi5owvzbVW4pqz5ACfEEZbQ4r%2FG2s6XWne\"}]}\r\nserver: cloudflare\r\ncf-ray: 9823e4767f8e0b06-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12117,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12117), with no line terminators","md5":"7f167017c3edca98e152e2ad7e547032","sha1":"cbcbd0f11bd2f552cdd87cf1947fadc2b7371681","sha256":"52784de24aa1b312200cd6262ccecb5983c443290f1fe8d01790199be351b02d","sha512":"68c879651da562bb04d028bf0e4c5fcbfcbba27c7180fb3a0545dc6e6697b55aa1f422ab5fbfa557f6f1ab7107f0bcf3d12d1e4df2f15d209975b4da221cb33d","ssdeep":"192:lEpB4BQM5iClA7y1w65jqc4izncX9HVvW2kdjxWybsm8/29NBm2/MIGQKG+I8:lEpB4BQB9W1wC4bN1wdjxWybsm8/242o","tlshash":"8c424c55211b28b6a7ff50ea252f73057030543aaf4a905190a6c0bc36bde4f90ffeb6","first_seen":"2025-04-13T04:38:43.35501Z","last_seen":"2026-02-15T18:16:47.15295Z","times_seen":769,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":70,"dns":34,"connect":1,"send":0,"wait":17,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/blast.js","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zorroplay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 18:54:17 GMT","end":"Sat, 15 Nov 2025 19:51:45 GMT"},"fingerprint":{"sha1":"58:33:D3:AF:2D:E1:0B:85:50:FA:71:97:94:98:D2:C2:B9:9F:9B:75","sha256":"B8:67:E7:EE:5C:1A:19:9B:5B:23:BD:8F:39:B8:60:B2:88:AF:6A:57:F6:4C:52:07:1B:88:31:75:3C:F9:96:AE"}}},"request":{"raw":"GET /blast.js HTTP/1.1\r\nHost: zorroplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/strumyk.php?id=796\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 17 Oct 2024 06:47:40 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMcAdZv%2BoLgNW%2Fp4FUaYZCWO1ED5ZJq5iuxquMpcuTuHUTvCOCQdHdW9F0UiBnLg5w2rUKA3c0NSjbFmZ1Kf%2F3O8qhMPtcfUVtNE\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 45\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6710b30c-13040\"\r\ncf-ray: 9823e477fe4e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"091faec928970e76d37a3601c19fcf8a","sha1":"6441e8eebe90eb8d4a40e7c25440ff99caba3520","sha256":"eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12","sha512":"0065b4e5167b85abb85d4af6be22853d1ea16e9c0d5420173f356dd7a980374487405d8561a4a5df32dd68d2956af6c7a3f099776994e2cf6a3b0eb8df1c3277","ssdeep":"1536:HnyiwA6dLK4I7T8IVCJ0Xiyu/lpvd7TN8+Prp2s:HnyiwFLzI7AeSymrpTNZrpN","tlshash":"16732ec177d5bc8212872b77731bb1e6e82a9dd87188488ef104bc90f4bda12fae4575","first_seen":"2023-03-08T14:53:38Z","last_seen":"2026-04-09T22:38:46.561491Z","times_seen":1576,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CckdVU9K.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/assets/main-KyJ_MAIM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-60c8f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43178\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3%2FptD0T9xJ6AXK4QOIVssbKpqv4tGTo4tHM2PJbUmmMhAydmJ8PVhPbxihXArw1GYznCP08h7ERzaVpaVWpa4hGGCmrbQVuCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e46eab2f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36040)","md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/logo.png","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 17:22:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bf10dd-3c4a\"\r\nexpires: Wed, 08 Oct 2025 18:05:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1043518\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsfnWxqdu7KAEqByiaExAKbpNVdCn0KkOuRPXut3Mdwr7qjiEp0MpIY5m4ffqHU%2FiH2rBtSUdskpyjB%2FArnrkcSIOH8Gxh4ziA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e4709d9e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 146, 8-bit/color RGBA, non-interlaced","md5":"ea66544070a5785a44e4bc95de7aba8e","sha1":"8cc2d11e6c2350afff887a5af6bdc7e49714afe6","sha256":"9fffc69f1f3205009ab8dae51e8328eab93a24780765521ef18b826e876741c9","sha512":"39b3269d811d093a01bf5bd6a7fdd2bc6e9d04c96f227fbd513d9a32739afb91ff3abe516d5edc1c41ae45009bddb28839af5438415587bfb0796c0c4735b0f2","ssdeep":"384:eAR7NMs1+0+P7lUjtRIIRXhKo2JwyfMmI4CeKDpvv:R1+0u7CpRIIdhKHw/DeKtv","tlshash":"3962c0d353efe58f5e4e101db0b138892829627468f0da30a179806de1fce56b58b2c7","first_seen":"2025-08-31T21:50:19.951684Z","last_seen":"2025-10-02T17:04:45.983522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js? HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9823e4719ede56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10034), with no line terminators","md5":"7c5ba582239bd12c5522a7ff8d3e2a05","sha1":"0630428218842438adf3d6e78daeb8b92da237bc","sha256":"3406b467b990ba19a59ff0007c5fb46ce3d8fa6775dea175ef751abf529ce3c6","sha512":"4c9d8c4448ff36b51a689cb0b713f77d5802a18c7afb46481da154f6b9cf3f89235a6f22a3746cebee34f3aef7b5f72760173c1c791853180cfd5e2a7ef29eac","ssdeep":"192:dZxws3BGXiq9Y5v/P3Ycfj3b5Gs9YtQ4D17k5J2/qnpzxUFAYNX:XXqIP3Y0j3b5GsAT65fplUFAIX","tlshash":"1122c78a7548f91d55292470092fbbc2202aefb56425871cd2a1fdbc7b307c4b6a9fc7","first_seen":"2025-09-20T19:58:28.195738Z","last_seen":"2025-09-20T20:19:11.685621Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CckdVU9K.