{"report_id":"5c16d571-6181-4ef1-b25e-cc2eaa5c3038","version":6,"status":"done","tags":[],"date":"2023-10-21T08:01:31Z","url":{"schema":"http","addr":"www.nsw2u.com/","fqdn":"www.nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"nsw2u.com/","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"title":"nsw2u.com | Download Switch Roms eShop NSP XCI NSZ"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T18:50:05Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-10-21 02:11:14","alert_count":0,"request_count":3,"received_data":514533,"sent_data":1294,"comment":"","tags":null,"fingerprints":null},{"fqdn":"doruffleton.com","ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-02-08","domain_rank":0,"first_seen":"2023-02-09 01:02:57","last_seen":"2023-10-18 12:36:20","alert_count":3,"request_count":3,"received_data":87180,"sent_data":1867,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cloudimagesb.com","ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":23099,"first_seen":"2021-02-12 17:15:41","last_seen":"2023-10-21 05:11:13","alert_count":0,"request_count":1,"received_data":25039,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"absentlyrindbulk.com","ip":{"addr":"173.233.137.36","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-10-10","domain_rank":0,"first_seen":"2023-10-10 11:41:47","last_seen":"2023-10-20 12:48:35","alert_count":1,"request_count":1,"received_data":467,"sent_data":484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banquetunarmedgrater.com","ip":{"addr":"172.67.177.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-08-04","domain_rank":0,"first_seen":"2022-08-04 17:12:50","last_seen":"2023-10-20 07:18:27","alert_count":0,"request_count":1,"received_data":845,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.74.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":101,"first_seen":"2021-02-20 16:52:05","last_seen":"2023-10-21 02:32:22","alert_count":0,"request_count":1,"received_data":148208,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nsw2u.com","ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2020-12-05","domain_rank":0,"first_seen":"2020-12-20 03:30:48","last_seen":"2023-10-15 21:45:27","alert_count":0,"request_count":28,"received_data":915167,"sent_data":13741,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-10-20 18:12:03","alert_count":0,"request_count":5,"received_data":3520,"sent_data":1693,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-10-20 23:31:08","alert_count":0,"request_count":3,"received_data":9937,"sent_data":1369,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google-analytics.com","ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":40,"first_seen":"2012-10-03 03:04:21","last_seen":"2023-10-18 08:04:58","alert_count":0,"request_count":1,"received_data":21523,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"definedbootnervous.com","ip":{"addr":"173.233.137.44","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-05-22","domain_rank":0,"first_seen":"2023-05-22 04:09:17","last_seen":"2023-10-14 22:50:32","alert_count":1,"request_count":1,"received_data":11677,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2023-10-20 18:13:32","alert_count":0,"request_count":1,"received_data":738,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.nsw2u.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2020-12-05","domain_rank":0,"first_seen":"2022-09-25 11:08:26","last_seen":"2022-12-06 20:44:19","alert_count":0,"request_count":2,"received_data":16969,"sent_data":736,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":3021,"first_seen":"2013-09-17 08:14:42","last_seen":"2023-10-20 22:19:30","alert_count":0,"request_count":12,"received_data":188836,"sent_data":5814,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.r2m03.amazontrust.com","ip":{"addr":"143.204.53.97","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-05-11","domain_rank":0,"first_seen":"2023-02-21 01:06:24","last_seen":"2023-10-21 02:13:31","alert_count":0,"request_count":1,"received_data":942,"sent_data":340,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.vfl.ru","ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2001-02-13","domain_rank":275945,"first_seen":"2012-10-04 04:24:47","last_seen":"2023-10-17 00:13:10","alert_count":0,"request_count":8,"received_data":470034,"sent_data":3524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"friendshipmale.com","ip":{"addr":"172.64.101.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-10-21","domain_rank":0,"first_seen":"2022-10-21 14:15:25","last_seen":"2023-10-19 20:44:15","alert_count":0,"request_count":1,"received_data":28527,"sent_data":395,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c0.wp.com","ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":6988,"first_seen":"2018-09-24 17:59:05","last_seen":"2023-10-20 18:32:35","alert_count":0,"request_count":12,"received_data":405565,"sent_data":5268,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":2545,"first_seen":"2017-01-30 06:31:40","last_seen":"2023-10-20 18:36:35","alert_count":0,"request_count":1,"received_data":239,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"professionalswebcheck.com","ip":{"addr":"35.157.243.66","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2022-04-01","domain_rank":0,"first_seen":"2022-04-02 00:47:29","last_seen":"2023-10-20 09:55:57","alert_count":0,"request_count":1,"received_data":416,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"overcrummythrift.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-10-10","domain_rank":0,"first_seen":"2023-10-10 11:22:44","last_seen":"2023-10-20 06:29:47","alert_count":3,"request_count":3,"received_data":33696,"sent_data":3040,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":2711,"first_seen":"2017-01-30 06:06:59","last_seen":"2023-10-20 18:36:34","alert_count":0,"request_count":1,"received_data":11179,"sent_data":400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-10-21 02:01:58","alert_count":0,"request_count":1,"received_data":8888,"sent_data":461,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"definedbootnervous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"absentlyrindbulk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"328b8123661abdd5f4a0c695e7aa9dcc","sha1":"4164f78bb52e9f2bfbb7ae5fd519b4638063c1f0","sha256":"27dd9b075cc59cf5f3c0f6ee075f4bd113782d81ce30a4f16aac669ecfdc4fa2","sha512":"69824b237c9b22bf0b355ec684ff5db7fb13090421ab21ba4a167f453b598b2550b04d9586a9dfba619e036f6d5723fa088214a5c30831c62224e61a6c260b5d","ssdeep":"","tlshash":"85014c3a77042b3208c6e2a3a87e73957d2760363a4658b8291cfca6cc51d561175da9","size":701,"data":"","first_seen":"2023-05-10T12:45:08Z","last_seen":"2026-06-27T13:02:46.234195Z","times_seen":3614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dab1184244d47ac25667c940eff90dfc","sha1":"6cd473b92e1956bd305f0056a46f18b6a4dfd80f","sha256":"071ab71aea40b26ed6bb74deeb4fb203bd381f3e418588089f4a46d36b3daa07","sha512":"8bba966fd42b5fa42535460e6721033f827c43e4fd5b2ac3e4dfb6e95c86903e133f02f0ffecb749c29cceb3de8b8a32439a3f0b8cc8d2be68a9d15ede917bdc","ssdeep":"","tlshash":"98a02200f0ff288000a002b0b2ac00c2bbc20a800b300808328cca0c3fc20a0a0cceac","size":70,"data":"","first_seen":"2023-03-08T07:05:06Z","last_seen":"2024-08-21T08:58:36.182776Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/sandbox%20eval%20code","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"bbc02b137750017d2f1016b0b9009003a1c923005eb78001f006001f2040eae88dc180","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-06-07T08:08:41.456567Z","times_seen":79430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.1","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65cb4d4cd399c1b09798edfcea1b41e","sha1":"49a2a4a502ac7e2c15727c3b7fd6e3d9d5960ff2","sha256":"d2e0e4ea817ec2075d8ad25c70e9c8e124df393088286cfe1e75dd56069abc2b","sha512":"4552173d774431c069d306c387da8b9bcf3f71a00c5453fbc1483362bb8a42ce73e123b8f616b351e37a1edea484c1555c53e6b96cb86d11db335a155506c070","ssdeep":"192:9ti9tr2idQ9KLAtgZLgCB8piI+C5SyHQMVTtei2lm:GTrfdQwLAahgCCUC5SyHQM+D0","tlshash":"e102432b302c51f9da732ee9fffe0264746bb251f12191057e1d2406bb984687570abf","size":8005,"data":"","first_seen":"2023-03-29T23:25:58Z","last_seen":"2024-08-21T08:58:36.135896Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d8aab20ec0137a23e4ff03411bd06c","sha1":"bd7e901bbf5968d13abb3dee762244715541bdfe","sha256":"651cbb53c3e67a452582c597784a988f2ad5db132c709c279a23ad74b9917448","sha512":"570f22ab69647d211bebf6b84129e2ade1dcf6ac390f584beab1e56489e7839fcee52a1a678e410cb313f2a03bf8ac2d1df1f1d2c33fb1494ed40b6ceaa394ba","ssdeep":"","tlshash":"4ab01214352f1311c11c68cb24bce7e839f4606d36711204adddd93de5d9da217a5db1","size":110,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-12T13:50:15.160718Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91f51021b7facfc276086d27fa65c473","sha1":"26171fc83df06a093b5760bb0ea2b78f9aacefee","sha256":"e67e7ca5672b9d50d3020a0ea25054f83a552dc00c9377e164bcc9bf34463fdf","sha512":"958aeb7bdcf1f08d1cd47f8769279a1c17e76a5704618a4be6e5477b50055256ae003cfab6a67192b6864a35be29ad18fe5f9769672a5df86920169956df698e","ssdeep":"","tlshash":"bec0226bf00924703681321bd32300b282134058fed0c8d4a32193e31830d3ef033221","size":187,"data":"","first_seen":"2023-10-15T00:59:56Z","last_seen":"2024-08-21T04:41:52.551624Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"08fde8ea209fc5fc4fdb2a9c614edaf8","sha1":"7b54ed7f80a3c3187c406e0c3d9ad247516a05fa","sha256":"ec939e7c2a87ddbb495dbe67a38c2291826a37c7c00e03f22ba7fb05d290349a","sha512":"79166cb0ebb8e43595443ca0dad0b64085bea6de42d7d9dedd098174a995eaea0b18c7a90dbe323e9e4808b42b9e4f277ecceaceffc2fbc4c8ad11df5e03d27f","ssdeep":"","tlshash":"25b012ca0444617c23e246028a333315736340fa4c00704080000421350c34fd57bfc7","size":90,"data":"","first_seen":"2023-05-25T07:37:48Z","last_seen":"2026-06-20T07:56:30.238547Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/i18n.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2c4e2a562e06e1cb22293a5b920aca6","sha1":"a7b5a369ac4883f1ee7fa701b238d20238b675ca","sha256":"698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f","sha512":"7117e879a8a4d8c8e1acd1a34247a7cf420128da970ed42975d6a04665ec571dc388c62fc3b50deda0b9e896f599d56ffbc28b25a45119cd79f5f45e3e58c178","ssdeep":"192:+mBU3rRetT+w48Lq55J2iBYDee8egqF+i47HgxOwUwAIfYV:1BU3letT+wnLqNJBYDeedF+D7HgvJfYV","tlshash":"7d12c5edb0d6f056235320f044bfb804f136a99531aa98e0db90d5e6bd708d961b3fe9","size":9445,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-06-27T15:39:57.808212Z","times_seen":21125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:OQC5XtZkovHIdcCxoE6FxqIvqwk+BgKyVkM9InkxbI2TEK+DtZzAPOj:98kNdcCxT6T9vqwk+yKGkmxbRR+DtZzt","tlshash":"42f1c49f369170739edb7465427f311ea73674239c42e121e2f9d095893c86aa323f2e","size":7889,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-06-27T18:55:05.331085Z","times_seen":14211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23ba5b3c2d71c61ef5b40a4b5d84a17","sha1":"8732a5e5f3d3bd88ddedb1cd24c2d17363e019d0","sha256":"c2ec440a15201b83bbb8914f9e52de7f4455e44a992f6ab761b5bd62f3a1045b","sha512":"6eaad20cd9b49550d1475ac9c95c1bf1cab244b311b291b5ef50a1591340c6d9bb7d46a2d7382bc5c8e87375ed9db6e6b3b37d1bbfea77b7d6a7cb0b4ca323ff","ssdeep":"","tlshash":"1ec02b60af44241b6d9b3d4f0f8203f0e8cb0203298c0ae233e0c9c37042313c040440","size":145,"data":"","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-08-21T08:54:44.416211Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b96b3f3baf250de04ee27395c0ecd27","sha1":"2b5763dbc74be334d7cc03df730d60c8ebdb316f","sha256":"aadb72e56777043ffd5978babd496ef438793550f9054f510076609d4c615221","sha512":"4496321970b835c0941c9e6b8f5bdf34a5b9d1e8026c6b2b1dc41e918e95cd8ff9302e4524e623fe06e1f2c0c8f258b6cfa22c8c96f8d6795d348198daafed39","ssdeep":"","tlshash":"d26109644dd2a2396c5378bf62e7d3542992c20b20c8ed87394ce7500f72bac8db5e4c","size":3260,"data":"","first_seen":"2024-08-21T03:57:41.041291Z","last_seen":"2024-08-21T03:57:41.041291Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38fca9e0ca205130e3dddbdcda3b4a85","sha1":"2c0ac19235a88fb361aff39bc0922e4b946c2c5e","sha256":"43c8d614ba6e97fd9ee9dcf0ae49334ed5d601403ffe8551a74e1a9faf70efaa","sha512":"ab042b5ed6a89ca611a4cbfc1a771e704bb6d9413dd41f478bc9f4464d44b4a8aefed9df5726ccb28fa5830cdd24f470b8c9ce4bd3e9787b97f8e1666960415b","ssdeep":"96:ZFQq7RRpbM1ZzOL8kk66cl1BS7gVvPos7UAsa4iG3aEWqMW6GjOw:ZZRRpYDyLw66cl1BSsVZzrhG3pMW6kOw","tlshash":"a8d180e868cee16442ea52a8084b30d871bb3695d00d9584f2f351db2d73c8eaf26b5c","size":6206,"data":"","first_seen":"2023-09-23T16:46:34Z","last_seen":"2024-08-21T05:56:53.953099Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"351390b839bf683126e78afb44004636","sha1":"5631ca683d75c60eb3dba2bed734716accbe5426","sha256":"f9a6294ee0f29b05710d50c6f338bbf5465c1aa22a5d0a7a73e99bbe0845d4b0","sha512":"cdd5cc960f6ddd84f20df1f3c704c3d4fd67df6775744d47a86648bed42800c97de9d76956b694109f0c791ba9c77eba4c3fcfcc5e2d95dfae3b0115debf0390","ssdeep":"","tlshash":"cf515422f2e4613983ad1724c26e731e547d51cecec749abe2b00931aefbf445c47a68","size":2817,"data":"","first_seen":"2023-06-26T20:11:26Z","last_seen":"2024-08-21T05:56:53.89928Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cf40a03ca9032ffd8a53cc30b4ab81f","sha1":"d33fecf8ea7ce23a3a4a846f46b30e0a660abbf8","sha256":"65aeb663deba1f501bc69edbf6be282e3e7a58129018ffde5ded71663f1131b9","sha512":"8600481a53a033be0f6e74578e16f9e06d648f7a73ad10dbca2bfedb67b7f3ab42726d1e0d5ca023ef8ce7a5e394ad531e09dd8adbf83eb351aa6dedbb558d14","ssdeep":"","tlshash":"95c02b0122803e8b14d00ee0253475f347d11262ba30bc02198fc1904f15801ccdc317","size":134,"data":"","first_seen":"2024-08-21T03:57:41.043108Z","last_seen":"2024-08-21T03:57:41.043108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-27T14:59:53.162302Z","times_seen":118696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?ver=202342","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6c87bc49e7646c7ccda489b9defc829","sha1":"9003fc52b4c4014b4bd9fe2f4506440b299478b2","sha256":"e97d12898ebf1039197a2a1c2f87bfe3b56f93eca2bfe60a46a1053fab7ad860","sha512":"625c15dbc10c9f9aa946a4e3a6ae95227