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/assets/embed-Dsiktr_f.js\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-60c8f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43179\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBRfzi7cduiMvBnFrQrst5NOhtUYNjkX%2BXj6nLfm0arNJadVZcAIq5XqPKjTR6Z5f9DHE979hxeKQIK4DF%2FLcuUlY%2BX7O%2F4DeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e47348ae56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36040)","md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.9010547497639179\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:57:48 GMT","end":"Wed, 12 Nov 2025 12:55:14 GMT"},"fingerprint":{"sha1":"D4:3E:2D:C6:F4:04:8A:A6:38:80:A6:3F:B8:36:DF:7A:79:B8:B0:6B","sha256":"99:E2:A7:FD:97:EE:35:E5:8B:A6:DB:25:80:B5:FA:55:8E:72:BD:17:CC:CA:CB:6A:DF:CC:70:31:68:4F:F2:57"}}},"request":{"raw":"POST /ut/hb.php?cb=0.9010547497639179\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1010\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPgXR7%2Btq7UKBv0y2TszP4wbayMVWh2CS5XwvriLd693SFXvpaJzZ8IloPW0orx9FM5rRWPz5kVhnQDu%2BhaSOllHNMj%2FnWanWEYyXtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e474b91bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/h/g/jsd/r/0.6720750678646858:1758397080:YvoJxZoARB1EOEuNK4Iu10b4ad-xpUEOrasrl8ARLAI/9823e471df2c56cb","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.6720750678646858:1758397080:YvoJxZoARB1EOEuNK4Iu10b4ad-xpUEOrasrl8ARLAI/9823e471df2c56cb HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12081\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/embed/796\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: cf_clearance=Po8dho3A3ruhPgrqM8mWi_8zepJELnBhQvbi7hbTUxI-1758398252-1.2.1.1-IyKJXmhiV07o3jB9d0ZWZqCH4kuKG_k3qMnq9gfybHjUDw86LrwDD.AzlptNlEnWQVmoncMomvSn9eAW6zifdokidDpoKa7.GOUPvyHrR_0lCFTcPphzk5KwNq3PdeAbzzDCRKSSL63Ns4Ph8u2eYeC5xHvq6mWtsGqL_5pPa_Olp8uUZ9g45ZsIu4d1n8qk6JWborvo4G1R.yGyt8xDWQ9aOLN18O0SIDrLkKoY6nM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=strumyk.net; Expires=Sun, 20 Sep 2026 19:57:32 GMT\r\ncf-ray: 9823e4763ba256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/z-10354046.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/z-10354046.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/embed/796\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 10:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ce7b5d-41734\"\r\nexpires: Sat, 20 Sep 2025 22:56:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32433\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9m2H2ryn6H%2FpRGVNacmDGX6nRNuFOdbemtdEK3iGgDTYG%2FcT30TqIzSlBCFVC%2ByokQCaFwg6kuLbeiuB%2BSS2irQkC2Ad1DIJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e472d84156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47569), with NEL line terminators","md5":"a8bb746c8b30bcd1b27f6f282214bfd8","sha1":"4e6c367ab1cec0cd7f685e06fcbed695bb6ab5d8","sha256":"d3602a56389eeb2f917d68c90aec538717bf743583a21d68c89b2a40f6f61378","sha512":"82e06cde934baa28a928e7e3eff948de740cd042e69a172ef58bc98877c80199793a9db9ec89138cc0a2d5db888e9dfc194d4268b349020abc83a653bfe4ecb2","ssdeep":"6144:b+rFR9B39Gjd6Y3jeumFQg/BJz0GO9A/TGEOBsBrufLnprr:b+RRr39GjgY3j7mFQg/LzK9A/TGEOBY0","tlshash":"d3442a493352b2f63bd250d55c3ba506e2365059780d8428f6ecc9d2a9afdce6232f7c","first_seen":"2025-09-20T11:28:53.514657Z","last_seen":"2025-09-20T19:58:28.196825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 30453\r\nx-served-by: cache-fra-eddf8230123-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-11T12:58:00.226142Z","times_seen":3671,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":72,"dns":33,"connect":15,"send":0,"wait":14,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/favicon.ico","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nage: 793\r\ncache-control: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIK68O854VboSEto6kUrblWBw2VEkW86HSz2%2Bq9U8o4Xo747prGBPTjQGWkX9WZD2Q%2BbDtyD0XI6bN%2B9GMnDFURWT%2FWsc%2B0p%2BA%3D%3D\"}]}\r\netag: W/\"68cc595b-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9823e4747a1256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"43e028540c9e07ceeb94386450080680","sha1":"be9af3cd56b2658a3252fa313b20d88342a3fdb4","sha256":"e5449d30e2ad28867da4b8d4ab98c7dd89c50fb1183fc873366139c6cc3e8b29","sha512":"d32aa1476399f622937e0396af13337b9b04a7abdb39b40eb8b0bb200118d73c136db99b281139a61419db2de74e9e11127fb7c560755cb5c8ec0bf4036f5ff4","ssdeep":"24:suqypSllllllllllllllllllllllllleZ+illllllllllllllllllllllllllllc:1NJGeF2R4VIKARCigBSKfDKPjws","tlshash":"9791473b33043e98c89c81307ae70b01dc31ea55772619d8a69062e11b0ff7bd432fa9","first_seen":"2025-08-31T21:50:19.996931Z","last_seen":"2025-10-02T17:04:46.003115Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.playnow.wtf/api/event","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.playnow.wtf","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 19:00:04 GMT","end":"Wed, 17 Dec 2025 19:00:03 GMT"},"fingerprint":{"sha1":"A4:B3:48:4D:3E:0E:9B:4B:DD:05:B5:07:1B:49:C8:A3:77:DB:2C:0A","sha256":"EB:F7:E8:FC:1C:1E:68:B0:C2:B3:42:EF:9A:AC:C1:93:6E:92:57:80:A1:19:84:C4:C4:F3:10:39:B2:6F:97:36"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: p.playnow.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GGcV5LcJANyWKWIFHOKi\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-11T13:51:09.246222Z","times_seen":394109,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":24,"dns":0,"connect":8,"send":0,"wait":80,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/embed/796","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /embed/796 HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzJ4STf9ud48xyAAMjur72cJtnuZesGugZJHiQVc5XSwwh591UPy4Hi9Ofvp5JXdQK7SK1TXjKBr84j07AVS45dPA%2BvTY%2BukZQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9823e471df2c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2265,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (928)","md5":"92dda8141e61e356be873ff11e6bf851","sha1":"4c2a5e4ef6da3c5dc229bceb4b5bb2b7cb8bb28b","sha256":"7dc3a1dbcffa5b21b9d607b1b0f5d48fc726a637c698ffc17dad7b933491721e","sha512":"c48eac5fb8c5055321b0ba262fb74bd4899b11663bcc243d140b19b1c50537e7b8503db0398f9b9fc2fcce56a075e35136fe33edb381c4750514ba0a22f01c0b","ssdeep":"","tlshash":"1b4141756c50d9289274108a74b5f75eb962a00b2609d1c0b1bed8398f58fcb48efd7d","first_seen":"2025-09-20T19:58:28.199283Z","last_seen":"2025-09-20T19:58:28.199283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.playnow.wtf/js/script.outbound-links.js","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.playnow.wtf","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 19:00:04 GMT","end":"Wed, 17 Dec 2025 19:00:03 GMT"},"fingerprint":{"sha1":"A4:B3:48:4D:3E:0E:9B:4B:DD:05:B5:07:1B:49:C8:A3:77:DB:2C:0A","sha256":"EB:F7:E8:FC:1C:1E:68:B0:C2:B3:42:EF:9A:AC:C1:93:6E:92:57:80:A1:19:84:C4:C4:F3:10:39:B2:6F:97:36"}}},"request":{"raw":"GET /js/script.outbound-links.js HTTP/1.1\r\nHost: p.playnow.