e886fbd229d4999d942cf7179acc6a5d06a52d903c3016b3baab7abc02b22c8acfcdf570e93b868b23262cd9c19142a","ssdeep":"192:6EAPyKjIhY2MpyzWwv7afoUOl1T5ANkbAsw6EbJK1Wg:5pM6WwCe5AbVK1P","tlshash":"a022c6ac7151f03406a750a9133f670af23a4a25385b9494db6ec8f03e7899f4277fad","size":10778,"data":"","first_seen":"2023-05-15T15:42:40Z","last_seen":"2024-08-21T09:42:58.322033Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/navigation.js?ver=20120206","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a5b08af3e63049707797efe65eab86","sha1":"f66ed251ef8c24614ff24376d472f2f394f7b93f","sha256":"d79752e33e156b5cb219ab45103fe0ed7d80f111533dd8eec42c57546b4da500","sha512":"0615e64c421c5621cc07b9ea44379ca7aea5508e66656cceeb44cf739e3512d10430343f36a01dd2dc2e20c811c94733972fbd5ba7e35bfcb487686c720e5ce7","ssdeep":"","tlshash":"3651129328f6223f959aabd9625d5053353f8e50f714bd12f834f4801818a41cef9ece","size":2279,"data":"","first_seen":"2023-03-07T01:39:41Z","last_seen":"2026-06-27T16:30:55.523757Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ead7e34b8fbb76cb63a9a39943859e","sha1":"63fd3f10bd402ea5cc976e7bb1a45094edc3c9b7","sha256":"9e66e7b215400aaa09d635b39effef5986bfb2e86a789c6fd4b8b36ffa52ba09","sha512":"13803ebb4af82ddef125ed8c7c1715bb9779402ed3a997a46ae0f3add9e284862bc4572a6579ab1356d4f7e170de25371b56cc4b716f8d4f37af16d5831ed325","ssdeep":"","tlshash":"40a0025670d535250737143ca7c75125201704d020aae450751d82c12b250367755455","size":53,"data":"","first_seen":"2023-03-12T08:01:59Z","last_seen":"2024-08-21T08:54:44.427333Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"f63197075511c5fa022195d6ea7a3e2e61337628523440a8f238f23b23770cbf3d1abd","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-06-27T19:17:12.504761Z","times_seen":78565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-27T19:17:49.305532Z","times_seen":858261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.1","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87015559c535c9314bb1a8d6ed05597e","sha1":"b9e3b22a2bd7457d044551d5126a29bae25489a9","sha256":"e5903bfc201247ffb215a9c8ca6b66cf2b77d63dc7c7953937619535dd394a7e","sha512":"74247d596dd47219c7db120b8d30a12fffbfae88155bd5281ffabe68eefcb33bf6bfe88153306844127902d82d83c472a1f9f8e59024c5ea7603bc1611efca28","ssdeep":"","tlshash":"bd81962b30a8a1b8cd733ffdbbfe55653216315021565328bc1c66163bda22463a4fbd","size":3949,"data":"","first_seen":"2023-03-29T21:02:17Z","last_seen":"2026-06-07T08:51:33.827118Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doruffleton.com/tag.min.js","fqdn":"doruffleton.com","domain":"doruffleton.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c433b3a7bd223a09d253bc43a4b0e1b","sha1":"6b4d75928278e355515d83228c12b33a7054ec08","sha256":"09f60ff073f52f912ab3522789cf0379dc3846f444566af619d2af5f1af459b8","sha512":"1693a95e5848c3c85f68dca8f8a914f3002a2f7e1b5b566dcc767328b3e579681d478657c4dd31aba07946af90e737c368f51612af138bb203849d49547c4e65","ssdeep":"1536:u84Cioj+QZ6p1cZzUUkqtus603frOhtcsNHa6fGBR:wo/DcqtP3fqffW","tlshash":"3a83735a709070b01a33e457572b222a96b75931f93b9030645ebb9e3836c2df72efd4","size":80790,"data":"","first_seen":"2023-10-20T12:59:20Z","last_seen":"2023-10-24T20:11:50Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3df08b577f9316760bce2839503a1ab6","sha1":"0e31b3601310d0dbbb56a3d8ca63ece87bc86a92","sha256":"cf738c56ad6b49abc628b69178c2872f3a2cba5f6a44a136855924cc1cbffd73","sha512":"4924a70b2a2548ce290ecd7229e060729f68d205cf47f4526feaeda3a415fb351ca2fdbc777513cb9330057c16baf09684e1f802a360c0159fd38f6df39224ce","ssdeep":"3072:C4T0tIl3G9DDDy8uhjnbhFo03U20MuY6eOiF8W6M5LDKQVishagQxKQw+H:XP3aDDDy1vq0SDeOiF81QvKQVisA9PH","tlshash":"9624f7d9b393706a82a7b479503f010ba17b6d92f84cccd8e189c5d42eb4a99517bf3c","size":214598,"data":"","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a3dd4ecbf227acbafcff33d68dc71d","sha1":"7421115ddcd5d436b89a1fd27e0cdce5a01978e6","sha256":"30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421","sha512":"850ecb2006210f5ec2661e9b0f375023b3538541e66467006c60df0961cefec3843d101d964405838813b0a85659b2353cc52f8c3ec98c0fb9c77a47db7067ca","ssdeep":"","tlshash":"f041e1ee7654b433adaa24e2511fa524116730331c1fad64bf4bedaecd78ce72026960","size":1872,"data":"","first_seen":"2023-03-07T01:32:49Z","last_seen":"2026-06-27T18:55:05.413806Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4f28a615173df36cb84be2b345816e","sha1":"f709263841708d9e40268f24a0072ff4fe811b35","sha256":"6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6","sha512":"2685373f6522c039f17123683dbc4a2d6eaf572bca72b6019b7fcc9b15b2aa295cacab19b99a1161cc3e317d6bdfc3bdc2bffbfc87d9ea9086da58a013849910","ssdeep":"96:bfe7Sm4zIHPQ6xLROGj+12NN15PPhd50guFhMPq5TK1pFZ9OtsH5Jsd5O+Ark3c:bTmAIH/x1xj+EvWMPqtAHutsH5OKrks","tlshash":"96e1a5ddb5cbf00103577a24951f1009e33b655ee84a0048eb58e8e2fcf481ea76af7a","size":6607,"data":"","first_seen":"2023-03-14T07:30:15Z","last_seen":"2026-06-27T18:52:59.114835Z","times_seen":18362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a55a8928cbca5bfac5a66c1723452e6","sha1":"9f786632275f60fbb585193fa762b0dc5e711a51","sha256":"7528db72a98a32805f731cc62e8a47bf9218f6e7d02183d9c77e73868e8884a0","sha512":"b844af86edf5c3c3b99d60b75a654047bd5b88ee3a692f53186c3b8d3d2a45503c60b72e6aa9a1034cbc6508de4c6162f1132d30c70de23a5a49a9b40e06bef9","ssdeep":"","tlshash":"42e02de90c81b7990cb74c6388e2c3f1d2be0c1b778048b63bf20c2600c67b40443e15","size":327,"data":"","first_seen":"2023-06-05T20:48:48Z","last_seen":"2024-08-21T08:54:44.416758Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/sandbox%20eval%20code","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4733472fadbcf993b031e917e8c1a8bb","sha1":"25a0a1bbaaefc39004ab2d28cfa0291c2920c8d3","sha256":"2d901063b6ea17df1dac8e5cdcdecd6359fe0c8613a456bfc1f3b15b03dd5143","sha512":"dd51a4f3b0302a23130b3c562876d7a1335f540bbf9fda195a6180a6c83dcc9ed6df163fd156eef59655b9aad0923226955a9768d78c960dd42b4a8939083d2c","ssdeep":"","tlshash":"74b09268a2a9b20508373c36b5778124ab6b7c94b5c31605994d2d500f2e71c02c788d","size":116,"data":"","first_seen":"2023-03-12T08:01:59Z","last_seen":"2024-08-21T08:54:44.40504Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banquetunarmedgrater.com/advertisers.js","fqdn":"banquetunarmedgrater.com","domain":"banquetunarmedgrater.com","tld":"com"},"ip":{"addr":"172.67.177.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f73754c10536a2e729f6d06f9e7f191f","sha1":"f69f394a68fcebecbce2ada0f6f8a91ffc077790","sha256":"06dc51e59503bfca6c59b6050f0dba624b14358f3644d81a3f6605f6586151f6","sha512":"9dc4262a5f4ca5cc79f073bf70f89dfab4e26175d58e67b569652fbec19c7a9530ac23d1c7ea3b10cd596ad4216fc5985902f6c4a3b73911b46e4da4e54baa09","ssdeep":"","tlshash":"3de0ebf01d833cfac2ff09407b66bf5a332633241010ac200c96b004023f61240a8c8c","size":294,"data":"","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-08-21T08:54:44.400943Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"86700c0e2662a8f57091453a874eecb6","sha1":"fead3e1cc70babadc70973835289f17a7ad27f29","sha256":"cb2f6663aaf8c48f2550769366eaad8a8d8fc60500de52e0b0221454ef49bd00","sha512":"d92609345235dc7fea9352f876adff7ada7fbc383b6e319d5d641869abed8a70d6b1392972f48f6977163ac7cb8c7a5d77864d74d2c88a78d13bbf15988969f8","ssdeep":"","tlshash":"0d2135a407b73c094c2eb452ce0d76a743422e4bfa2838b069ed1226713f0e9517762f","size":1443,"data":"","first_seen":"2024-08-21T03:57:41.047767Z","last_seen":"2024-08-21T03:57:41.047767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3940eede2b6841663dddd9e946dec11e","sha1":"ccb59e18338a06a5f0168be0bd1677710f6d7bd4","sha256":"b0fadf75681475e975bd2bdaceac6c08e8f5ef06f9a1c7fe9f3f7a571f5bc935","sha512":"53abfec5d466b05b21776280dad09cdcc6b985a813c8e47abd7f2489c80673914cbb1b9e400f319357dd0e6c3c1c663539eafbe2c08fbab0a01c4a23f1479836","ssdeep":"96:g5VdwhZhc31ZAph+87FLccnPOaB+FLPlkXLGLp:fQnApTxDB+xPlkbcp","tlshash":"98a1cca4f0c4ee8702f60bfe26e6145117291863973d162035de806ddcb8e8842fabbd","size":4591,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-06-27T18:13:35.058752Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/hooks.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd48eb3bd568033e96caf0fb62e6690","sha1":"b38066999294b99d92d95db5f38bc15707eb1f22","sha256":"7868467c94a5aa0b3f11ef542f45287967f9627b3b5acdc86e47f8f77a126596","sha512":"7fec30cc4223c39d9ee3ccbba8cc66c90467a9987279334be43aae4c251f6c618f6b3ccf223147c79ce6c463c89f0ceb0d0e4e471ad9ab6574ab32af728a535f","ssdeep":"96:+n5ggxcq5Va/rqXCgcfT19cJ3rAgNWNSt5s8G07AajUR1rvgdH4+TtW0c:+5hcqXmrHfB9cxEkt2WAM60c","tlshash":"9ea156c474c3b430d2637063a07f549ab63a69e5782dd080e25d90d67d73a8de077a6d","size":4627,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-06-27T15:39:57.806696Z","times_seen":22532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae2b751a5e73fa3fbb58a72dff2881c","sha1":"f45721d161c83844258500fc27fb4242d20de1ed","sha256":"66189b971bac09e032b95af5631af2503655647425fe9db9f0249093cbefe9e4","sha512":"b4bbe576d8bd055de3069d64c98615e1d55c89a4e7cde37cf6fae2df2f021263f4a21fe429c537da4b2be1b777dfc6df5353f8fe55062203766c9942f3f0a617","ssdeep":"3072:fKgT0tIl3G9D7Dy8uh4ehFo03U20MuY6eOiF8W6MPbDKQVishaOhjxKQw+H:nP3aD7Dy17q0SDeOiF81OfKQVisAOJPH","tlshash":"1d24f8d973c2706a82a6b475503f014ba57b6da2b85cccd8f189c9d02eb4a9a4177f3c","size":228891,"data":"","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88744222f59f4700c6bc9212e12a653c","sha1":"df0bf43d60bed605eabbcb2776e0fbb46f1d1c05","sha256":"4b179f8204186f3aa954f47cd81dbe86bf89c08edb8d5341b8e0697d99e35073","sha512":"3b1c0f5328e75d0264f9378c83d6f04d7b55b512c8d3a4cf282848dd69d6bd7910c98efed21c640140a77a54c24e2d0338e2695381b3fa48aecc9bd594af29c1","ssdeep":"","tlshash":"471199ab7234577c0d9a7b9b0e9f164878ab2c81b811a50bb45c7849432cf56c27ff78","size":880,"data":"","first_seen":"2023-03-07T12:25:13Z","last_seen":"2026-06-27T17:17:00.127342Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ed39eb42c8c450b59a24bab9cfa7fae","sha1":"7fdd3fee90709f703fac533b6061864fcd7ec206","sha256":"35ddb1ce73a4ac4f4792b00c8b8c56cbf857910ada5e2a0183d898b01adc16bb","sha512":"68f64fe44150adb2a9aaec794e1fa8af4403092fa86f9b98b1c996e51837bdb85e79e807b728f5598defb19ba3a8b3574138c03d34fc840d9029cceed2531c9a","ssdeep":"1536:RbN61LRiPamo+aCWsQC0ZNDHbehVk9c09DoeVOk04oPMgzv1zLVmrVegW:RbZPs3mS4D4MMgpQwgW","tlshash":"6dc3855e7251223246efa1b6152f060e71335b387542849cb179ceea6eb8d4832dbf7c","size":123510,"data":"","first_seen":"2023-03-07T12:57:57Z","last_seen":"2026-06-27T06:26:55.958725Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"492b6d5195d2fbd9e612a20a9bd1a009","sha1":"abd6a079460dc394397df83a9ea641ee03884c58","sha256":"937ba827d294056f81fcab0e37e5769ca968072be205dcd7125fb61e5a7cdac9","sha512":"02faddc16bca68168bcddfd10470627dae1b8ebfaad39c251527546eb000861e0daf9ac8ecf90bee9fa6f3faf0b095e00bec04c72c4dd16aa7b141f0c5ced3c0","ssdeep":"1536:iI2sRxi1wDn4Lh4MCfU7M2NvEhPB7Y/gXLuWeTgfcZ1hchl:PPr4Lh4MCfPgEhp7Y/yyLgEnhs","tlshash":"a473f980b4e4b85905fa012bd47f7634b3ac1e4e641d0480f7aa9cea7423e59a32fb75","size":79073,"data":"","first_seen":"2023-09-22T00:36:34Z","last_seen":"2026-06-24T18:06:00.132213Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:MFRv/5sAwj4ZsHA3nc9f9dIfssIombo9MXGz:6RXBtncdIYaM+","tlshash":"840221a83719b93358cba0a6607b174326232027584a54687738dcefcdfcea91573fb5","size":8171,"data":"","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-06-27T18:52:59.12594Z","times_seen":49789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"definedbootnervous.com/a45922fa4966955cecdffbdde5347ae5/invoke.js","fqdn":"definedbootnervous.com","domain":"definedbootnervous.com","tld":"com"},"ip":{"addr":"173.233.137.44","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87a182707920d7664c1ace9f12b53c1","sha1":"1164f79c904bcd13669dbb0fe14ed1c8c941ff25","sha256":"aaed11c14a669e672932b0d75843c883d05884f5a12a86084b85675d4f1f1fb2","sha512":"e03419b6948a2902ed1e24ac636bd1b422c31343e7878f46967f68f50f6c93088c319161669f1da629717fb706c3ed6e17763e4814e09aceb0a75101096ca1a3","ssdeep":"768:BjbM/sa3zmX+AeP/OCqV/Gkg0LHJm1jtwTpUK521Mj6:BqqvCqV/GP0bKpMj6","tlshash":"ccd284593d80e84e17a78faf732bb4dceada085dbc45480fd116bc5069a6627ead4830","size":29673,"data":"","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70c183398322d73b50b8b4abece239a9","sha1":"e79dec738456aa7882ffbaf481eb13849da7c227","sha256":"969eb11be3a2271857373fe0e1424232f62f24ebc4cac8cd532c35d43634c046","sha512":"38317ee7e62ec157c0c42252ba672bfbe0ff5abbbd1e54e028824eeaeb82bd07dfbe986ad8961003706975ea2d155c33ca0293a92e16cb8e38d26b201548a3d5","ssdeep":"192:pshByU1qz7Ka/bWaFtiWdKCA/CtmsyatX6yvqNeEH7bV:pshOFN8C2Ct5qyvqNbV","tlshash":"36f1968d79c5b43b62b721b1483fb52a7b3f21a3290e4051da19c4f6bc35ec99113f88","size":7553,"data":"","first_seen":"2023-09-23T16:46:34Z","last_seen":"2026-06-24T18:06:00.118403Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"overcrummythrift.com/ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js","fqdn":"overcrummythrift.com","domain":"overcrummythrift.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d887ee21cc53720d63a4e09ce0fa4eeb","sha1":"b47652dfef4c396c54ea6d91c01c2b974096d3b9","sha256":"f34d7e4d33660eb8ddc7b8926a0b8c2b1edb170cc5fd007ecf1a35abc352c0c2","sha512":"64387d3f821c2a965f1f123a92c75154a7a78a40e74b42462002c9d1ad1c8b1c800c1bf9972879fdb3ffeef89a6808ad6e1536834e043f83176e6ffed22c74f5","ssdeep":"768:0aqnrDCZwvjKSOlEJm5TSBmdGvD45QwvaUMAI5pToBq79p:0aqnrDCC7KSOZE2GvD4RaUGsq79p","tlshash":"a243d5cc7f647c1543a7a4b3731bc247d02a1d4a998cc4eafa23ac68693d325f535b98","size":60120,"data":"","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-262573192-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e270f689d0703e72b7a58a610ac88d56","sha1":"22097bcb9127b879722784c05d62a11fe7fc798c","sha256":"2cb09ac6f8d66e2e4413534a01b5859ee201afaea65826d0f4b5a7f59bd3a9d7","sha512":"297477c29d936cf7d8a801a277c98cf18dda3788c8284daf2877fe2c53e41bde56df4a995d2ee1f8df6dc9f56678e9e34fd745e550cdc6a54b1e2dfab2ce365f","ssdeep":"3072:v8T0tIl3G9ruhVFhFo03UnMPYNEOiF8W6MPlk8Erw+3:EP3a67q0NQEOiF81olk8c3","tlshash":"9314d5d8b397b06682a7b475513f010bb17a6d92f84cccd8e18ac5d42eb4a99417bf3c","size":191044,"data":"","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.core.