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3356), with no line terminators","md5":"babccb83ba0cd1075ea3838f25a335c2","sha1":"3784528273ab18973d12293a349f9e701e326102","sha256":"cd8a3383086f55f72f2488d2bd6fe81c8538bac434d5095a36d32c07d89708ba","sha512":"1877f36dc4bdf39f91666c42f834e1f27b0e53060b702d469498aec6b42e18774b43d2f352c0f66f321ba248164e35a49774a9e221231ce11046056ceb150564","ssdeep":"","tlshash":"086194aa7e00f57854b9d237626f3317723b3563691884010528cdc03d28faba3b6ecd","first_seen":"2025-04-11T16:09:27.707192Z","last_seen":"2026-03-28T22:51:09.442438Z","times_seen":218,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/reidoscanais/rdc@main/assets/css/player-v3.1.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/reidoscanais/rdc@main/assets/css/player-v3.1.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"441c-IUnMJOMDp3mkNwqMosZOxmDkWK0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 27621\r\nx-served-by: cache-fra-etou8220155-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17436,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17435)","md5":"17028a91f54297edff3ace4a2d5d4864","sha1":"2149cc24e303a779a4370a8ca2c64ec660e458ad","sha256":"0ebdd66f78b5a95914133243296a5d507b9a33ae80e0184a06349d9345ee4a11","sha512":"138d743017e4ed2d12cb135e43d75bac2efe7c79091d6a2cec31e64f5c53a28bf38fbaa0b3819a750590b2e94d8d438631d29b6ec018d7f2ff16e60bb3f8a7de","ssdeep":"192:LVzPqplXrWPj7tYpaaUzcWJRAWagUvos6BKPqYXzmFqDpHs7izLHjLp5t7q:pPqplX6zcWJTjBKPqYiwDpfjLd+","tlshash":"a5724412b89812258572812a63b3e7bc37bd8502f7d62f9ab512b7204ecd1cb76f3585","first_seen":"2023-09-16T14:51:24Z","last_seen":"2026-03-08T17:23:20.929952Z","times_seen":29,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":102,"dns":36,"connect":15,"send":0,"wait":15,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zorroplay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 18:54:17 GMT","end":"Sat, 15 Nov 2025 19:51:45 GMT"},"fingerprint":{"sha1":"58:33:D3:AF:2D:E1:0B:85:50:FA:71:97:94:98:D2:C2:B9:9F:9B:75","sha256":"B8:67:E7:EE:5C:1A:19:9B:5B:23:BD:8F:39:B8:60:B2:88:AF:6A:57:F6:4C:52:07:1B:88:31:75:3C:F9:96:AE"}}},"request":{"raw":"GET /strumyk.php?id=796 HTTP/1.1\r\nHost: zorroplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=360, public, max-age=30, immutable, no-transform\r\nx-cacheable: YES, YES\r\nx-cache: BYPASS\r\nvideocdnx: NO\r\nnode: PHP\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxI0MZa%2Frf4pRnIB175vFaWpx4FqW5jp2srtV%2FXOrb2443MwINpeTIg%2FJAb3A%2BryYEUDmp8ACZ2fn%2FrPkGSf67dyROPKMUU3PFKS%2BUY%3D\"}]}\r\ncf-ray: 9823e475190cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48412,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28212), with CRLF line terminators","md5":"c05a89694f1803e8cecd6f9cc605ddaa","sha1":"cca140323b21e0e7a687bd5d8596ab80be976707","sha256":"3e517b8b3115a89aee0c93580c05b214a0fc53970059b7a65eabd14b4481dc91","sha512":"bf1149489a5cdadb393f2182e1397ae65b726da45c3088372c9934271de542d169019c678bcb8756d0f4986fc6c5b77f439aada8bc17d9fa013db97847582419","ssdeep":"768:XBTK72sxQ80GaIoQPzahq/AMO24P1UiULcuYlKi/IC0zEhoRga/ppN34DyOCvYsf:X472HGI7MO9Kif6b/ppN34+nvjnf","tlshash":"a1231656354ab805437a626114bf2985e1ac8483754f8a78f76ce4223ff7634c4e7ef8","first_seen":"2025-09-20T19:58:28.200836Z","last_seen":"2025-09-20T19:58:28.200836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":36,"dns":23,"connect":1,"send":0,"wait":50,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adstrim.live/api/match/290535","fqdn":"adstrim.live","domain":"adstrim.live","tld":"live"},"ip":{"addr":"172.67.214.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstrim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:17:32 GMT","end":"Wed, 19 Nov 2025 19:15:27 GMT"},"fingerprint":{"sha1":"63:56:06:F2:D4:55:C3:81:E4:7C:CD:B9:EF:93:81:90:21:35:2A:AD","sha256":"12:FD:A6:E2:7A:D8:7A:45:BB:AB:02:21:16:3C:3D:18:89:04:7E:91:C6:B2:44:3D:79:ED:19:F8:B1:B6:2A:3B"}}},"request":{"raw":"GET /api/match/290535 HTTP/1.1\r\nHost: adstrim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Cache,X-Cache-Key,X-Poster-Path\r\nx-cache: HIT\r\nx-cache-key: matches:290535\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ays9fs3SSNWipSoZ2T0iXGaWuQimySttQVTWaNIApzTTezZciZAcfeC16Zt%2F0M0gNpawJyntUsCT7TbUBwB6wAaqU%2Bhb2bh1eRU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9823e4712e75b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84715d4fd4d1370a7ff7e97608c8e37c","sha1":"5a40d5a95ef52b54393432e393aedfc6d4e68890","sha256":"e6bd909544a0e52c3b5c093e1519e395f3a8631030db9d8f4e1c20cb498e81b7","sha512":"eb697cf3d90c6f0b5c893a398856bd10c9c392a86839b8ecb8d7fff5e14f2dc687bfcd2d710f87e614bca418783204ff6cf3d5e37e1731920d43e4850db89c46","ssdeep":"","tlshash":"22e0d1778245c455c69065c3097d3f5c7943004a6885acd7c61ded08d651af8b1f7653","first_seen":"2025-09-20T19:58:28.201778Z","last_seen":"2025-09-20T19:58:28.201778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":34,"connect":1,"send":0,"wait":17,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adstrim.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adstrim.live/api/alpha2","fqdn":"adstrim.live","domain":"adstrim.live","tld":"live"},"ip":{"addr":"172.67.214.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstrim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:17:32 GMT","end":"Wed, 19 Nov 2025 19:15:27 GMT"},"fingerprint":{"sha1":"63:56:06:F2:D4:55:C3:81:E4:7C:CD:B9:EF:93:81:90:21:35:2A:AD","sha256":"12:FD:A6:E2:7A:D8:7A:45:BB:AB:02:21:16:3C:3D:18:89:04:7E:91:C6:B2:44:3D:79:ED:19:F8:B1:B6:2A:3B"}}},"request":{"raw":"GET /api/alpha2 HTTP/1.1\r\nHost: adstrim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Cache,X-Cache-Key,X-Poster-Path\r\nx-cache: BYPASS\r\nx-geo-clientip: 89.181.127.250\r\nx-geo-source: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdvIEAyucLFypRzX%2BS67GGmfqiOpRdrWj05Uuvxe1osNmVZMmXmFO31cbzkS3RAfTSQOC%2Fu6dtGY6L1lRU%2B8qsJ3suVBQAQ2v3Y%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9823e4712e7bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"666424c1ed4bc8f63fa946d5bb50de89","sha1":"cfbbb4fb5cd7788aaa40a5db603d44544b15833c","sha256":"e6609706ec9b49b74604b9ab052dd3265f57ecd6a1c9cd314a6270b6f04fcd99","sha512":"b74aea18c78f1d96eeb539a95094782a3372571d881172cbf87ac9e05bca46599c5fdd7ee3dca72c5bb647a0018e801b9b70bf75a6430543c11e2d773a2d4054","ssdeep":"","tlshash":"c8a0024a2995ab20664800e4441793f014858951c572085dd3aa8f4a84f91eab490559","first_seen":"2025-09-20T19:58:28.203186Z","last_seen":"2025-09-20T19:58:28.203186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":64,"dns":32,"connect":1,"send":0,"wait":15,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adstrim.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/embed-Dsiktr_f.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/embed-Dsiktr_f.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/embed/796\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 20 Sep 2025 20:03:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 42839\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbLBXTojWU%2FhwfeaTf4S4kSznUvGV2MVzfHZ3oYaXzOnzjQreICxR8meVzBN3rlmBsXWehXzqpEupWsuY79wKg%2F0Rh4urxRzpg%3D%3D\"}]}\r\netag: W/\"68cc595d-29f\"\r\ncontent-encoding: br\r\ncf-ray: 9823e472e84856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (670)","md5":"fffcdfe1e350e055876c67f2ff70a647","sha1":"90a2eb928ad95ac1ac0bd584c097c8af0c2cb5b0","sha256":"6817899839b9a5b78b785c5dd4a936fc59d7a6072aaf505a94841323f941da9a","sha512":"38172cdb16a075b2e3583e51fee9f752b59f54db57d4717fb316b05890edaefff5155f5aedee88ba02871118bd26c075d4ef5d6cde3f202496943e59ddfe8cd1","ssdeep":"","tlshash":"3d01429c3581b07463b549fd1cbb0909f22cfca5b8088044c56083ea3c63989401ff39","first_seen":"2025-09-20T11:28:53.537042Z","last_seen":"2025-09-20T19:58:28.204276Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adstrim.live/api/channels/active/urls","fqdn":"adstrim.live","domain":"adstrim.live","tld":"live"},"ip":{"addr":"172.67.214.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:32.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstrim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:17:32 GMT","end":"Wed, 19 Nov 2025 19:15:27 GMT"},"fingerprint":{"sha1":"63:56:06:F2:D4:55:C3:81:E4:7C:CD:B9:EF:93:81:90:21:35:2A:AD","sha256":"12:FD:A6:E2:7A:D8:7A:45:BB:AB:02:21:16:3C:3D:18:89:04:7E:91:C6:B2:44:3D:79:ED:19:F8:B1:B6:2A:3B"}}},"request":{"raw":"GET /api/channels/active/urls HTTP/1.1\r\nHost: adstrim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Cache,X-Cache-Key,X-Poster-Path\r\nx-cache: HIT\r\nx-cache-key: channels:list:active:urls\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v92wO%2BrAF%2FNhrxMF9xZ0kqdktpb%2BRANOw32nvTXv7dTx7e6Fk%2FFaF8SnN%2FldW5RJkTTeWfUXfoPMtC7clJHBWYqCD1P1YljibLsKaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e473b8f5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a6a26a65313e0298072ff81f6d32783","sha1":"0238adaac9ebc523aa001cf5f1195b74ba7d6cc9","sha256":"ef69c00afcbc519ab5e4239ad24bace38c4c6ad021a2492433e92a36b9cd8786","sha512":"b15263548347f06510e16b1a6905071d39423cc9fd07034a40a0f217cbd153e0ced0b1dfd6b9cbc32d4388fd965742e16862eb6a4982f61573fe57dd5f1820b5","ssdeep":"192:HqGqAq6V0qWqYqdqZqAqjq7qfqJpqGSoD+qdqhqwq8q4qPq8qzqDqCqtqiqoqlq1:HzhBV053gUBucwWpVSoD+o8B1xk1OqrS","tlshash":"0642fcf71b9c5d2d1f44bad8085b114da20727be3edc65e3e1059f08c4988dc79eb6a2","first_seen":"2025-09-20T19:58:28.205543Z","last_seen":"2025-09-20T19:58:28.205543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adstrim.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CckdVU9K.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CckdVU9K.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/embed/796\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-60c8f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43179\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOUmgAx93RO%2BFBYK53H7wlsi6PkLpBnLe86xRNY0KgI0iwD2XhhkqPFDLwKCwyWgUivSWOMhGUXwyk68ntBHj0Ymubx32jubpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e474ba4d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36040)","md5":"cb3ea0846e3814cf2cbd16d9af2d9500","sha1":"405602c7f86ac1cd3c065b934aec6d42118f3004","sha256":"a002bc81edb46dce06f5d6792a9381c7b62fc65bb9377c35d6c1969660789a0d","sha512":"4281280a3cd93b4a5126e3cce702f7c58c2e66bb629325945ffca8c58c99791fd6dc3abfb812ee029ed85b73d72640daa5188305124b380daed26b513ce8c183","ssdeep":"6144:d+QV+xti2fOYTCMy4jKRe7Zd17Z8hc2OMvg9XN3cNAx4BCnCL2kbg5dAuQovzeeB:SWMLx4zL2kbgAu5aIB","tlshash":"d98449a93196b43653fb09f5507b0006f32d1e49b40a84a4f0bcadde2eaac556277f7c","first_seen":"2025-09-20T11:28:53.531693Z","last_seen":"2025-10-02T17:04:46.020496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10354046\u0026cbur=0.8715903017056168\u0026cbiframe=1\u0026cbWidth=831\u0026cbHeight=467\u0026cbtitle=Rakow%20vs.%20Legia%20-%20Transmiss%C3%A3o%20Ao%20Vivo\u0026cbpage=https%3A%2F%2Fstrumyk.net%2Fmatch%2F290535-rakow-vs-legia\u0026cbref=\u0026cbdescription=Assista%20a%20transmiss%C3%A3o%20ao%20vivo%20de%20Rakow%20vs.%20Legia%20no%20Ekstraklasa.