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e78b1db7d662e95ae8c3506146b080a","sha1":"9f1675c87a306e4dd45f84d0b7ac484ae506245e","sha256":"6e79424f448b401656e2384514c9332a4baa6ab4d458ba048655e01f4b1c60f2","sha512":"5daaf41da784eddf054ce3456a5518ff17c0159ee7950f08fa7285adf10175b5e93f9804bb7e0f6aa418e1995c333650f3b5447a65fcf762bac11cee2f05b71d","ssdeep":"192:qsW5PVf0d6j7ZC9wgg/Pr7SFAiigPNECtLBulCqiR5DN0gB53RNHRkhg9lteAyd1:oGAjpTehEhOcQmANHk97ecaSpMqgGJ","tlshash":"4752204d2aef2163443b3079039f1094b17c96ab6619dd507c6da3a41fa593583b3fec","size":13696,"data":"","first_seen":"2023-03-08T15:39:55Z","last_seen":"2026-05-31T19:38:37.930064Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f25c19a5de98a9d437a64f3ab177c9f9","sha1":"fa9b7e79ebfd6aafbada1ec30c8cfe15b92d2ce5","sha256":"f5fc4d722db65a21f35c6af539eb92abb95220bc3d5f9192db41dfb0f3c83d1d","sha512":"edb0191ae4be6b9b8f5268e733972026598b12623fa63e03f4db744b26f62f7cfc8b214dc0db0bf753e1a7b9e1e721c5b11774f89cd5cef5dfc0c4f8eff1d5dd","ssdeep":"","tlshash":"edd05e103cb62c21159e969471e06082399d2a6131615a49b248cd283eca590b28cd2b","size":244,"data":"","first_seen":"2024-08-21T03:57:41.051171Z","last_seen":"2024-08-21T03:57:41.051171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51480f0afb0a30743ae59a3455633c75","sha1":"2b46f094cb87015fa342da2bf1767413ec5c92b5","sha256":"108cd01e5eaa34e9942ca8af9f8fe70271d3a3a5028fa085c628c162c3706d2d","sha512":"b69c1d8b5f4d341b1acf774b7a7fe1d9e2ddbab186fb11f5356882b35e203361f809c2c53c73aff3be25fb7f2d36bb4a0a06965abe468b9b54eabddd3e715394","ssdeep":"1536:85SHtSPqWCF1HoJtfJnRRqRg+DT5eNC8cQBiDzd+QfhanKrHldfUN8D9ZvZ6iUgP:ftI8mJnetDT5EC8cQBiDZ+QfhanKrHL/","tlshash":"cf63e9d97282b4b742f3a1aa502f250bb23a6464781d4098f93dd4fc2cb9c8d9177f78","size":67604,"data":"","first_seen":"2023-03-13T14:31:51Z","last_seen":"2026-06-27T09:46:51.937855Z","times_seen":791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c7e73dd02f57abb6fec8fadea6e35b0","sha1":"dfec9a1a86ae00e26c0067bd8c8b7ea4860239c8","sha256":"d4e76d642b11df90fe1e33c420b70c975a23eebc7aea1416a272439ea9903019","sha512":"8a591ca4f78fd8bb6261f754c3f209f2d27075c1fd7001d0d7f27a77a16627ee190bd2816d5df72673d1973ba9f0a279bab046dc2aff1fcd60c6d91fd31b755b","ssdeep":"768:18HsYdCVZkFN5v5d3cPA8m4W8yPLyFXNA9qm4tAiNfUVm7QTDaQFNJ8y1CjmnAy:1qrvAP7m4wIXNVm4tXNjUZL8y1C2/","tlshash":"c573a399f4d5b0a017eb20b6813f190ff27a7869744e81d0e362e4d5bcb855e9027f6c","size":77230,"data":"","first_seen":"2023-09-22T00:36:34Z","last_seen":"2026-06-24T18:06:00.092347Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"88b76a9d0b695baedac86e3d6d5c9d5f","sha1":"e5a4e4f4f20e0aa25e47568b332e5822dc76c057","sha256":"589f3d490ae85cc5d4de6b11fe8e13d8b9394e6a72763089e0bf26374e6b5bc1","sha512":"809db888105815a8f791eebb698c2c1479929642c83ebbc919b8825213db0f646d94bee6b3a20cabf4c8ed7b62196079a46e4c2ca3314bde6894a29c4385fd95","ssdeep":"768:QSpPrfnn5xQqLoYpWIDcPN7cwu6wvW7eiNWD4cDlWcL41UMt:Fj5lLoYZycwu6wQZhcDlWcLsUy","tlshash":"71432f1c7c9260481952e3baa12b31d56a257200d86e4cf2b818d3d7de752df8da3fde","size":58923,"data":"","first_seen":"2024-08-21T03:57:41.052706Z","last_seen":"2024-08-21T03:57:41.052706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94279a9a0c4060a96efcf1da47716f86","sha1":"ea88b3fd8b01a8b86edfd0f4120cc9a834893018","sha256":"d41c6733a8c4a3a7f08204de8e3d60e1d2baf17dd7f675a26830fb1047fac40a","sha512":"1f47f774cd13f3d7f9f069e8471b6c96d049d8b077ed0965c02fc6a24ff14c0c41b245fff246aa8d0d5bb7503552ebedb0f773f92b5e48ee2d565277f726c2fa","ssdeep":"","tlshash":"1651522fb35536b7b81b10a1775e3714963330760c1ba8326a6bccacdd78c8a25a1938","size":3063,"data":"","first_seen":"2023-03-07T12:06:25Z","last_seen":"2026-06-26T22:47:59.28886Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bd53fe0ee631d5cfd895e18a53291d","sha1":"9d9d3c42c53ad7f906cb083a0d2d37afb4537764","sha256":"dfb2e16986e257b608b45d14396378a8f2ac6a7321c0dc2f13c66a33ec8e4a40","sha512":"41a97307b1672b9c276dacdc973cfcee6ff35961ac21c127d2263fc1c41e0356ee104456c0c5c2fb12ac30847f5c7d7e3ec4bb4f02e860ee3c3839ef984cafdd","ssdeep":"","tlshash":"b6700082088000b88030a00a020e3a3020083200c220022220020aa0a03c083b000282","size":22,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.66407Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"172.64.101.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d0450888479d4ddda305bd96206b240","sha1":"5b4595aab1cd3f854718e05db9be0c65a12ab2f6","sha256":"44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6","sha512":"3d9f8990f7fb6885869efd08dabd9e7e74202cc9531b9d4e5ac67d8f10ea13e6b5a86e77a82b03e6e666c2d3c9bad14254c9d2ac9c37e0df016eb5906ffcc6ca","ssdeep":"768:MpmI29BZeWZssERU8jnQY8vhqdNUHHiVAWnNniZtyrXGQA3STN+hnnNYJ/dLbO/x:o+ZfZBh8jT/0uLp5OpSoTjAdJxyxua","tlshash":"4883b7807fe0648ad3979f77b71bb4c9f8aa385a7dc4048bc601fd80796662ad9f1530","size":85471,"data":"","first_seen":"2023-08-25T12:30:49Z","last_seen":"2023-11-23T01:47:35Z","times_seen":6642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-27T19:16:38.740845Z","times_seen":116703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87482,"data":"","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-06-27T18:52:59.138742Z","times_seen":32620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"56707025a82573f275588f90b350d3ad","sha1":"f13b7c18e940908856144a8a4783f01984c5c4a7","sha256":"163e5c7829763a6443786bf0b88bdf7756c6500d6394ecd344a02dd9ba947d27","sha512":"f23c86565d4c2962b82216df6295ecb441a5be31a28c8e9176ce76d2a13d961e7a40fca134d97670070b831063d8cb1d7e68c4b234cc67db5e73ffbec186f05e","ssdeep":"","tlshash":"dd614a1ef4084e325f288389efd1a3f124dde6c53150b2c2ede5d47c88b59283db689a","size":3372,"data":"","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.420304Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6f26fa42bcf49dfb16b9c1896a070e6","sha1":"69e50efc31612bcb03b59e513ad1cf161fa8aa7e","sha256":"7014bfa3f7d18903dff1b01314fcdfe38cb40efd212f66617c3b5a281ba983fb","sha512":"f1c8e366db26aedbe879b1e4c80f251dec995b41b27c89128c045eb9c1cd3ff918bdf069f500896e7bc8a1080e8c45887f0a582651caf2b3397644325c0284bc","ssdeep":"","tlshash":"baf0233979701070405b452ef5b7cb2c7d73203155718984422daac9bd75e7f9024bf6","size":451,"data":"","first_seen":"2024-08-21T03:57:41.054609Z","last_seen":"2024-08-21T03:57:41.054609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3901e66cc9367bbf9ee2b6c84212765e","sha1":"fc365605350b724e7dcb0559da6f49d12e2acc97","sha256":"9a4bae87c9792eb4954318266de71530aa358ec3db4662213337a6ee887ef632","sha512":"f394fc6874b4abfe24c1b1f9546d35db9d99bff4a4ea3d32dc398239154e2631b31e1361ff4b144172e094e734bbcd2d5cf2933a04bb2be808af400e2ba50282","ssdeep":"1536:65BS8ZfO0UVsC6pF34LWZtFN2297CKC1NEasvjhHemPoT5R2UuMH8te12lQ7wh:+S8ZfrXF3ft72297CKJas9gj2Uxjze","tlshash":"53834cd1ff3069265ebb5162b43f114fb0b6da379bd94092e0488c682e68c5750fbf1a","size":81690,"data":"","first_seen":"2024-08-21T03:57:41.055318Z","last_seen":"2024-08-21T03:57:41.055318Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e509c98a0bcad0ce8e6248ac8eb31de1","sha1":"ec5fe203df631088270b5f2b0b7a85498a2aeb8b","sha256":"352ea4dd2d545563bef7eb0ba6d6ebfe4bc9d9e51ab00d9c925cb9e103edee63","sha512":"eefc16b01c06fab4e58bf8c7df7775b5961cf31177082bec526f0ee11fbf437f31242ab01bdc1a214595c58fb424d1c26d69d9b8f37f9870059b161a579fd229","ssdeep":"","tlshash":"f57000802828a0aa803002802a2e3aa2b2880202e000000022a00880e000aa3e000882","size":23,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.652518Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bcb003af2e9006764277b17c7903942","sha1":"d1b2b56f207eb3ad07df4ab73e8ab70f5ea129e1","sha256":"cd12ce85c9966197aef71bd73573b0bc02a40c7e593ffe8b5f1cc7ad027c8c8b","sha512":"c80d9c476c40b94712a55c08c97d1fdc7d03fce8875d931d888d75386807afb179b2469c60854cb76c1a13793ff6457ce885c8fdbc0e4c6a81d87d52494b5b90","ssdeep":"384:2So7yZisqLfLSJ66hoyby88Kyg8/2hSbxpW9QDabDWCSbCYv3B4hq9Ixdk5kGodV:5oess66NN62hSxpIbIT6","tlshash":"4bc200dac6cb67239c782854aeae51c1c0e6f74a06dd7695f00f0b62356fd7ca804d2b","size":25860,"data":"","first_seen":"2024-08-21T03:57:41.056381Z","last_seen":"2024-08-21T03:57:41.056381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/url.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16e2e46b37590d0f0b095e0dc1aaaf87","sha1":"11fd26f35df888a81534699194516b5178c217a4","sha256":"68355abe687cffeeefe36bc69855523ab4745d0e753f7417138f9a41259cce71","sha512":"f9663ecafde9274325f4eef21b6a94e3d9641a5577a7b1aedd97da6d09b1355b619ffffe3cdcc392b225d51969d7d24ed6a9224a36218c424166fca4d5052aaa","ssdeep":"192:1rGJoVTALQGjj/vojA9NsgYzwY/Fmr7g7E5FFczHaB3L2QcXyp:1rlVEL1XojA9i3zwIFmr7e2XczHadL/7","tlshash":"03224088b1d7f496d2553db164bf5d3fa13969cc046e6034e66aec9a382d23d0063bbc","size":9079,"data":"","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-06-27T15:39:57.812013Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"169a5dd1261e0d434162d1af68acbbcd","sha1":"c18d59ed069049b012a61a8e6b958bfb25bc1b71","sha256":"82b3dabc6615507ef352f36aa08a805d409e883f8024fd01fda43175b6b67b38","sha512":"92328fe0d3e85e7eefecc85f4b6e2882c6cd15981bb75d877ae00def78c6b6d3e54b0151322fa04a579c7ddf02a90186860f37a9c7f0594130dc12c014297002","ssdeep":"","tlshash":"d77000c080a2802888200280830a3b2030082300880e00083080000820202838c880c2","size":21,"data":"","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.383123Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94dfdbe80f36b3be63ce74ff1135b996","sha1":"5e05077d99e736af42b2da70e428e7f7df556dd4","sha256":"4c0ced2cb3830d045cdd74f745fd4d6dcb082d8edd3a9fe46e39295e30cb8032","sha512":"628169b65f39a18f13facac9e3375eb59dbcac67cdaa7612562165d94aec1fda6cff93b1f228155c317f82a544390948f7243df330972851b49f6a45781aa2d2","ssdeep":"384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm","tlshash":"bb72748afd81b0da03f360b5012f440ff2ba9989b59e95d0e359d5e46c7d84e9027f1e","size":16146,"data":"","first_seen":"2023-07-22T18:30:44Z","last_seen":"2026-06-27T15:39:57.791651Z","times_seen":12081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab1b0ef42311479d7559bffd29ef8d7d","sha1":"ba1509057a5f82563a2b55a7379f4825fe35bcab","sha256":"37bf8b4db5288941c20c28fd7c0b201d2270201a94739d64462744ffe6b52f79","sha512":"db4e6a5953ddc8e4aaf65287c085511a7c59b676a412525a17e699b40fe34eca264c2780f3654f96c1fa4dac9147f628885c5da8c2bca6a204a1d92b2d1cae48","ssdeep":"","tlshash":"85a0120040c1349e207240152ad09042bbc1411001117824004c839b1e5f44065d5904","size":79,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-06-23T23:56:37.591961Z","times_seen":2189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"75b0ebe5e06ae86f2546efa005619751","sha1":"4932c3d71e1f9d0d7a34bcbd9401d32a321baf80","sha256":"2f12e6eb6a8be9021960f6fab1259286e0924021db24775ae0af121547f5a117","sha512":"f6a979ea64b5e25be662fa2a327933d5814d5202fd6ac5d83ee7203e6a60dfdc0bf3739f27e0bba3ef505d2a3def1673ff97919ed00883bc36d9c48c13aee889","ssdeep":"","tlshash":"f1411b64805727715db3fdf2a2c6b3741e96d79720c8b5d6341cd38017a75aca672e08","size":2089,"data":"","first_seen":"2024-08-21T03:57:41.058419Z","last_seen":"2024-08-21T03:57:41.058419Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6d229e5c81f7934ab64a8bbeed0df2fa","sha1":"f3904dae9e58e4e31e309c19fe21a5534da94fb1","sha256":"60af7589fbf31ba3b67dc4804f4e331afe069f4463ef0bd11fd588a9a52ce0f4","sha512":"bb8781d8dd64d820de8bb63c1fd5d9043b7f91c619fe3391c3c0c7617cc512ac170e7fd600b4cc3d6c19cc859cafe29c2c72dcc5295c27e9f29ab5d6ad4fb90f","ssdeep":"192:WcWE0TBM2Zj09vT3VSPiPsW2FS4WCeEugf:WdeH9vT3YPiPoFS4WCbua","tlshash":"c8d1dbbf30513770dc6bb16e9c8783d42b3190217f0aa4d6c52d95d55818bea839fc5b","size":6272,"data":"","first_seen":"2024-08-21T03:57:41.059333Z","last_seen":"2024-08-21T03:57:41.059333Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.nsw2u.com/","fqdn":"www.nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-21T08:01:10.605Z","timestamp":1697875270605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 21 Oct 2023 08:01:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Sat, 21 Oct 2023 09:01:12 GMT\r\nLocation: https://www.nsw2u.com/\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jBP0YiuLYsoaI44h%2FuyBOyGs64hjfQZV25dwxbHPieGzEmlDbuBt2phx4SG5BeUl7r2GGXqgn7ygEhJJBZk9dJf4efoWmv86ZLYSFBT7WA4V5UkT6f8C%2FP%2FSmWNL7mz8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8197f8a76d180b31-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":5919,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":5876,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nsw2u.com/","fqdn":"www.nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-21T08:01:10.605Z","timestamp":1697875270605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 21 Oct 2023 08:01:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://nsw2u.com/\r\nx-powered-by: PHP/7.4.20\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Mmp4R61WjY5ddkbUplLhdDBh8dkmbHXhKz4P96Ew1oWp88E5iLubDzQ6S2F1rHmpYwivK7BWG0AI9HM0yVxr4jizIFRreyLmMvfVxPFG%2B1w%2FnoqlrT9tGeOsr35loELs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f894ef48569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":15671,"size_decoded":0,"mime_type":"text/html","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced\\012- data","md5":"134fce13c189ed0e483a1bddb6406204","sha1":"eed559ac52e9731c56a1fb03eb94fc82e551bb66","sha256":"723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791","sha512":"35faeeb216f26aff788bf63513b42fae25806eb125eb90d07164ad892ede5dad03b2cba4ce87941ec318dfa62a734535dbe1cf8c3bb68dbfb2fba1a2be5bbfc3","ssdeep":"384:lAnEo7Jtm6OpNKIwJKVfrlB7EIIaTgHLrDAAebZq7KHIab:uE4oKIwJiD6B/7YIab","tlshash":"c362bf19fc40ad604415ebd66eeab967b8b71eb84dd5b480a9edb1020c701f1cc5f493","first_seen":"2023-05-02T15:01:23Z","last_seen":"2026-06-27T08:28:48.537326Z","times_seen":732,"resource_available":false,"data":null}},"time_used":5919,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":5876,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/images/ads.png","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.272Z","timestamp":1697875277272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/images/ads.png HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 95\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:12 GMT\r\ncf-cache-status: HIT\r\nage: 40789\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=uNlijq62CfsXIL6X1dwXCuiKFjDlkI62%2FUhHfTPQqQaHUefvo8elCvpmxh5nmiCR512%2F3BvgbBb58PnE9ypIAEMOvQgYmhrm02D7yd4LK8a%2FSVWh%2FLGuTdkxyLM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8bddb5a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 1-bit colormap, non-interlaced\\012- data","md5":"71a50dbba44c78128b221b7df7bb51f1","sha1":"0ec63b140374ba704a58fa0c743cb357683313dd","sha256":"3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517","sha512":"6ad523f5b65487369d305613366b9f68dcdeee225291766e3b25faf45439ca069f614030c08ca54c714fdbf7a944fac489b1515a8bf9e0d3191e1bcbbfe6a9df","ssdeep":"","tlshash":"fdb012e323704c36d1014173523c92138b22c31ca14d19438001fc280c63305ccc879a","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-06-27T18:03:12.425949Z","times_seen":21119,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.235Z","timestamp":1697875277235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31608\r\nlast-modified: Sat, 25 Mar 2023 13:28:37 GMT\r\nexpires: Tue, 25 Mar 2025 01:28:37 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"5948b74d64865dea\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"3dde27351094fd110611b7099df7612d","sha1":"1f8633afc647ab96114d9cd7b87b2e1bd9d73fae","sha256":"f7118208621987432e4309b2429b3ca26191166ec2b5b4dfab15204958f9de33","sha512":"96b6568af24f1e641cfbbad0e54af4557c627116520960ef05dbe83c0dacd776ece683bac8b4af35361bf87397759956384def5ee3dbde64b0cde7430de653e1","ssdeep":"768:xOr3235dDXtgUT6KD4g7MNGNarQArZ9XuudeEn3WYadafzNo:x82pdCKDD7AzrQHImYadCo","tlshash":"02e2f112786b5f2b11283a0b3c4fb9f74be31889d2d2bd01705572b91d6dc2bdea1698","first_seen":"2023-05-06T04:59:28Z","last_seen":"2024-08-21T08:54:44.325561Z","times_seen":15,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.232Z","timestamp":1697875277232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44016\r\nlast-modified: Mon, 02 Oct 2023 12:52:59 GMT\r\nexpires: Thu, 02 Oct 2025 00:52:59 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"88dd70ee97fb240b\"\r\nvary: Accept\r\nx-nc: HIT arn 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"75c6cf85f705a0e0864e59824ab2c735","sha1":"cab75b114fd4bfefe79a88008824f651801bd557","sha256":"8e2a80cbd5c939e48360b46716bf1cd7598ad513f525a34ae9b2a3f549c0d18e","sha512":"4367410fa34cbeac02a69e7b75763679013e222e7636b631e0f93a59c11a6d863b18108fa812e757105aab9fd20cd0ddb913eb36f008efcdd22587f3bc56f207","ssdeep":"768:QpZYK5NgF5kABtTUFPcSb9wLAf/oPynfGrVIP5n4ZtMwduCsFJDpTV6BPTsQhhd:QpaKfqdJUF0U9wLG/q8k6utjdT0J1ToH","tlshash":"9113029d5647e44ae2c9e309883500696d548bdfc134278fa4a89f2fe2971f4ec89fc7","first_seen":"2023-10-15T00:59:57Z","last_seen":"2024-10-18T06:17:20.880105Z","times_seen":37,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":7,"dns":12,"connect":8,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/nsw2u.png?w=216\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.189Z","timestamp":1697875277189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/nsw2u.png?w=216\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nlast-modified: Sat, 24 Sep 2022 18:25:42 GMT\r\nexpires: Tue, 24 Sep 2024 06:25:42 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/nsw2u.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"0101732b85ce3bdc\"\r\nvary: Accept\r\nx-nc: HIT arn 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"948c6dc3d3c1e2e9d315418f6eabe2bf","sha1":"ed06ff1f0994f3be033f22d808241d3fcca9d1e8","sha256":"3a2e29960ba6130c22ce96089a7592ae91b6a0d6a11595a10daaa9662522ad0b","sha512":"a9353ab569c698e8d8039479e5ee90a5099f6d256c18ee7892be3067bac65bf09f0a4db4cf73f3a6e008a81b4b9303c6ba962e428c5277c6e585c940fb883f81","ssdeep":"","tlshash":"93513b70855766f62a3404c6296381ab5c6cc3eb9c89dd9c810feb517a761fb43ed40d","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.886056Z","times_seen":27,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/game-2u.com/wp-content/uploads/2023/09/An-Ankou-v0222d-PC.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.193Z","timestamp":1697875277193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /game-2u.com/wp-content/uploads/2023/09/An-Ankou-v0222d-PC.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10288\r\nlast-modified: Wed, 18 Oct 2023 11:59:51 GMT\r\nexpires: Fri, 17 Oct 2025 23:59:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://game-2u.com/wp-content/uploads/2023/09/An-Ankou-v0222d-PC.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"f7ff9dbe7ff441fb\"\r\nvary: Accept\r\nx-nc: HIT arn 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"4194598bae0dc0733e8732ad557525c1","sha1":"6c5be826efc0485a36d2e704bd55ca3356235c37","sha256":"98b5857fef17bdee14fee745c166eff60e57d68b5419421f3e729a88701b29d5","sha512":"03c8cad48f1d98a334e619e152ca89d7dd078af01f740e738145764e58849e3abec75d84b9a011e410f74b4b0c38eda7aad94d41013bb11c5d85997bc5eacb5f","ssdeep":"","tlshash":"","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-24T04:13:23Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/game-2u.com/wp-content/uploads/2023/10/Block-Story-v1320-PC.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.198Z","timestamp":1697875277198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /game-2u.com/wp-content/uploads/2023/10/Block-Story-v1320-PC.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11816\r\nlast-modified: Wed, 18 Oct 2023 11:59:51 GMT\r\nexpires: Fri, 17 Oct 2025 23:59:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://game-2u.com/wp-content/uploads/2023/10/Block-Story-v1320-PC.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"6567df7edcc776bd\"\r\nvary: Accept\r\nx-nc: HIT arn 5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"be4a35999a33329ce02169058d41f5c1","sha1":"580f63153a5937d92680337f3e1bac5ff8e02251","sha256":"bf3bcbce1e4cdcb640b3bd5444e8fcb71e61bb4d54470bc8d0d2b10cd54ed939","sha512":"e0291ea8738732a063da4fa8b5e7befc486ab6c03a82fd422142df78aaca2a62fb1eb4d082c5c7f1f691f5ebb0fcb62463f35cf82af78ef85b61cbf8e54712ca","ssdeep":"","tlshash":"","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-24T04:13:23Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/game-2u.com/wp-content/uploads/2023/10/Nomad-Survival-Build-12453970-PC.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.199Z","timestamp":1697875277199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /game-2u.com/wp-content/uploads/2023/10/Nomad-Survival-Build-12453970-PC.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13324\r\nlast-modified: Wed, 18 Oct 2023 11:59:51 GMT\r\nexpires: Fri, 17 Oct 2025 23:59:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://game-2u.com/wp-content/uploads/2023/10/Nomad-Survival-Build-12453970-PC.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"e9a47ef70678dc8d\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"518a42734de4847b8e8afced91bc3690","sha1":"92e38ccff041bf4d778d6bd7498794e31e397e28","sha256":"fd61b63ed6182c7e773a661db675eb589eb5c857b52065ff00da50346fe2a7ae","sha512":"1d1af6e7933afe31f8d6c1f465b466bcd9bb7df3c2b962e2fa9e2d947109dd59b6992d264335612237d92e05867c3328f25d3205560d1d0b34d0bb04cf6ab1ce","ssdeep":"","tlshash":"","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-24T04:13:23Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.200Z","timestamp":1697875277200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42380\r\nlast-modified: Tue, 10 Oct 2023 09:05:01 GMT\r\nexpires: Thu, 09 Oct 2025 21:05:01 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"1f81867bb8a4a38b\"\r\nvary: Accept\r\nx-nc: HIT arn 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"d4928f7b25fded3f8d8a950e9d163f32","sha1":"d3c246313c0b85eb96b9bea998baeb1c8da5a7c5","sha256":"6590cb89e20fcfe488bf87db73a0a86d040513f68b0711e6456c0a0da091bce4","sha512":"e88d9ee9ea4c46458178cb000e716748e2e2c45c6b04356cd86f3a0e127ec575a774e939d62f1fc04f635153fc63950f30f67d47856d71da844890057899e8d5","ssdeep":"768:sLMJ3dKFj6tWXus+MGHnus7MFtTTUUX4TkR+r3+VfvNLa5WD:EMJ3U5Tu0GDExTNSkRbZFLa50","tlshash":"2c13f1e6125c5cc46ce0b57d0796f42f4c5265ff8ce6e7388f3a14980294887c9a0e5f","first_seen":"2023-10-15T00:59:57Z","last_seen":"2024-10-18T06:17:20.878447Z","times_seen":37,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:17.300208083Z","timestamp":1697875277300,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 21 Oct 2023 08:01:16 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d2f53b5d45c5c1e3e0ed129981832d95","sha1":"56847aa5bc4806bc9b5125cf8871c1d47fdeda82","sha256":"e23cb6948acde29d8e68e2d56eaa1d77d5bb0ef7eefb908854950b91cb17808e","sha512":"283822385bd97bb4fc9c43f7763a98d02b1d24dbe2384c0b4479dcaa8873f5157cd2aa28b25883f0905e3229b7c6f2522c7696c9e9256e44c0fed2a92da29062","ssdeep":"","tlshash":"67f0540e09363040fc9d589833d90b603244f6198ba45b3c75e45680ca182cb62c4108","first_seen":"2023-10-20T15:51:54Z","last_seen":"2023-10-21T16:59:53Z","times_seen":2029,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/css/dist/block-library/style.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.079Z","timestamp":1697875277079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 19 Jul 2023 11:13:55 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53449)","md5":"03c0f2128c8dd615b1691c168f1d4456","sha1":"defa44bed1f35ec899cfd358ca911390bca53e67","sha256":"67447c3656caad630373253691f3e8f64467eafd6e7305c9b0e98111b0b41694","sha512":"01485475aec2d490e75dc76aea6e011541edcff527e85a773644accf101175b619e10b4d3a5cdb5926669559782bc33df483fe9cc3de9d3431e08123ce5d0853","ssdeep":"1536:6LeJFfvhk2u5SOV+UQ3Zo/xHHbweEEQze:6LeJjk2u5SOV+UQ3Zo/xH7weTQze","tlshash":"bda3505413b0dcf939ffa73a5e5ee248a513aa41c64a9be7e076d190614ca490cf3b0f","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-06-27T15:39:57.885078Z","times_seen":17824,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":42,"dns":1,"connect":7,"send":0,"wait":12,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.626Z","timestamp":1697875277626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 22\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=24\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 40788\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Y%2BYva4JDNJYLYMz6gtVaK5gVYt16NuF7icm1Wme9lYT4LE6OB2otCBYrmuFO%2FEOvJOBkWDW54XsZ9eRcmRq%2F93WOKIe9wcrxnsL%2BxqRgITyqeRVXtMoH%2FCbFJJ8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8c09d8556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"41bd53fe0ee631d5cfd895e18a53291d","sha1":"9d9d3c42c53ad7f906cb083a0d2d37afb4537764","sha256":"dfb2e16986e257b608b45d14396378a8f2ac6a7321c0dc2f13c66a33ec8e4a40","sha512":"41a97307b1672b9c276dacdc973cfcee6ff35961ac21c127d2263fc1c41e0356ee104456c0c5c2fb12ac30847f5c7d7e3ec4bb4f02e860ee3c3839ef984cafdd","ssdeep":"","tlshash":"b6700082088000b88030a00a020e3a3020083200c220022220020aa0a03c083b000282","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.66407Z","times_seen":26,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.624Z","timestamp":1697875277624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 23\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=25\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 40788\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2GtYbUldl4Y9GqP6x8KYERuj%2FtZREQkv%2BEbAw6fCRMJpHYQoVWUGPZdA8hBDJ9cCsX84ZHz3P9Qf2NoFYAX0pa4TEcEXxbldmHRLDAvz0s0LcIDnRWCeP5DyKqM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8c09d8456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e509c98a0bcad0ce8e6248ac8eb31de1","sha1":"ec5fe203df631088270b5f2b0b7a85498a2aeb8b","sha256":"352ea4dd2d545563bef7eb0ba6d6ebfe4bc9d9e51ab00d9c925cb9e103edee63","sha512":"eefc16b01c06fab4e58bf8c7df7775b5961cf31177082bec526f0ee11fbf437f31242ab01bdc1a214595c58fb424d1c26d69d9b8f37f9870059b161a579fd229","ssdeep":"","tlshash":"f57000802828a0aa803002802a2e3aa2b2880202e000000022a00880e000aa3e000882","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.652518Z","times_seen":26,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.089Z","timestamp":1697875277089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Sep 2020 15:53:06 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2416,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-06-27T19:17:21.484657Z","times_seen":86417,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":64,"dns":0,"connect":22,"send":0,"wait":10,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.677Z","timestamp":1697875277677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3150\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64942b38-c4e\"\r\nlast-modified: Thu, 22 Jun 2023 11:06:32 GMT\r\ncf-cdnjs-via: cfworker/r2\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4390506\r\nexpires: Thu, 10 Oct 2024 08:01:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ypLAx4XidPDCukkU%2BO%2F5KKKV%2Fx7ylJEKJylAj3u7MVO%2F5Xhu07LizNqVcZOpP2iZc6vzTNLjsxQ5JvwfpCa3lP3Yxr3b3uKQUb53R90Ay3wsBTwFWXwSGeVdIJOFQu0oTj8Xjvp9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8197f8c1086c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3150,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7862)","md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:OQC5XtZkovHIdcCxoE6FxqIvqwk+BgKyVkM9InkxbI2TEK+DtZzAPOj:98kNdcCxT6T9vqwk+yKGkmxbRR+DtZzt","tlshash":"42f1c49f369170739edb7465427f311ea73674239c42e121e2f9d095893c86aa323f2e","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-06-27T18:55:05.331085Z","times_seen":14211,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/mediaelement/wp-mediaelement.