\u0026cbkeywords=\u0026cbcdn=hboylaaafqqwl.space\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758398252256\u0026srs=f16429d0c7e0f04cded8d0660db35fd0\u0026atv=69.0\u0026abtg=1\u0026adbv=3-swf2","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/suurl5.php?r=10354046\u0026cbur=0.8715903017056168\u0026cbiframe=1\u0026cbWidth=831\u0026cbHeight=467\u0026cbtitle=Rakow%20vs.%20Legia%20-%20Transmiss%C3%A3o%20Ao%20Vivo\u0026cbpage=https%3A%2F%2Fstrumyk.net%2Fmatch%2F290535-rakow-vs-legia\u0026cbref=\u0026cbdescription=Assista%20a%20transmiss%C3%A3o%20ao%20vivo%20de%20Rakow%20vs.%20Legia%20no%20Ekstraklasa.\u0026cbkeywords=\u0026cbcdn=hboylaaafqqwl.space\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758398252256\u0026srs=f16429d0c7e0f04cded8d0660db35fd0\u0026atv=69.0\u0026abtg=1\u0026adbv=3-swf2 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uteyq%2Bs8e6vOzmCuS2oHlqHu0wrgkoflocjVgGmI6w%2BxLshgg%2BluRAHTvoivdouiSf1en%2BVhJbp%2FijlE0Ruh4pg0b%2Fq7ZAw0PfRfkiJWsXi1\"}]}\r\ncf-ray: 9823e474bfba56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":999,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5be289476164b072a0f6eed4e25026f7","sha1":"c88bf764bc6e0fc04a47bf8834201602e2c98652","sha256":"11e31a4c0ab2757c5e932a6527132413f6459098b3f71c326fe08d1d750f2d95","sha512":"f6a81f2088bf62c02b4ed5baba0c3b371df000f31b0935e9e151b310af3f4ad74da6a337a92b2ef77067524c1a25b203cb328a845e5aad3837c0888c9c4d643d","ssdeep":"","tlshash":"6c11a56a1fe44577a864485c33f6982cc850f9816cb0f62192c2b97ab21cac0427ee65","first_seen":"2025-09-20T19:58:28.206668Z","last_seen":"2025-09-20T19:58:28.206668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/main-KyJ_MAIM.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/main-KyJ_MAIM.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-9647\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43178\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZdAqHA7Law1XygnsosXBQa4%2Bt5O%2BkJFrdcD398h16KXHKl%2BHE5iA0o%2BUi8c1o1VM5d3lDNhF7wnmDOiSBPkebvc51FaL3BoHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e46e6af256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38471,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (38137)","md5":"2742654260c1583ca71db87c091c9abd","sha1":"f2a44b6165d3d84f071b485c672243aa8c272e48","sha256":"b96bd62d2109b62ac5b642b53057e3a0367e6380a1c93c962329d0e35f5f8bc1","sha512":"bc7d2e8ce0a93307f61d51bc612d7e953adf98b29700a3667b208a7a76943ae52efc2d054635db49da872b16baf0b4800007501879b33e1784207d2f15c2610c","ssdeep":"384:0f8zWvcsIDTNjCyyN7gOsHq6Z0CvXZFQ5MPE7YPx5uxOrAq1oIeJuB:s8qUrTNjByVsHq6ZtX8YAax5uIbte8B","tlshash":"0a035c5b0e589d3809a207f02f6ed777659cc131b0dbc3e5a3aed3182235566aee631c","first_seen":"2025-09-20T19:58:28.207634Z","last_seen":"2025-10-02T17:04:46.061196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9823e470fe0e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/reidoscanais/rdc@main/assets/css/hotstar.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/reidoscanais/rdc@main/assets/css/hotstar.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"5291-YNq59S72bp4xXaEhVvkeyhaavvw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 25491\r\nx-served-by: cache-fra-etou8220132-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21137,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1610)","md5":"d94d85638e888f2f40e5767c2218545c","sha1":"60dab9f52ef66e9e315da12156f91eca169abefc","sha256":"1eda0701baa438fd8446becd475128a57d3149134e442acb26c3c77fd57eeee6","sha512":"eb79fafff090b034aa4b13988c508925419f9633b99869c8af0885cbae5879654dc2bc4d7d8d1b3207671eb231f990735f352a6946bf2ae4a4bbbb8583f64b7a","ssdeep":"384:CP4Cv6Tv6YES5pf0El0Ee020vlKsYuqsYuTwlvwlfIz:M1yTyYh5ptlrLT8v8U","tlshash":"d892c7c55662648c41cfc42baf360e4c763ef4ebefea4ea5369e1f108647142f294974","first_seen":"2023-09-16T14:51:24Z","last_seen":"2026-03-08T17:23:20.939559Z","times_seen":23,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":100,"dns":30,"connect":15,"send":0,"wait":14,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.playnow.wtf/api/event","fqdn":"p.playnow.wtf","domain":"playnow.wtf","tld":"wtf"},"ip":{"addr":"185.225.115.54","port":443,"asn":204615,"as":"IP Fiber Inc","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.playnow.wtf","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 19:00:04 GMT","end":"Wed, 17 Dec 2025 19:00:03 GMT"},"fingerprint":{"sha1":"A4:B3:48:4D:3E:0E:9B:4B:DD:05:B5:07:1B:49:C8:A3:77:DB:2C:0A","sha256":"EB:F7:E8:FC:1C:1E:68:B0:C2:B3:42:EF:9A:AC:C1:93:6E:92:57:80:A1:19:84:C4:C4:F3:10:39:B2:6F:97:36"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: p.playnow.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/\r\nContent-Type: text/plain\r\nContent-Length: 130\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GGcV5N8kosARBQQFMsAh\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-11T13:51:09.246222Z","times_seen":394109,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool@latest/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 25817\r\nx-served-by: cache-fra-eddf8230057-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-11T12:58:00.226142Z","times_seen":3671,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/match/290535-rakow-vs-legia","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T19:57:31.