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.093Z","timestamp":1697875277093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Jun 2019 20:45:02 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-06-27T19:17:21.49154Z","times_seen":87384,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":50,"dns":1,"connect":24,"send":0,"wait":8,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.688Z","timestamp":1697875277688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 677\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60641588-750\"\r\nlast-modified: Wed, 31 Mar 2021 06:24:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 662209\r\nexpires: Thu, 10 Oct 2024 08:01:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=AuxoJsxeRArM0yESAnQ2EvtwGz%2BYjX6bti7i9HroPKw8xKd7PO0cxDpGPrD6ZQC3YbGeuMOHDkB1jNYiJIXfTohDkfJeJifNlYwzy7xn9e2UKWshmQhJlDU%2BJkfXwSjv%2BiTCgjX0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8197f8c1288d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1845)","md5":"f6a3dd4ecbf227acbafcff33d68dc71d","sha1":"7421115ddcd5d436b89a1fd27e0cdce5a01978e6","sha256":"30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421","sha512":"850ecb2006210f5ec2661e9b0f375023b3538541e66467006c60df0961cefec3843d101d964405838813b0a85659b2353cc52f8c3ec98c0fb9c77a47db7067ca","ssdeep":"","tlshash":"f041e1ee7654b433adaa24e2511fa524116730331c1fad64bf4bedaecd78ce72026960","first_seen":"2023-03-07T01:32:49Z","last_seen":"2026-06-27T18:55:05.413806Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":20,"dns":2,"connect":5,"send":0,"wait":7,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.898Z","timestamp":1697875277898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\ncf-cache-status: HIT\r\nage: 40403\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pP4UJb4Va7k39x%2Flb9bjYpx2XR6ddZbE9nr1afRjUIwxJOv6Tnm4Wi2ExTwgAAp2aphFbR4DWIfd6Zqa34MCibUeabimWU6sY%2FPWtNhB1NVsYkemL4gPSLnBLAc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8c1be3c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\\012- data","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-27T19:17:35.671143Z","times_seen":503846,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.1","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.670Z","timestamp":1697875277670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.1 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 20 Oct 2023 08:20:23 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pNTdRhUUBH7Y01kMHXvgE6k%2BciOIO8Uey2FcoX1vWrh%2BDHS3eHDlsc3J0jXU%2Fn1duj5kSHTRz2LHsJnBR0139q8wmGy1Tju8wHNOn3xuW7V23opDYDjTI99jpUc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0cda656bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3833,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"87015559c535c9314bb1a8d6ed05597e","sha1":"b9e3b22a2bd7457d044551d5126a29bae25489a9","sha256":"e5903bfc201247ffb215a9c8ca6b66cf2b77d63dc7c7953937619535dd394a7e","sha512":"74247d596dd47219c7db120b8d30a12fffbfae88155bd5281ffabe68eefcb33bf6bfe88153306844127902d82d83c472a1f9f8e59024c5ea7603bc1611efca28","ssdeep":"","tlshash":"bd81962b30a8a1b8cd733ffdbbfe55653216315021565328bc1c66163bda22463a4fbd","first_seen":"2023-03-29T21:02:17Z","last_seen":"2026-06-07T08:51:33.827118Z","times_seen":65,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.920Z","timestamp":1697875277920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sat, 11 Jun 2022 22:08:00 GMT\r\nexpires: Tue, 11 Jun 2024 10:08:00 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"416c01d7e07bbbbf\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-262573192-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.701Z","timestamp":1697875277701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:26:20 GMT","end":"Thu, 21 Dec 2023 05:26:19 GMT"},"fingerprint":{"sha1":"81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89","sha256":"BF:65:05:97:11:62:1C:0A:F5:44:E0:12:95:5F:87:62:0B:A7:91:BE:8B:EA:52:FB:C4:0D:05:93:22:9B:A8:47"}}},"request":{"raw":"GET /gtag/js?id=UA-262573192-2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\nexpires: Sat, 21 Oct 2023 08:01:17 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 21 Oct 2023 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 69231\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69231,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"e270f689d0703e72b7a58a610ac88d56","sha1":"22097bcb9127b879722784c05d62a11fe7fc798c","sha256":"2cb09ac6f8d66e2e4413534a01b5859ee201afaea65826d0f4b5a7f59bd3a9d7","sha512":"297477c29d936cf7d8a801a277c98cf18dda3788c8284daf2877fe2c53e41bde56df4a995d2ee1f8df6dc9f56678e9e34fd745e550cdc6a54b1e2dfab2ce365f","ssdeep":"3072:v8T0tIl3G9ruhVFhFo03UnMPYNEOiF8W6MPlk8Erw+3:EP3a67q0NQEOiF81olk8c3","tlshash":"9314d5d8b397b06682a7b475513f010bb17a6d92f84cccd8e18ac5d42eb4a99417bf3c","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":249,"dns":7,"connect":11,"send":0,"wait":28,"receive":15,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.697Z","timestamp":1697875277697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=s9aaTQ5AwQd1DN1kcCiL5IQfDGgXZm1kn8AFwnOLUf3qVX4%2B55ObAtYdrVXzhJV36DmNDyZRVzI0XRK2bxXl53RAerjTrhg%2FGGFPL8cl6JhVaj4gxAj5x3iXdqA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0fdcc56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3611,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7553), with no line terminators","md5":"70c183398322d73b50b8b4abece239a9","sha1":"e79dec738456aa7882ffbaf481eb13849da7c227","sha256":"969eb11be3a2271857373fe0e1424232f62f24ebc4cac8cd532c35d43634c046","sha512":"38317ee7e62ec157c0c42252ba672bfbe0ff5abbbd1e54e028824eeaeb82bd07dfbe986ad8961003706975ea2d155c33ca0293a92e16cb8e38d26b201548a3d5","ssdeep":"192:pshByU1qz7Ka/bWaFtiWdKCA/CtmsyatX6yvqNeEH7bV:pshOFN8C2Ct5qyvqNbV","tlshash":"36f1968d79c5b43b62b721b1483fb52a7b3f21a3290e4051da19c4f6bc35ec99113f88","first_seen":"2023-09-23T16:46:34Z","last_seen":"2026-06-24T18:06:00.118403Z","times_seen":31,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=192%2C192\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.082Z","timestamp":1697875278082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=192%2C192\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2568\r\nlast-modified: Sat, 24 Sep 2022 18:28:57 GMT\r\nexpires: Tue, 24 Sep 2024 06:28:57 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"deb437b05941c6de\"\r\nvary: Accept\r\nx-nc: HIT arn 8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2568,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"513677192f138c2aba3a3847c320f723","sha1":"7ce5b67d80a2c2dedf8685b08547bcc8bf012f99","sha256":"d60495bc835271423ec6445708aceb3a068ed6f2ebfd796a86c9f9e134ca1788","sha512":"148187a98114326c9eafb7c88cc41f8973ab764d84e384788acc25700f5aa841ac31fe0cb97cc7314ca0ec908f9f80e85cff9707a17b9609ab395fd46d59b406","ssdeep":"","tlshash":"86514c2b4e751c4882a936df63c3a63596382ffcc2ac3c100d08d30590b0f6868c7b8e","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.918468Z","times_seen":29,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=32%2C32\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.084Z","timestamp":1697875278084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=32%2C32\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\nlast-modified: Sat, 24 Sep 2022 18:25:44 GMT\r\nexpires: Tue, 24 Sep 2024 06:25:44 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"9a9a255d155ea6c0\"\r\nvary: Accept\r\nx-nc: HIT arn 8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"43df8a9873aa31bb000672a677ac1640","sha1":"4c1bcd8c3a797217d375df16b4bcab2d6a2763a3","sha256":"d865b1c06cbff014e7c47cf5afb4332de4c95a537f86074e001b577c50aef07d","sha512":"aaddab0086710c3284d56823caccc10831971db4819e08cf50abf99581f0071a942521d0fad5c51e7609fd234ab739ca95e11031924033d50cb68337f26e639a","ssdeep":"","tlshash":"39e0f15421705a983bd604143ab41415664228a011205f3267882589861e2b70720316","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.861126Z","times_seen":33,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.071Z","timestamp":1697875278071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:26:20 GMT","end":"Thu, 21 Dec 2023 05:26:19 GMT"},"fingerprint":{"sha1":"81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89","sha256":"BF:65:05:97:11:62:1C:0A:F5:44:E0:12:95:5F:87:62:0B:A7:91:BE:8B:EA:52:FB:C4:0D:05:93:22:9B:A8:47"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: www.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\nserver: Golfe2\r\ncontent-length: 20994\r\ndate: Sat, 21 Oct 2023 07:48:51 GMT\r\nexpires: Sat, 21 Oct 2023 09:48:51 GMT\r\ncache-control: public, max-age=7200\r\nage: 746\r\nlast-modified: Mon, 12 Jun 2023 18:23:07 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20994,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2343)","md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-06-25T00:24:47.321444Z","times_seen":5569,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":0,"connect":8,"send":0,"wait":8,"receive":3,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/navigation.js?ver=20120206","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.696Z","timestamp":1697875277696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/js/navigation.js?ver=20120206 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=xpVRSiySaa9JQ5ziwSvKVjmRZiTRY6sZzUtpRolpsh1qhhIAQVFV72P%2FgMCGZnLt4p7rHL8jNBgDq1ujPOKi3Y2ib49DSGZ%2B5NhEiklXJzApe%2BdqSjObgsY%2Bol4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0fdcb56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81954,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c3a5b08af3e63049707797efe65eab86","sha1":"f66ed251ef8c24614ff24376d472f2f394f7b93f","sha256":"d79752e33e156b5cb219ab45103fe0ed7d80f111533dd8eec42c57546b4da500","sha512":"0615e64c421c5621cc07b9ea44379ca7aea5508e66656cceeb44cf739e3512d10430343f36a01dd2dc2e20c811c94733972fbd5ba7e35bfcb487686c720e5ce7","ssdeep":"","tlshash":"3651129328f6223f959aabd9625d5053353f8e50f714bd12f834f4801818a41cef9ece","first_seen":"2023-03-07T01:39:41Z","last_seen":"2026-06-27T16:30:55.523757Z","times_seen":740,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.702Z","timestamp":1697875277702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bn1Zccocnm0b5dLarvofnEFjjnrb7fb5TVadfqHNVeqPOpXYbtRYzD1HzZTGLX1Esc5bDJztlT8vViWmTIC%2B%2FAWoGSrT4zRoTLUC99X47LKUN9BaXzWY4IbGttw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0fdd656bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78365,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document text\\012- HTML document, ASCII text, with very long lines (2729)","md5":"351390b839bf683126e78afb44004636","sha1":"5631ca683d75c60eb3dba2bed734716accbe5426","sha256":"f9a6294ee0f29b05710d50c6f338bbf5465c1aa22a5d0a7a73e99bbe0845d4b0","sha512":"cdd5cc960f6ddd84f20df1f3c704c3d4fd67df6775744d47a86648bed42800c97de9d76956b694109f0c791ba9c77eba4c3fcfcc5e2d95dfae3b0115debf0390","ssdeep":"","tlshash":"cf515422f2e4613983ad1724c26e731e547d51cecec749abe2b00931aefbf445c47a68","first_seen":"2023-06-26T20:11:26Z","last_seen":"2024-08-21T05:56:53.89928Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"definedbootnervous.com/a45922fa4966955cecdffbdde5347ae5/invoke.js","fqdn":"definedbootnervous.com","domain":"definedbootnervous.com","tld":"com"},"ip":{"addr":"173.233.137.44","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.379Z","timestamp":1697875278379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"definedbootnervous.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Sep 2023 06:24:07 GMT","end":"Mon, 18 Dec 2023 06:24:06 GMT"},"fingerprint":{"sha1":"FE:CF:3A:96:3E:47:C4:AA:55:62:56:91:23:16:FC:0A:94:CC:D9:DC","sha256":"DB:4C:6D:06:C1:AF:91:3C:40:A8:1C:B3:31:28:0E:85:76:7B:38:C3:AD:33:43:3D:E4:85:20:97:B4:2D:75:08"}}},"request":{"raw":"GET /a45922fa4966955cecdffbdde5347ae5/invoke.js HTTP/1.1\r\nHost: definedbootnervous.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 21 Oct 2023 08:01:18 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: ea362c6438e42b9dec121918b9cbd0f9\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10967,"size_decoded":0,"mime_type":"application/javascript","magic":"exported SGML document, ASCII text, with very long lines (29673), with no line terminators","md5":"d87a182707920d7664c1ace9f12b53c1","sha1":"1164f79c904bcd13669dbb0fe14ed1c8c941ff25","sha256":"aaed11c14a669e672932b0d75843c883d05884f5a12a86084b85675d4f1f1fb2","sha512":"e03419b6948a2902ed1e24ac636bd1b422c31343e7878f46967f68f50f6c93088c319161669f1da629717fb706c3ed6e17763e4814e09aceb0a75101096ca1a3","ssdeep":"768:BjbM/sa3zmX+AeP/OCqV/Gkg0LHJm1jtwTpUK521Mj6:BqqvCqV/GP0bKpMj6","tlshash":"ccd284593d80e84e17a78faf732bb4dceada085dbc45480fd116bc5069a6627ead4830","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1177,"timings":{"blocked":534,"dns":212,"connect":106,"send":0,"wait":107,"receive":1,"ssl":214},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"definedbootnervous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.r2m03.amazontrust.com/","fqdn":"ocsp.r2m03.amazontrust.com","domain":"amazontrust.com","tld":"com"},"ip":{"addr":"143.204.53.97","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:19.242860378Z","timestamp":1697875279242,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.r2m03.amazontrust.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=7200\r\nDate: Sat, 21 Oct 2023 08:01:18 GMT\r\nLast-Modified: Sat, 21 Oct 2023 06:16:06 GMT\r\nServer: ECAcc (amb/6AB2)\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-C1\r\nX-Amz-Cf-Id: QKlQIdlvDLUDHbJoBf_FB5XNwzl1DHRUuxQmzQ5MPiA9naX278-rzQ==\r\nAge: 6312\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c67f0a14b1fe40836817578c61608b30","sha1":"a682e3e1de5c638f0521db86638bc192a2bc2edc","sha256":"44d745eea6b121b9ff2b85520fcbd410c9a77dea8f58263d374e061572403301","sha512":"e01e055f1e57d7247340cc0e91c88020a4d6ce340f8cf6516aca03d1ed744dc79825972075d332c26f3bde99a7c08138041e464a0977567890fa05e1d28a29ce","ssdeep":"","tlshash":"b2f0dca9259178c3050d2f99cbfa8eb63050d1f1a243cec33b340a4658ceba5df0b1a6","first_seen":"2023-10-21T08:16:31Z","last_seen":"2023-10-22T07:57:56Z","times_seen":181,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.6242979951594859","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.239Z","timestamp":1697875279239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.6242979951594859 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5\\012- data","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-06-27T18:58:11.152167Z","times_seen":108577,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-21T08:01:16.508Z","timestamp":1697875276508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697875278.1.0.1697875278.0.0.0; _ga=GA1.1.1692317278.1697875279; _ga_HS5Y0K7QPG=GS1.1.1697875278.1.0.1697875278.0.0.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 20 Oct 2023 20:36:49 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 29 Oct 1923 20:30:00 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=sz50yPvsCZYkEHX2KBV3iQrNL6oEjNETgc29WBPqGfd6nIibuG4BI1Y9n%2BZPbto1XXj6VI0B8hj%2BimCA2EoULbarCT%2FMoTaMM2B0fRZ20YuV1jtv5%2B2AZkv03FA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8ca9da856bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":37,"dns":14,"connect":1,"send":0,"wait":227,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionalswebcheck.com/stats","fqdn":"professionalswebcheck.com","domain":"professionalswebcheck.com","tld":"com"},"ip":{"addr":"35.157.243.66","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.099Z","timestamp":1697875279099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"professionalswebcheck.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Fri, 27 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C","sha256":"34:E2:43:43:4E:FA:CF:25:BA:94:FB:DC:E9:CD:BA:35:F1:15:90:E2:F3:90:42:3E:A2:52:2B:30:7D:BC:5C:69"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionalswebcheck.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://nsw2u.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=8787e4ad-373a-416a-b5a3-9fd8a0395a58:3:1; expires=Tue, 18 Oct 2033 08:01:18 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8a2ed8630319def421de06ba54e7efd8","sha1":"c2a855fb801188a66eb1840ff8c46ff153806ddf","sha256":"5d24c3f89d60ef9647ff95bed78c26d707d4b0fda4ee658f5b658c0e566d02e5","sha512":"2dbddccb0fecf49e9dc9d0acb26f80028982e56312c889006cdcb0a2a557b0c7f818591836208fc22ca3fc42ef30e39579cbf718a1f761358e4712343c76e1bc","ssdeep":"","tlshash":"e390041000541043c3331d474c014c041c0d14f3cd7754010035c105f47401c44fc11f","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":146,"dns":13,"connect":25,"send":0,"wait":27,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:19.460186016Z","timestamp":1697875279460,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 82\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 21 Oct 2023 08:01:18 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 470\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":470,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"9142cbcb95ede4fb11bec79d679d6044","sha1":"13aa5fc30f8e08aa6d26044ef1138c1483c2cb61","sha256":"764bd3e6e5e72e0c180472cbff2acbe4a0719beb2b32e4bbf037872b6f77d95c","sha512":"1b9ae32863d9d8bee4f200569197fb0ce29fee0e6b85974b3442bd7c41f2bf2f2131f94e1d1698c563978c8530e88d7ca6abc41cba6cdf6c72b15b60aa4ad941","ssdeep":"","tlshash":"04f097041b29b459bc9f694886b1ed131e21668883b89d5034aab7d8e7181e2aad820c","first_seen":"2023-10-20T18:14:32Z","last_seen":"2023-10-21T16:29:20Z","times_seen":68,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.718Z","timestamp":1697875277718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31214,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (16142), with no line terminators","md5":"94dfdbe80f36b3be63ce74ff1135b996","sha1":"5e05077d99e736af42b2da70e428e7f7df556dd4","sha256":"4c0ced2cb3830d045cdd74f745fd4d6dcb082d8edd3a9fe46e39295e30cb8032","sha512":"628169b65f39a18f13facac9e3375eb59dbcac67cdaa7612562165d94aec1fda6cff93b1f228155c317f82a544390948f7243df330972851b49f6a45781aa2d2","ssdeep":"384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm","tlshash":"bb72748afd81b0da03f360b5012f440ff2ba9989b59e95d0e359d5e46c7d84e9027f1e","first_seen":"2023-07-22T18:30:44Z","last_seen":"2026-06-27T15:39:57.791651Z","times_seen":12081,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.719Z","timestamp":1697875277719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 07 Feb 2023 15:56:37 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53380,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6607), with no line terminators","md5":"9a4f28a615173df36cb84be2b345816e","sha1":"f709263841708d9e40268f24a0072ff4fe811b35","sha256":"6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6","sha512":"2685373f6522c039f17123683dbc4a2d6eaf572bca72b6019b7fcc9b15b2aa295cacab19b99a1161cc3e317d6bdfc3bdc2bffbfc87d9ea9086da58a013849910","ssdeep":"96:bfe7Sm4zIHPQ6xLROGj+12NN15PPhd50guFhMPq5TK1pFZ9OtsH5Jsd5O+Ark3c:bTmAIH/x1xj+EvWMPqtAHutsH5OKrks","tlshash":"96e1a5ddb5cbf00103577a24951f1009e33b655ee84a0048eb58e8e2fcf481ea76af7a","first_seen":"2023-03-14T07:30:15Z","last_seen":"2026-06-27T18:52:59.114835Z","times_seen":18362,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:19.591436969Z","timestamp":1697875279591,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 82\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 21 Oct 2023 08:01:18 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 470\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":470,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"9142cbcb95ede4fb11bec79d679d6044","sha1":"13aa5fc30f8e08aa6d26044ef1138c1483c2cb61","sha256":"764bd3e6e5e72e0c180472cbff2acbe4a0719beb2b32e4bbf037872b6f77d95c","sha512":"1b9ae32863d9d8bee4f200569197fb0ce29fee0e6b85974b3442bd7c41f2bf2f2131f94e1d1698c563978c8530e88d7ca6abc41cba6cdf6c72b15b60aa4ad941","ssdeep":"","tlshash":"04f097041b29b459bc9f694886b1ed131e21668883b89d5034aab7d8e7181e2aad820c","first_seen":"2023-10-20T18:14:32Z","last_seen":"2023-10-21T16:29:20Z","times_seen":68,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280\u0026resize=1280\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.582Z","timestamp":1697875279582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280\u0026resize=1280\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sun, 19 Feb 2023 09:06:57 GMT\r\nexpires: Tue, 18 Feb 2025 21:06:57 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"95d72d4081ab31e0\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0dd4d74c64f14d7e8acbb68fa2405f5a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.700Z","timestamp":1697875279700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 15:22:00 GMT","end":"Fri, 05 Jan 2024 15:21:59 GMT"},"fingerprint":{"sha1":"E8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42","sha256":"9B:0A:A1:20:ED:D2:5A:E5:AA:B9:4B:71:5D:B6:0E:BD:BA:E1:E7:51:62:8C:94:5B:6F:AD:21:A7:4C:E8:2D:F5"}}},"request":{"raw":"GET /gid.js?userId=0dd4d74c64f14d7e8acbb68fa2405f5a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0dd4d74c64f14d7e8acbb68fa2405f5a; expires=Sun, 20 Oct 2024 08:01:19 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text","md5":"87d25646c27372f7475e9c2ce2d0dfd4","sha1":"442f6c02db8c69aa7d3f68b197d44ab3517d568a","sha256":"79d95bfed20b816cfda5c9af344644313fdf9824b79b7ae5ce80d69b340ee408","sha512":"0151e21d24d06d9b933cac2a3cd53a954eb89a870a72c34500ae251a3a93b6e459c88d99eb51d06e677415348ee699f2f377b5de7c20add9987ed2848dfdc213","ssdeep":"","tlshash":"4ba022020c0800a082008222283bcaa30032ba8c08082a0022cc0000328f0cc88002c2","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":118,"dns":1,"connect":32,"send":0,"wait":33,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/i18n.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.707Z","timestamp":1697875277707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 28 Jun 2023 20:08:46 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74241,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"c2c4e2a562e06e1cb22293a5b920aca6","sha1":"a7b5a369ac4883f1ee7fa701b238d20238b675ca","sha256":"698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f","sha512":"7117e879a8a4d8c8e1acd1a34247a7cf420128da970ed42975d6a04665ec571dc388c62fc3b50deda0b9e896f599d56ffbc28b25a45119cd79f5f45e3e58c178","ssdeep":"192:+mBU3rRetT+w48Lq55J2iBYDee8egqF+i47HgxOwUwAIfYV:1BU3letT+wnLqNJBYDeedF+D7HgvJfYV","tlshash":"7d12c5edb0d6f056235320f044bfb804f136a99531aa98e0db90d5e6bd708d961b3fe9","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-06-27T15:39:57.808212Z","times_seen":21125,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1694604934/0d07e435/39009949.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.733Z","timestamp":1697875279733,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1694604934/0d07e435/39009949.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56936\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Wed, 13 Sep 2023 11:35:34 GMT\r\nETag: \"65019e86-de68\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"1b3e32337bbde3922e0e9f72aa72002d","sha1":"100b45332c71a4eb2e6c66d6de40bcc83f29c989","sha256":"e67f85bbe57ff956ee312dda7de903700030b79bb4ef76d09c192a5da9a33751","sha512":"92df02ae88edb4caed4e69896482746df9e66a2026ba6131a998912e439eadb1f6ed893f8b62c9865f561cb478fee40b0310121948d93e4bc55621dddb8218d0","ssdeep":"","tlshash":"","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-11-22T17:03:19Z","times_seen":6,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":115,"dns":42,"connect":31,"send":0,"wait":55,"receive":46,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1692466089/24d36bc8/38995517.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.736Z","timestamp":1697875279736,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1692466089/24d36bc8/38995517.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66636\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 19 Aug 2023 17:28:09 GMT\r\nETag: \"64e0fba9-1044c\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"81eb51e7c3a0df2a962b5b00d61669ff","sha1":"42c531b818a0bc7e01c602c8668f21065d8cd67d","sha256":"9ee994cfc66772056b1ae42f4012412d4a9f49fc8250c2c22153e54caed7b965","sha512":"10265feb6cea35daa675363edeb482fe17e432c63dcbebbbbd4801778ec6a54756c01d029b1ef249de566e1a2445cae85b8fbc938b27c8ba3e5365672fcaca13","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-22T17:03:19Z","times_seen":8,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":111,"dns":41,"connect":31,"send":0,"wait":53,"receive":54,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696499345/2d834ce4/39025715.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.744Z","timestamp":1697875279744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696499345/2d834ce4/39025715.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45689\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Thu, 05 Oct 2023 09:49:05 GMT\r\nETag: \"651e8691-b279\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"d54f3e961e843224381b52420787300b","sha1":"b24ff4dd6ff0b3c210ac80ccec30d1612bfb2c70","sha256":"230c8719f7ff0cd67d89b8c5052dcc864b6c7ebbb62bf2ec21228af727652049","sha512":"6d980cf919ed23bd6b395f0c16fe566615788a5b742b06ae87d8da1e17ec47f7b381c0a679ffc449a3db4364d6b213bf9dde031f660ddb56b5c68dda85180fa1","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":7,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":108,"dns":35,"connect":31,"send":0,"wait":55,"receive":48,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.386Z","timestamp":1697875279386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697875278.1.0.1697875278.0.0.0; _ga=GA1.1.1692317278.1697875279; _ga_HS5Y0K7QPG=GS1.1.1697875278.1.0.1697875278.0.0.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40790\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Gm18x3vQkjrgRCDfNZseCU2kNRj%2B1kom3Adjl0y%2BYBnMjewJWTgXqjkTKKTOYgiGQsBZPoJbdkNBFRuCXlHl2VmfPRXeRDrhJds9vY6ln%2FYVRHx5GRaQ4bnA2LI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8cbaecf56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109998,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65453)","md5":"3c7e73dd02f57abb6fec8fadea6e35b0","sha1":"dfec9a1a86ae00e26c0067bd8c8b7ea4860239c8","sha256":"d4e76d642b11df90fe1e33c420b70c975a23eebc7aea1416a272439ea9903019","sha512":"8a591ca4f78fd8bb6261f754c3f209f2d27075c1fd7001d0d7f27a77a16627ee190bd2816d5df72673d1973ba9f0a279bab046dc2aff1fcd60c6d91fd31b755b","ssdeep":"768:18HsYdCVZkFN5v5d3cPA8m4W8yPLyFXNA9qm4tAiNfUVm7QTDaQFNJ8y1CjmnAy:1qrvAP7m4wIXNVm4tXNjUZL8y1C2/","tlshash":"c573a399f4d5b0a017eb20b6813f190ff27a7869744e81d0e362e4d5bcb855e9027f6c","first_seen":"2023-09-22T00:36:34Z","last_seen":"2026-06-24T18:06:00.092347Z","times_seen":50,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1692466506/8e093ade/38995519.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.751Z","timestamp":1697875279751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1692466506/8e093ade/38995519.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61571\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 19 Aug 2023 17:35:06 GMT\r\nETag: \"64e0fd4a-f083\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"f5ca0775d6b4c6d61ccb84d080eab5b3","sha1":"71044f9bb69af45e4f171cf7e7c0ff3c9bcdfb1f","sha256":"a968f61a9dcb9774217eee6c6298381b912ef95f00d273c551485c5d73930696","sha512":"55c733d650ac3958f5ceb17f6793cc0d79b75bb83d6cbb174f980f5484261607a4b457c3a0b16eb52856915ed6aaed56601e3ca61c050f87c49388f14ae00912","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-30T14:42:45Z","times_seen":6,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":103,"dns":28,"connect":31,"send":0,"wait":57,"receive":83,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696685701/62d0c090/39029484.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.754Z","timestamp":1697875279754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696685701/62d0c090/39029484.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49174\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 07 Oct 2023 13:35:01 GMT\r\nETag: \"65215e85-c016\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"8e7b79d6c30061407ac3d34ea574df2d","sha1":"7a12a067aeb0a418da610f83c212cd64a82260e5","sha256":"d6e68fb9216f1e77d3f45bbf91163ed3a0a88f4fd58f28d743c60e12be18e471","sha512":"4dc7affff0ba1de19d30db728a6bded7edfe69ba24b5c5d133aaca2ca681782c8d4bb409fb3bd81b6b7d6595e3641628934dbd7d42e933cc2b0c62d2394d3321","ssdeep":"","tlshash":"","first_seen":"2023-10-15T23:27:12Z","last_seen":"2023-10-21T10:01:35Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":57,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696713535/648489ee/39029634.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.753Z","timestamp":1697875279753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696713535/648489ee/39029634.