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /match/290535-rakow-vs-legia HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Duys8ZWzZzeqPOvhKX2mGAnLJxek5%2Fdl4VAICFeGlcXJD92vClaYX1JqwaJQfHdy64npJ8GCsQ6VFTcfoFYLOzKsJ5OzvJmW0VLJ\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9823e46d48138be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1902,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (928)","md5":"245f8c16a3f51b7b41c025f52edae645","sha1":"f21bc4729ec3607580e6302cff7738f1e36297ec","sha256":"90c6e54ca8f24a977d0da3a2e99013da129f8b1802a29cf908ff49c0b9aabd11","sha512":"4a031e67f09adaf8ecbf17b4f21ce736c160cd857410dcee1093cc2805d031d07b5d0c0a901f3fff79f47d06e4d83eef3ecc86cbd52f5019c6a129b9399036a8","ssdeep":"","tlshash":"3f4140763d50843882b4528a30b9fb1e793271166a09e180b2aed8780f14fc749efd7d","first_seen":"2025-09-20T19:58:28.210119Z","last_seen":"2025-09-20T19:58:28.210119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":27,"dns":6,"connect":1,"send":0,"wait":18,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CewPCSs-.css","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CewPCSs-.css HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-4d2f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43178\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCW7fbTyw%2B%2FphYqw%2FZ2gb8pkLIANaD19WwhtX%2Fa4gEgiu3BQTaffB9SoOSRXzogGv8Of8kiOM5Hqg4LemVujOpX81KeXvYYoMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e46e7af356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19758)","md5":"f36c8080aaef749569454cfc24a6e50f","sha1":"117bef28d87cfdbf655c2bc6c308a36e70a67ed3","sha256":"d74239d2b3dc1ad7c286a3077c223fd43cf69389b512c296a299036271bf031c","sha512":"8518e2fee6a0fb4d87e97b8dc198b6e891fab56c4b4b526506be0f4c0117a34a28d48becd8b2fe77076f8e93dd3cf4592415e1687872c4e8c45801f3560c1a8e","ssdeep":"384:9EB3RXZ/QuFZhXxYpX4ndDZWUNPT3b1CSxTvotCL:+3wuFPxYNylZot6","tlshash":"9e924365f90c241c693bd718d8d16ad95228f3a3c3051b7cfaa776704e8b2933d27a8d","first_seen":"2025-09-20T11:28:53.539824Z","last_seen":"2025-10-02T17:04:46.031612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/z-10354046.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/z-10354046.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 10:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ce7b5d-41734\"\r\nexpires: Sat, 20 Sep 2025 22:56:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 32432\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOi5oyjho9ctBEiNjUU0kEQ0OoW2RetjJ1%2FNXXr9SiajjYpru%2FKfJ6T%2FsgieV%2FfrBTFVkRd5vDB8oytMWft%2FIaUzTyS3N0U04Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e4708d8056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47569), with NEL line terminators","md5":"a8bb746c8b30bcd1b27f6f282214bfd8","sha1":"4e6c367ab1cec0cd7f685e06fcbed695bb6ab5d8","sha256":"d3602a56389eeb2f917d68c90aec538717bf743583a21d68c89b2a40f6f61378","sha512":"82e06cde934baa28a928e7e3eff948de740cd042e69a172ef58bc98877c80199793a9db9ec89138cc0a2d5db888e9dfc194d4268b349020abc83a653bfe4ecb2","ssdeep":"6144:b+rFR9B39Gjd6Y3jeumFQg/BJz0GO9A/TGEOBsBrufLnprr:b+RRr39GjgY3j7mFQg/LzK9A/TGEOBY0","tlshash":"d3442a493352b2f63bd250d55c3ba506e2365059780d8428f6ecc9d2a9afdce6232f7c","first_seen":"2025-09-20T11:28:53.514657Z","last_seen":"2025-09-20T19:58:28.196825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:32.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9823e474fa8f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 141008\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.13\r\nx-jsd-version-type: version\r\netag: W/\"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 25852\r\nx-served-by: cache-fra-etou8220062-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-11T13:56:00.301567Z","times_seen":2319,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/index-CewPCSs-.css","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/embed/796","date":"2025-09-20T19:57:31.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/index-CewPCSs-.css HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/embed/796\r\nCookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-4d2f\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43179\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=By4hVRoQln%2B%2FfDFuLu0eHaj%2FtZN2TIUq43MLJUbHRqgBIQsA7rHob%2Fo56xHzcvTMLzYzMDhXx2x4uz9QJxqgQ9C0YxQFXBWTKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e472e84a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19758)","md5":"f36c8080aaef749569454cfc24a6e50f","sha1":"117bef28d87cfdbf655c2bc6c308a36e70a67ed3","sha256":"d74239d2b3dc1ad7c286a3077c223fd43cf69389b512c296a299036271bf031c","sha512":"8518e2fee6a0fb4d87e97b8dc198b6e891fab56c4b4b526506be0f4c0117a34a28d48becd8b2fe77076f8e93dd3cf4592415e1687872c4e8c45801f3560c1a8e","ssdeep":"384:9EB3RXZ/QuFZhXxYpX4ndDZWUNPT3b1CSxTvotCL:+3wuFPxYNylZot6","tlshash":"9e924365f90c241c693bd718d8d16ad95228f3a3c3051b7cfaa776704e8b2933d27a8d","first_seen":"2025-09-20T11:28:53.539824Z","last_seen":"2025-10-02T17:04:46.031612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/assets/main-CqCQpQjK.css","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"GET /assets/main-CqCQpQjK.css HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 19:11:25 GMT\r\nvary: Accept-Encoding\r\netag: \"68cc595d-58b52\"\r\nexpires: Sat, 20 Sep 2025 19:57:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43178\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBjeXLpmN7rZlXXaVvQAbgb5b%2B5N7IOOXXNsKBu2b%2Fu58WMBH2AocsHzH11t0OolAEjRb4d6vn23INK%2BWI%2FHIWvF83FmLOWupQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e46e7af456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56795)","md5":"e9f9e1673791838f7fd404ba05e5e925","sha1":"c1d4c673ee242b60c120c9962a039a7988aaf055","sha256":"ba9a9fa49775c1ec69bb22daca9b389622c7de92c11058f96d1c555179f128c9","sha512":"0800f64bc2bf35e8aeb18f590be95a4018c13d462e0b07d33980f5ccf8ffd8acbe418f9b0014588d3a7fc9e7a551acf02b2af7ee99601164dbeba9a1578a87f7","ssdeep":"3072:YNg98+nD9GfTAZ4VKpz600I4B3wxJiRFwin7/V9ey8:j98+nD9Gfipz600I4B3A4Fwin7t9ey8","tlshash":"7774a495f180303ba8978c2f9590febd863ae745cb010996f0236b542bca7d61927fdd","first_seen":"2025-09-06T20:32:15.551987Z","last_seen":"2025-10-02T17:04:46.000068Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 20 Sep 2025 19:57:31 