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31191\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 07 Oct 2023 21:18:55 GMT\r\nETag: \"6521cb3f-79d7\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 412x667, components 3\\012- data","md5":"a415bdab5e6150241178552746fe5d71","sha1":"3cb9afec132f0cf1a88e83abc0b77614ee20f5b6","sha256":"8155cd0c598eeeb3df53fc23087d819333a91d25521f7f8401241b279e13bf35","sha512":"3190c27defff49a732efdce7f2b38fd9cecaeffffeb222e7a2aa6239e7395f48dccfef94d1d49f903d1af4e754d0809f8056f82384e492e36d4cba7fb2e75d19","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-24T04:13:23Z","times_seen":4,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doruffleton.com/5/3812660/?oo=1\u0026aab=1","fqdn":"doruffleton.com","domain":"doruffleton.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.229Z","timestamp":1697875279229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doruffleton.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:17:50 GMT","end":"Fri, 05 Jan 2024 07:17:49 GMT"},"fingerprint":{"sha1":"8D:99:65:BD:FF:22:4C:6B:41:72:27:BC:29:02:01:7C:6F:06:33:89","sha256":"69:7A:09:28:AA:CA:CC:34:D2:F2:EA:93:4D:16:07:BA:F9:BA:0B:F4:99:73:D8:C8:69:64:1D:02:D2:39:F9:5E"}}},"request":{"raw":"GET /5/3812660/?oo=1\u0026aab=1 HTTP/1.1\r\nHost: doruffleton.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: application/json\r\nx-trace-id: 65ba9348faae0c67a029b3a59bf5637e\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://sr7pv7n5x.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0dd4d74c64f14d7e8acbb68fa2405f5a; expires=Sun, 20 Oct 2024 08:01:18 GMT; path=/; secure; SameSite=None\noaidts=1697875278; expires=Sun, 20 Oct 2024 08:01:18 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1335,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (2756), with no line terminators","md5":"6bcf3a49a877ba1ee3ab6d85348f8cb6","sha1":"1aafea5d458d6b5157c80eb5d67eae1ee689a687","sha256":"694f9b2b838b53ea9ad919dd21a495c9a9c59165128de7d69d4c91c2a6adde29","sha512":"18d61fd67abd9e060b9e73eaeff9c4c3fb7329db0e450f741d1a3f319b4fc02516ff2bef8001f4fa9409795194b5fb6b50a6475887f42f63a601d317f6731242","ssdeep":"","tlshash":"d351615cea891abfd90611eeec37182347ac28677688388ac68d0c4d31cb4d0237d70f","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":167,"dns":8,"connect":32,"send":0,"wait":38,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"overcrummythrift.com/ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js","fqdn":"overcrummythrift.com","domain":"overcrummythrift.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.102Z","timestamp":1697875279102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"overcrummythrift.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Oct 2023 08:21:33 GMT","end":"Mon, 08 Jan 2024 08:21:32 GMT"},"fingerprint":{"sha1":"C5:DE:2C:A4:57:98:D8:44:14:FB:0C:82:17:99:DA:E5:AB:8C:7D:C8","sha256":"C1:BD:8E:48:E1:83:2A:58:95:8A:21:CB:A8:07:E8:DC:06:5A:42:B7:75:2F:7D:E5:C7:79:CA:91:02:0F:53:4A"}}},"request":{"raw":"GET /ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js HTTP/1.1\r\nHost: overcrummythrift.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2814-3-layer=1; expires=Wed, 25 Oct 2023 08:01:19 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: ec6d1a31e03f46caa16565b45fc48004\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23539,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (60119)","md5":"d887ee21cc53720d63a4e09ce0fa4eeb","sha1":"b47652dfef4c396c54ea6d91c01c2b974096d3b9","sha256":"f34d7e4d33660eb8ddc7b8926a0b8c2b1edb170cc5fd007ecf1a35abc352c0c2","sha512":"64387d3f821c2a965f1f123a92c75154a7a78a40e74b42462002c9d1ad1c8b1c800c1bf9972879fdb3ffeef89a6808ad6e1536834e043f83176e6ffed22c74f5","ssdeep":"768:0aqnrDCZwvjKSOlEJm5TSBmdGvD45QwvaUMAI5pToBq79p:0aqnrDCC7KSOZE2GvD4RaUGsq79p","tlshash":"a243d5cc7f647c1543a7a4b3731bc247d02a1d4a998cc4eafa23ac68693d325f535b98","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1844,"timings":{"blocked":796,"dns":401,"connect":123,"send":0,"wait":126,"receive":124,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500\u0026resize=500\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.189Z","timestamp":1697875280189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500\u0026resize=500\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sun, 19 Feb 2023 09:06:19 GMT\r\nexpires: Tue, 18 Feb 2025 21:06:19 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"6b02d3dbdaa697a7\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"overcrummythrift.com/watch.554176852134.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=8787e4ad-373a-416a-b5a3-9fd8a0395a58%3A3%3A1\u0026shu=0f88ab52672ecd5a23615d10de272b6711ffb319fd29331a97a49cd190afa6c8fdc3e9b999e891fe3d76e46cfd62690ff627759e3339c50ffb9130c1ddd884acdd8d10201ea999b7ba46c8dc4a55f0ad9e47a3135afc1101baeeb0f46d7f94\u0026pst=1697875339\u0026rmtc=t","fqdn":"overcrummythrift.com","domain":"overcrummythrift.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.194Z","timestamp":1697875280194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"overcrummythrift.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Oct 2023 08:21:33 GMT","end":"Mon, 08 Jan 2024 08:21:32 GMT"},"fingerprint":{"sha1":"C5:DE:2C:A4:57:98:D8:44:14:FB:0C:82:17:99:DA:E5:AB:8C:7D:C8","sha256":"C1:BD:8E:48:E1:83:2A:58:95:8A:21:CB:A8:07:E8:DC:06:5A:42:B7:75:2F:7D:E5:C7:79:CA:91:02:0F:53:4A"}}},"request":{"raw":"GET /watch.554176852134.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=8787e4ad-373a-416a-b5a3-9fd8a0395a58%3A3%3A1\u0026shu=0f88ab52672ecd5a23615d10de272b6711ffb319fd29331a97a49cd190afa6c8fdc3e9b999e891fe3d76e46cfd62690ff627759e3339c50ffb9130c1ddd884acdd8d10201ea999b7ba46c8dc4a55f0ad9e47a3135afc1101baeeb0f46d7f94\u0026pst=1697875339\u0026rmtc=t HTTP/1.1\r\nHost: overcrummythrift.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nReferer: https://nsw2u.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u_pl=19067264; ain=eyJhbGciOiJIUzI1NiJ9.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.whvp_sQpIdUSm4SK7_ZQxkz-uJBivC_dFSr-vXd5VZ4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://nsw2u.com\r\nAccess-Control-Allow-Origin: https://nsw2u.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=8787e4ad-373a-416a-b5a3-9fd8a0395a58:3:1; expires=Sat, 28 Oct 2023 08:01:19 GMT; secure; SameSite=None\niprc2c5aed9644f49cff663a17f89e5f3ad1=3570421; expires=Sat, 21 Oct 2023 12:01:19 GMT; secure; SameSite=None\npdhtkv=true; expires=Sun, 22 Oct 2023 08:01:19 GMT; secure; SameSite=None\nuncs=1; expires=Sun, 22 Oct 2023 08:01:19 GMT; secure; SameSite=None\npdhtkv32=true; expires=Sun, 22 Oct 2023 08:01:19 GMT; secure; SameSite=None\nuncs32=1; expires=Sun, 22 Oct 2023 08:01:19 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 983bfbb0071039470f535c867d6a8df4\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2092,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document, ASCII text, with very long lines (2620)","md5":"099bfbf69434fe9733228bd0af866d0e","sha1":"19a16d7ebda1b53385bd7dedd5850f7d4add9965","sha256":"21e289affb9de9bba0512aea26bab55040dc531252e25aeebcfca26331811c9d","sha512":"0ffe1b598db5342c6c031a8e32a5545ab5f995201d08dd371fd262d5629fcced869f0c1de70f644e35c44042bca3906cd9a0c7647fc00ac700aefd1581fedf51","ssdeep":"","tlshash":"c171f9649dd2a1756c53387fa2a7d3682952c20b61c4dd863a5ce3910f32fac9db2e4c","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/s/gts1p5/KIQBreNUShI","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:20.438477667Z","timestamp":1697875280438,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /s/gts1p5/KIQBreNUShI HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nCache-Control: public, max-age=14400\r\nServer: scaffolding on HTTPServer2\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e3b79da79d90325b5601115cac9f5ba3","sha1":"e162325b64244371d58d280f0c5aeca3a5373798","sha256":"756076c006264f5e0096557de6907eed2bb82be64306ebd71d583623efe9010e","sha512":"8e6ffb997a0877c11800c6391153431db55326f96843b7dea96c04c67b394ce9b2e40f170e22800c56b2de972b2b7d917b37c474d3472003b529fd46f213422a","ssdeep":"","tlshash":"16f05444533cf402b1c402983a7ac7402001d7a43d8b80322ecc21e26fd43ec4a3cb47","first_seen":"2023-10-20T20:40:51Z","last_seen":"2023-10-21T17:36:58Z","times_seen":59,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"172.64.101.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.205Z","timestamp":1697875280205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 18 Feb 2023 00:00:00 GMT","end":"Sat, 17 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37","sha256":"82:4E:6A:8D:E6:9B:EA:74:3D:E2:A4:3F:17:C0:E9:50:1B:15:F3:8F:64:56:CD:91:82:2E:74:C0:A3:75:C8:1A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: friendshipmale.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-request-id: d248770d99d0fbfc0164287da2ad09d0\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 21 Oct 2023 08:01:19 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=R6Ne0h04tNgIvM757STjFXgS0RTj%2Fr6FK3mQaBQ1OALjf7OQ8guiSU2upGx63OERd5NeaYYWW%2BklT8JvjcuXHjhkvZX4c5zIP6G%2FHLKiLa8W2OTpKm%2BgX3aAeUUpuzEbcIlDa%2F8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8d1b90c76c5-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27589,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"2d0450888479d4ddda305bd96206b240","sha1":"5b4595aab1cd3f854718e05db9be0c65a12ab2f6","sha256":"44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6","sha512":"3d9f8990f7fb6885869efd08dabd9e7e74202cc9531b9d4e5ac67d8f10ea13e6b5a86e77a82b03e6e666c2d3c9bad14254c9d2ac9c37e0df016eb5906ffcc6ca","ssdeep":"768:MpmI29BZeWZssERU8jnQY8vhqdNUHHiVAWnNniZtyrXGQA3STN+hnnNYJ/dLbO/x:o+ZfZBh8jT/0uLp5OpSoTjAdJxyxua","tlshash":"4883b7807fe0648ad3979f77b71bb4c9f8aa385a7dc4048bc601fd80796662ad9f1530","first_seen":"2023-08-25T12:30:49Z","last_seen":"2023-11-23T01:47:35Z","times_seen":6642,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":136,"dns":28,"connect":46,"send":0,"wait":142,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.9","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.381Z","timestamp":1697875280381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Sep 2023 23:04:02 GMT","end":"Sat, 23 Dec 2023 23:04:01 GMT"},"fingerprint":{"sha1":"62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42","sha256":"FD:4C:89:DB:18:10:6E:8B:95:59:88:5E:17:4B:19:C2:88:73:77:B4:54:F7:C0:9D:DB:E0:43:09:9A:28:77:50"}}},"request":{"raw":"GET /cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24714\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 27 Jul 2022 14:06:18 GMT\r\netag: \"62e1465a-608a\"\r\nexpires: Mon, 23 Oct 2023 08:01:19 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x50, components 3\\012- data","md5":"d465d02b90e928dfd9d9846e102a9dac","sha1":"22f7333777bec813bd9a7b870913a2b79b6d2fe4","sha256":"e393d4f1c6b5d4973e157f0f10764b92037dc18239500f42b72bed8ecef462fd","sha512":"7427afbe46c0f07673c817f5a57bd1293c11efa791b9fd98bf4b17e895d3361d5333ee503423d740974112341f752dead34bfa25871154ad981e5d1812ae438f","ssdeep":"768:4k4joegHCz4P81Im6uRcD50T9pdhqXJHEBre3Fx:PCoeX4k1euCerdh6JkBre3Fx","tlshash":"e6b2e1987d9346b1c1aec501ab62cc2048cb5f0db7ef2cd279410596c7be765c2aed1e","first_seen":"2023-04-05T23:50:35Z","last_seen":"2024-08-21T09:41:47.079258Z","times_seen":995,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":138,"dns":45,"connect":26,"send":0,"wait":25,"receive":30,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"absentlyrindbulk.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=9582\u0026rd=9582\u0026fd=1053\u0026bv=23.10.v.28\u0026tmpl=70","fqdn":"absentlyrindbulk.com","domain":"absentlyrindbulk.com","tld":"com"},"ip":{"addr":"173.233.137.36","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.203Z","timestamp":1697875280203,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"absentlyrindbulk.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Oct 2023 08:40:27 GMT","end":"Mon, 08 Jan 2024 08:40:26 GMT"},"fingerprint":{"sha1":"8F:3F:22:D9:6F:90:66:4F:C4:25:34:80:FD:94:56:B4:A0:72:93:50","sha256":"7C:3C:C9:36:77:CE:A7:F4:79:A7:05:E1:9C:B5:81:6C:5D:69:AE:47:D5:C0:71:9E:44:26:99:E8:DF:CF:73:D4"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=9582\u0026rd=9582\u0026fd=1053\u0026bv=23.10.v.28\u0026tmpl=70 HTTP/1.1\r\nHost: absentlyrindbulk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":348,"dns":17,"connect":106,"send":0,"wait":107,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"absentlyrindbulk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"banquetunarmedgrater.com/advertisers.js","fqdn":"banquetunarmedgrater.com","domain":"banquetunarmedgrater.com","tld":"com"},"ip":{"addr":"172.67.177.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:20.392Z","timestamp":1697875280392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banquetunarmedgrater.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Sep 2023 08:34:11 GMT","end":"Sun, 10 Dec 2023 08:34:10 GMT"},"fingerprint":{"sha1":"77:2B:76:51:D0:51:70:02:2E:BF:B7:9B:02:8B:5A:A4:91:FA:0B:9E","sha256":"A2:26:27:42:22:55:4F:1A:25:4D:F1:86:C1:5C:3C:CD:EB:7C:D9:DE:2A:F8:10:F5:98:B2:93:4A:43:2C:8F:4E"}}},"request":{"raw":"GET /advertisers.js HTTP/1.1\r\nHost: banquetunarmedgrater.