GMT\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"75d871927f5e58b96f7bf7b5de083ae0","sha1":"ba1c473216e2bfb9613075ac3729a7b976118e04","sha256":"0014d56cd9cf8b2d3da043344ee9c6e4c4ad96ad62cb3d167b838ea5dfbd2ffb","sha512":"748385a376279efccc77e2d9e1126f22d4f9c4329772c63c0f9cf383ec71a00caa6d0caf93536b8a0c836f390cb5e2ebb0b53f9aae74fbf92fbec704298d6445","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:vXuM1+4","tlshash":"cbf17792002ba400ab971dc223cf7e3aaece10896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-10T19:11:46.108203Z","last_seen":"2026-04-11T13:01:57.338331Z","times_seen":2262,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":113,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moy.auraodin.com/renderImage.aspx?pid=144537\u0026lpid=17\u0026bid=1725","fqdn":"moy.auraodin.com","domain":"auraodin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.635Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /renderImage.aspx?pid=144537\u0026lpid=17\u0026bid=1725 HTTP/1.1\r\nHost: moy.auraodin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":300,"dns":0,"connect":19,"send":0,"wait":0,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10354046\u0026cbur=0.3302633700084713\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Match%20Details\u0026cbpage=https%3A%2F%2Fstrumyk.net%2Fmatch%2F290535-rakow-vs-legia\u0026cbref=\u0026cbdescription=Strims%20-%20darmowe%20transmisje%20mecz%C3%B3w%20online%2C%20streamy%20sportowe%2C%20KSW.%20Szukasz%20Strims.world%2C%20Strumyk.tv%2C%20Strims.in%2C%20Strims.top%2C%20Strimsy.top%2C%20Strumyk.in%3F%20Ju%C5%BC%20wkr%C3%B3tce%20najlepsze%20darmowe%20streamy%20sportowe%20dla%20polskich%20widz%C3%B3w%20na%20Strumyk.net!\u0026cbkeywords=\u0026cbcdn=hboylaaafqqwl.space\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758398251730\u0026srs=9347933be7dd98483ab8d680c1c3d18d\u0026atv=69.0\u0026abtg=1\u0026adbv=3-swf2","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/suurl5.php?r=10354046\u0026cbur=0.3302633700084713\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Match%20Details\u0026cbpage=https%3A%2F%2Fstrumyk.net%2Fmatch%2F290535-rakow-vs-legia\u0026cbref=\u0026cbdescription=Strims%20-%20darmowe%20transmisje%20mecz%C3%B3w%20online%2C%20streamy%20sportowe%2C%20KSW.%20Szukasz%20Strims.world%2C%20Strumyk.tv%2C%20Strims.in%2C%20Strims.top%2C%20Strimsy.top%2C%20Strumyk.in%3F%20Ju%C5%BC%20wkr%C3%B3tce%20najlepsze%20darmowe%20streamy%20sportowe%20dla%20polskich%20widz%C3%B3w%20na%20Strumyk.net!\u0026cbkeywords=\u0026cbcdn=hboylaaafqqwl.space\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758398251730\u0026srs=9347933be7dd98483ab8d680c1c3d18d\u0026atv=69.0\u0026abtg=1\u0026adbv=3-swf2 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strumyk.net/\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FD9B8sIZRJv99BbeYwcszKV10h6urzHHhtmZYXDEevAOLQkep0tByshpuKYgXicggFurMz7NW1iMtRWaUDZd8EN%2BvVk9JBpVDpoh1yIYdTk0\"}]}\r\ncf-ray: 9823e4727de656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8f7d99ef01e2d931e10d992e27a054b","sha1":"ce8ab98f37e8277ca3c1a246d244eee76b37a97e","sha256":"dba0c7a054fdff409a715894728baba6a9ed471db022ff09eaae12ce45b24d60","sha512":"8069439080b52607b1f3f71a07e1bc6b7f4436ef34461578d63808bda860c98487cf34e125657e07caea82a6a50ed1499435f655136f84ef53641b5e914193fb","ssdeep":"","tlshash":"f411b52f0f941b904acbc68d556748589c0461eafa7a28c0315c5c5e82ed170a01fd81","first_seen":"2025-09-20T19:58:28.215759Z","last_seen":"2025-09-20T19:58:28.215759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":70,"dns":35,"connect":1,"send":0,"wait":186,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adstrim.live/api/streams/count","fqdn":"adstrim.live","domain":"adstrim.live","tld":"live"},"ip":{"addr":"172.67.214.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstrim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:17:32 GMT","end":"Wed, 19 Nov 2025 19:15:27 GMT"},"fingerprint":{"sha1":"63:56:06:F2:D4:55:C3:81:E4:7C:CD:B9:EF:93:81:90:21:35:2A:AD","sha256":"12:FD:A6:E2:7A:D8:7A:45:BB:AB:02:21:16:3C:3D:18:89:04:7E:91:C6:B2:44:3D:79:ED:19:F8:B1:B6:2A:3B"}}},"request":{"raw":"GET /api/streams/count HTTP/1.1\r\nHost: adstrim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Cache,X-Cache-Key,X-Poster-Path\r\nx-cache: MISS\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0TXKPzi97vi3Ckszul7DbohiUtxsyB5oUmjmyOvbU3v%2FvYQgjKPl2HwrTYZSiBAEoiKV1argOncJxODJDCg7On1BUhB6NX7U%2FA%3D\"}]}\r\ncf-ray: 9823e471ef80b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9631,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"543d082992b1a18e719b9c9f3c727c34","sha1":"9ddd81b912d2037f565d566c08c4ae62e7f3193f","sha256":"74270aa8445054e08c60ea9478e928070f31948de06692985ab700a2300700d7","sha512":"dc11a3b6a749eda878de56cfb07d7204235e47ba621839360cfdc93d5b50bf51fe0eb179979e3ff132f2266c0cc4c15bdfed254ca72ed2df890ed67adfab3c5a","ssdeep":"96:zvIvzd18fbRUSmLEgGNZgU4xrAfWJeB8yP6MZSDbXbBFJM5:jgzstUZ4gGAxYWJeBxP6MwDbXO5","tlshash":"4612dfa47d6a24beacda1fa6b987ea3398cfe190f4908f4e90c7501c904cdb472d1577","first_seen":"2025-09-20T19:58:28.216744Z","last_seen":"2025-09-20T19:58:28.216744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adstrim.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strumyk.net/cdn-cgi/challenge-platform/h/g/jsd/r/0.6720750678646858:1758397080:YvoJxZoARB1EOEuNK4Iu10b4ad-xpUEOrasrl8ARLAI/9823e46d48138be6","fqdn":"strumyk.net","domain":"strumyk.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strumyk.net/match/290535-rakow-vs-legia","date":"2025-09-20T19:57:31.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strumyk.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 20:58:51 GMT","end":"Mon, 08 Dec 2025 21:57:29 GMT"},"fingerprint":{"sha1":"43:1E:9F:8D:C4:D5:18:E4:59:A6:67:4A:A8:FB:80:56:51:EE:2A:4F","sha256":"0E:10:83:BC:EC:55:0B:02:C6:47:BA:78:4D:48:D6:C5:54:89:DB:DC:F7:95:F3:28:82:2E:F1:3E:BE:02:D3:60"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.6720750678646858:1758397080:YvoJxZoARB1EOEuNK4Iu10b4ad-xpUEOrasrl8ARLAI/9823e46d48138be6 HTTP/1.1\r\nHost: strumyk.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12111\r\nOrigin: https://strumyk.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strumyk.net/match/290535-rakow-vs-legia\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:31 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: cf_clearance=vxFxNIO1DwnLfdcdqQoYHhDOoXZz72AViByT6Sx3QKA-1758398251-1.2.1.1-Q1teIHcBZiVW9dpOJ1PDH4DyOACjR27wll6eo1KME2hty4PMNfLFRxzWAEqF3aaJP34nD4kj4wFeIdhGcHZ_fZrpmPgN6dwlW1bueSE4uNcwOxvPSgPmtge7Lg5qcaKG1CfMuhliHCJ0uZ2BVa1FCZVABFDVAsU0xanVg1mYlLbGyQ46ksB7bPJ..R8gAS.W3eAYLA5XVZIavoFf2EHFkplCzSRx1h7PGHcgoABDQ7Q; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=strumyk.net; Expires=Sun, 20 Sep 2026 19:57:31 GMT\r\ncf-ray: 9823e4729ff156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@0.3.13/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/clappr@0.3.13/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 141008\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.13\r\nx-jsd-version-type: version\r\netag: W/\"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\nage: 976233\r\nx-served-by: cache-fra-eddf8230028-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-11T13:56:00.301567Z","times_seen":2319,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x7i0.com/tag.min.js","fqdn":"x7i0.com","domain":"x7i0.com","tld":"com"},"ip":{"addr":"139.45.195.12","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x7i0.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 11:38:54 GMT","end":"Sun, 14 Dec 2025 11:38:53 GMT"},"fingerprint":{"sha1":"19:03:00:84:7C:25:C8:1F:0B:20:51:91:CD:C3:22:2C:35:A6:7C:95","sha256":"1F:AE:71:43:F0:9F:64:A4:69:7D:CB:AD:A2:6C:5F:BB:D0:95:4D:81:0F:41:59:C4:A2:A0:21:B2:B8:E4:7D:EB"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: x7i0.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: af88c4899b804c97120087d96e5e8851\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109853,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"14fc3b36adf7e819d88ef1348c06c3a1","sha1":"4c7429d8f0095b07fd50be3572ab02572cbc1f2a","sha256":"a95c4ca0a293b50652f957e87855ec7e21ce6148b87c309cb1cc836a5f93b201","sha512":"9a1d0cb792c616760e1d72093ac7cb5501980d134e72b77363df6b267e2e2b04b3db004dd3db57cfbeb9c91cc6ed6f019cb641145eb007266f2ea0bee7933a0a","ssdeep":"1536:KO5QiEOxo8EMC9uqkoc+idHLyR45HjQ7anWn6wTEMtwO2C:KO5XUM/uixCTanW6GEEwO2C","tlshash":"21b31b9c625334711d7a9129385fc44daeeaef80148e89e4d0daac732653075d3bbfe8","first_seen":"2025-09-19T12:59:52.931219Z","last_seen":"2025-09-22T07:30:59.016971Z","times_seen":50,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":112,"dns":26,"connect":30,"send":0,"wait":56,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zorroplay.xyz/strumyk.php?id=796","fqdn":"zorroplay.xyz","domain":"zorroplay.xyz","tld":"xyz"},"ip":{"addr":"104.21.68.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zorroplay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 18:54:17 GMT","end":"Sat, 15 Nov 2025 19:51:45 GMT"},"fingerprint":{"sha1":"58:33:D3:AF:2D:E1:0B:85:50:FA:71:97:94:98:D2:C2:B9:9F:9B:75","sha256":"B8:67:E7:EE:5C:1A:19:9B:5B:23:BD:8F:39:B8:60:B2:88:AF:6A:57:F6:4C:52:07:1B:88:31:75:3C:F9:96:AE"}}},"request":{"raw":"HEAD /strumyk.php?id=796 HTTP/1.1\r\nHost: zorroplay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/strumyk.php?id=796\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:57:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k56Hs%2Bz36jyoDm0GqOlYo5RN4I%2B9UD2qsMvsl9DcKiYjJ1vbOkT%2F3UAzfUJJzc2c4sho7C8beFmR%2BU5xql1ibbnciC6doFEodO2u\"}]}\r\ncache-control: max-age=360, public, max-age=30, immutable, no-transform\r\nx-cacheable: YES, YES\r\nx-cache: BYPASS\r\nvideocdnx: NO\r\nnode: PHP\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823e477ce4d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T13:55:54.549517Z","times_seen":13622807,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fzorroplay.xyz%2Fstrumyk.php%3Fid%3D796\u0026j=https%3A%2F%2Fstrumyk.net%2F","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zorroplay.xyz/strumyk.php?id=796","date":"2025-09-20T19:57:32.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 12:11:28 GMT","end":"Sat, 29 Nov 2025 13:05:40 GMT"},"fingerprint":{"sha1":"8C:1A:8B:5A:0D:05:D0:E1:27:9B:25:7F:4F:AD:2F:0D:B4:F7:E5:14","sha256":"6E:3E:4E:99:17:89:21:6A:AA:63:31:A7:CE:8D:C6:4C:29:96:63:AE:64:9F:42:19:D7:28:92:10:03:EE:8D:75"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fzorroplay.xyz%2Fstrumyk.php%3Fid%3D796\u0026j=https%3A%2F%2Fstrumyk.net%2F HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zorroplay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:57:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nx-t: 0.504\r\nexpires: Sat, 20 Sep 2025 19:57:32 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jtls%2FFRyTKJNW%2F4akNcDX7E0i%2FnmNB5rOU60x2xwetDE3V8EuHaLu7Tk4%2BlS8P6izjwDmH5oAl4DccnD8A77B5%2BuVRYQfv3pHgY%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: df=1758398253; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Mon, 29 Dec 2025 19:57:33 GMT\r\ncf-ray: 9823e478eafc5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2079,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2077)","md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"0441a70bb5e9347813a2007a55ff235fb2324928ac1788c08196d804bc785faa1b6ea6","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":45,"dns":20,"connect":1,"send":0,"wait":297,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}