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=172800\r\nx-request-id: ffb369917fd2446639f8ada2c3307380\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 21 Oct 2023 08:01:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=p8fmQuyHsOQJWE5fyf4OeeMn3q58OmbMprxSI%2Bs%2FTLnqCWtXo66l%2BLI3gWQPg3LTktd9CKbATMacp1GOrV1cjypXLMPfCa7VDn%2BMSGrZlbN6uDlHS7A2I%2BN9gxeMq1Q9y9xlYw0FB%2FTIw1U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8d24e38b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":53,"dns":4,"connect":1,"send":0,"wait":219,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/s/gts1p5/KIQBreNUShI","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-21T08:01:20.710500697Z","timestamp":1697875280710,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /s/gts1p5/KIQBreNUShI HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nCache-Control: public, max-age=14400\r\nServer: scaffolding on HTTPServer2\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e3b79da79d90325b5601115cac9f5ba3","sha1":"e162325b64244371d58d280f0c5aeca3a5373798","sha256":"756076c006264f5e0096557de6907eed2bb82be64306ebd71d583623efe9010e","sha512":"8e6ffb997a0877c11800c6391153431db55326f96843b7dea96c04c67b394ce9b2e40f170e22800c56b2de972b2b7d917b37c474d3472003b529fd46f213422a","ssdeep":"","tlshash":"16f05444533cf402b1c402983a7ac7402001d7a43d8b80322ecc21e26fd43ec4a3cb47","first_seen":"2023-10-20T20:40:51Z","last_seen":"2023-10-21T17:36:58Z","times_seen":59,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.237Z","timestamp":1697875277237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/chp-ads-block-detector/assets/img/icon.png HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 15671\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:29:33 GMT\r\ncf-cache-status: HIT\r\nage: 40789\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2e5SfGIL%2ByaaKA%2FKwMIN6Uy0QG0D5IL1QO20K%2Fmm1Bn1FzeaBCXBht1FN08y0%2FvWX%2BxXFyHNb6Eyvk4TVYk6zFr5KIc935DypY9fVlAzW8QGgc%2BgRy2TQ882UvI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8bdab4956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced\\012- data","md5":"134fce13c189ed0e483a1bddb6406204","sha1":"eed559ac52e9731c56a1fb03eb94fc82e551bb66","sha256":"723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791","sha512":"35faeeb216f26aff788bf63513b42fae25806eb125eb90d07164ad892ede5dad03b2cba4ce87941ec318dfa62a734535dbe1cf8c3bb68dbfb2fba1a2be5bbfc3","ssdeep":"384:lAnEo7Jtm6OpNKIwJKVfrlB7EIIaTgHLrDAAebZq7KHIab:uE4oKIwJiD6B/7YIab","tlshash":"c362bf19fc40ad604415ebd66eeab967b8b71eb84dd5b480a9edb1020c701f1cc5f493","first_seen":"2023-05-02T15:01:23Z","last_seen":"2026-06-27T08:28:48.537326Z","times_seen":732,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.657Z","timestamp":1697875277657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:31:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9x0uIoi7JdOf6DaqbL%2BfT1StgXsXMMubbmQWL4XuLKQRAnE7fua%2BQY8ZUqf2z66O4kDJ4C%2FA%2BBt4RLpkhcZhbrrH3L%2Bkz67ozCXBtil2XBy7MDBkXdx%2FxjtRHiA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0bda156bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67604,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.692Z","timestamp":1697875277692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/foundation/js/foundation.min.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=HMryh1fPlFAJaIYUFrsepZXDpSnzLh1DRuTNW9vM%2BvntUXHAy0AUxGmkF%2Fpv72pufdOVOjULofqbDP3wBMmmMrBXwmFECZqpFXbUORZpu7zE2X9EVUuf7Nr27Jc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0edb856bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123510,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32024)","md5":"7ed39eb42c8c450b59a24bab9cfa7fae","sha1":"7fdd3fee90709f703fac533b6061864fcd7ec206","sha256":"35ddb1ce73a4ac4f4792b00c8b8c56cbf857910ada5e2a0183d898b01adc16bb","sha512":"68f64fe44150adb2a9aaec794e1fa8af4403092fa86f9b98b1c996e51837bdb85e79e807b728f5598defb19ba3a8b3574138c03d34fc840d9029cceed2531c9a","ssdeep":"1536:RbN61LRiPamo+aCWsQC0ZNDHbehVk9c09DoeVOk04oPMgzv1zLVmrVegW:RbZPs3mS4D4MMgpQwgW","tlshash":"6dc3855e7251223246efa1b6152f060e71335b387542849cb179ceea6eb8d4832dbf7c","first_seen":"2023-03-07T12:57:57Z","last_seen":"2026-06-27T06:26:55.958725Z","times_seen":162,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doruffleton.com/?rb=S8cFZHcIYTsrkkf8Cc45NkpQepTz1AYd4vrdPLAYRT1Xj2e8QYtsNZy2yMTceRiWiFUXxeHhlHDPgCiGUfKBNhhrjTqDqhdtqZOXIZ4j1nB1-Au3HOB-vyWlcGcYZArMpUTmfJZQMJwCdcxI-NF8E_nNasLymwmwvb7s4nkLbFE6-oJwy3eM1MFddtGMaujczMipooN7y86b9M4kH4CRmQ%3D%3D\u0026request_ab2=0\u0026zoneid=3812660\u0026js_build=iclick-v1.610.0\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fnsw2u.com%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.610.0\u0026bs=b63af232-4092-4f9e-be91-b5516ac44133\u0026userId=0dd4d74c64f14d7e8acbb68fa2405f5a\u0026m=link","fqdn":"doruffleton.com","domain":"doruffleton.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.886Z","timestamp":1697875279886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doruffleton.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:17:50 GMT","end":"Fri, 05 Jan 2024 07:17:49 GMT"},"fingerprint":{"sha1":"8D:99:65:BD:FF:22:4C:6B:41:72:27:BC:29:02:01:7C:6F:06:33:89","sha256":"69:7A:09:28:AA:CA:CC:34:D2:F2:EA:93:4D:16:07:BA:F9:BA:0B:F4:99:73:D8:C8:69:64:1D:02:D2:39:F9:5E"}}},"request":{"raw":"GET /?rb=S8cFZHcIYTsrkkf8Cc45NkpQepTz1AYd4vrdPLAYRT1Xj2e8QYtsNZy2yMTceRiWiFUXxeHhlHDPgCiGUfKBNhhrjTqDqhdtqZOXIZ4j1nB1-Au3HOB-vyWlcGcYZArMpUTmfJZQMJwCdcxI-NF8E_nNasLymwmwvb7s4nkLbFE6-oJwy3eM1MFddtGMaujczMipooN7y86b9M4kH4CRmQ%3D%3D\u0026request_ab2=0\u0026zoneid=3812660\u0026js_build=iclick-v1.610.0\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fnsw2u.com%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.610.0\u0026bs=b63af232-4092-4f9e-be91-b5516ac44133\u0026userId=0dd4d74c64f14d7e8acbb68fa2405f5a\u0026m=link HTTP/1.1\r\nHost: doruffleton.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nsw2u.com/\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=0dd4d74c64f14d7e8acbb68fa2405f5a; oaidts=1697875278\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:19 GMT\r\ncontent-type: application/json\r\nx-trace-id: 3efa427ec1dfe7a017245ac44cd8c236\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=0dd4d74c64f14d7e8acbb68fa2405f5a; expires=Sun, 20 Oct 2024 08:01:19 GMT; path=/; secure; SameSite=None\noaidts=1697875279; expires=Sun, 20 Oct 2024 08:01:19 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Sat, 28 Oct 2023 08:01:19 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1629,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (1649), with no line terminators","md5":"5ab6fb5308c1bf5cc8006f989b0cc23b","sha1":"703934de4567363f3f67924e8862be9fbd85d1b4","sha256":"2addb056219b2b8febb1370d55ee07838524f3ef487744b73d353b9d22afff22","sha512":"5cd8733879dc0376b3372c8a4381601a56a64c295b1331f77bcb983bcfc1b891d33441f2d979db089697940d5a7fba264adac53b4d0b85ece07aeb81af678360","ssdeep":"","tlshash":"58310af26d99ccdb629992b7c4b04c5b0fa32cc366365e30295a52346b4a0b1041144d","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/url.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.698Z","timestamp":1697875277698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/url.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9079,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10357), with no line terminators","md5":"93d89333b0ea716b0dded414b6fd690e","sha1":"bea26f3b7bf556a03bf81259459154e5728de2cb","sha256":"acab68f8aa0636ce9058f6bf3d72d59dede88fb7111dd75532dcbd572ecb8722","sha512":"f0604bc5148b7db1d620af2f988b6878feb6ea9baaa04d8f869bca49f1edbbd40ff7865bb0d111197d820ed63b62c046ab188a9ca29ee89017a2991a25d8a049","ssdeep":"192:VrGJoVTALQGjj/vojA9NsgYzwY/Fmr7g7E5FFczHaB3L2QcXyp:VrlVEL1XojA9i3zwIFmr7e2XczHadL/j","tlshash":"d0224088b1d7f496d2553db164bf5d3fa13969cc046e6034e66aec9a382d23d0063bbc","first_seen":"2023-08-09T03:39:55Z","last_seen":"2025-03-11T09:05:12.572407Z","times_seen":213,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.685Z","timestamp":1697875277685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1101\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60641588-bf7\"\r\nlast-modified: Wed, 31 Mar 2021 06:24:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 12396891\r\nexpires: Thu, 10 Oct 2024 08:01:16 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FOvqWGUBK9FIibm2rRQEWE8rjXHBntZ1DNqFREEIdX6p53b3Y2fdLB7llJ0sofsNzru4crreerMy0%2FCd2RnXKm30EHRup5v8CXlOWupRK9wkfRpPOWJqr23WoaS%2FvIXqKEiqE%2BkG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8197f8c1288b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3166), with no line terminators","md5":"268941a21977d78e5375571a621395be","sha1":"e31219f1b0ded9a8cc5834a977297006fedd2c07","sha256":"b6e184987af8853a448d3300cecb87e5c9c91adcf6af8bde29199a9d94bc3cd7","sha512":"62c83052641038f0ccd6775ebc7f31424a41b5a95e9a8ad3d1adc06ddfb5aff543049858fbd247f0cc8c5ef650d9bc0cc2e932762ac6317f211ccc38ff68bfc3","ssdeep":"","tlshash":"dc51632fb35536b7b81f10a1775e3714963330760c1ba8326a6bccacdd78c8a25b1938","first_seen":"2023-05-17T03:24:17Z","last_seen":"2025-03-29T09:49:23.169063Z","times_seen":25,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.736Z","timestamp":1697875277736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 May 2023 11:33:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87482,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65447)","md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-06-27T18:52:59.138742Z","times_seen":32620,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false\u0026ver=ae1ab3cfcf7670b1d705","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.397Z","timestamp":1697875279397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false\u0026ver=ae1ab3cfcf7670b1d705 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697875278.1.0.1697875278.0.0.0; _ga=GA1.1.1692317278.1697875279; _ga_HS5Y0K7QPG=GS1.1.1697875278.1.0.1697875278.0.0.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40790\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kWmUThdrOOiS5Wrgyvv6m0nmcFQev5gdcgn34tzVwqN1o17JhOe0hS0%2BtBUYM1pd%2BrxIYjMWdqq8JZG94knUaWdmYB7HuS%2BL7%2Bpowtcvq160OQkoMQhURNPXh8U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8cbaed056bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36458,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.1","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.269Z","timestamp":1697875277269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.1 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 20 Oct 2023 08:20:23 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40789\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qP%2FIzMv2DYrBen0MVvOprdeXiymp35%2FTvwaCGaGA4TLptjJ4hJ%2Bvaz3QGdYNxlI1sna7uFujCzkJOacyB1Ak7JM1aPoMslzojglWlMeh%2BYNaVksVwj9rB9UkIOs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8bddb5856bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (423), with no line terminators","md5":"ed94fa94e236140899a07d0bb24f233d","sha1":"8e7f16eda1a41233d4d0f19264382b6222959b6c","sha256":"2fb43730229e7993c5976889479bdd4488ce1cab9f939f11d7bba6e327c9a5df","sha512":"b4244ccd361dc344cbd75048cba2aa9866264b304504a87610a652bf3d28a9782ed39a43208f56230053359da1209456bc62265554b9ab8777b175f9c14848ba","ssdeep":"","tlshash":"c3e0e5e93a51b1686ca28be0f97ba56d5028f1594e328ddcb39a0267cf29292f011568","first_seen":"2023-05-09T01:54:18Z","last_seen":"2024-12-12T06:18:46.081255Z","times_seen":40,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.1","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.689Z","timestamp":1697875277689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.1 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 20 Oct 2023 08:20:23 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=j6pjXkED%2BZoIk5oN0nXftE9vp4eM%2BYe14mhMkSQmi%2F2GRYh82f9FQ0hQgNrgn0oEtbDF3Cizf58U0ApyiAhmfNMsk1HIVY1VmaQnOYcC%2FAQFSIuVDXPwIw3%2FvgY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0edb656bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8005,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8246), with no line terminators","md5":"95e8541b1c7d8d1c6d971b8a1254f05e","sha1":"a0a315f535cefee969c8f938ae9133beb051b51d","sha256":"94d90d0cae68aae94246413284189ad0fd41bca226dcfc1d3394f25087df2ede","sha512":"e07cb1b2a0bc7018f6bb755b7b06bf670627b0999d67a5d3fc976901dcaf76b50cf66c55197ea22022984a95bd3782589021377f817fa951e0747bb9d622bc01","ssdeep":"192:dti9tr2idQ9KLAtgZLgCB8piI+C5SyHQMVTtei2ls:mTrfdQwLAahgCCUC5SyHQM+DS","tlshash":"2f02432b302c51f9da732ee9fffe0264746bb251f12191057e1d2406bb984687570abf","first_seen":"2023-05-08T02:38:38Z","last_seen":"2024-08-21T07:44:59.843268Z","times_seen":30,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?ver=202342","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.697Z","timestamp":1697875277697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /w.js?ver=202342 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/10813-1684464982349.1523\r\ncontent-encoding: br\r\nexpires: Mon, 14 Oct 2024 22:59:47 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10778,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10778), with no line terminators","md5":"f6c87bc49e7646c7ccda489b9defc829","sha1":"9003fc52b4c4014b4bd9fe2f4506440b299478b2","sha256":"e97d12898ebf1039197a2a1c2f87bfe3b56f93eca2bfe60a46a1053fab7ad860","sha512":"625c15dbc10c9f9aa946a4e3a6ae95227e886fbd229d4999d942cf7179acc6a5d06a52d903c3016b3baab7abc02b22c8acfcdf570e93b868b23262cd9c19142a","ssdeep":"192:6EAPyKjIhY2MpyzWwv7afoUOl1T5ANkbAsw6EbJK1Wg:5pM6WwCe5AbVK1P","tlshash":"a022c6ac7151f03406a750a9133f670af23a4a25385b9494db6ec8f03e7899f4277fad","first_seen":"2023-05-15T15:42:40Z","last_seen":"2024-08-21T09:42:58.322033Z","times_seen":1419,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":30,"dns":5,"connect":12,"send":0,"wait":7,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.452Z","timestamp":1697875278452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:26:20 GMT","end":"Thu, 21 Dec 2023 05:26:19 GMT"},"fingerprint":{"sha1":"81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89","sha256":"BF:65:05:97:11:62:1C:0A:F5:44:E0:12:95:5F:87:62:0B:A7:91:BE:8B:EA:52:FB:C4:0D:05:93:22:9B:A8:47"}}},"request":{"raw":"GET /gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\nexpires: Sat, 21 Oct 2023 08:01:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 81154\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":228891,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5788)","md5":"8ae2b751a5e73fa3fbb58a72dff2881c","sha1":"f45721d161c83844258500fc27fb4242d20de1ed","sha256":"66189b971bac09e032b95af5631af2503655647425fe9db9f0249093cbefe9e4","sha512":"b4bbe576d8bd055de3069d64c98615e1d55c89a4e7cde37cf6fae2df2f021263f4a21fe429c537da4b2be1b777dfc6df5353f8fe55062203766c9942f3f0a617","ssdeep":"3072:fKgT0tIl3G9D7Dy8uh4ehFo03U20MuY6eOiF8W6MPbDKQVishaOhjxKQw+H:nP3aD7Dy17q0SDeOiF81OfKQVisAOJPH","tlshash":"1d24f8d973c2706a82a6b475503f014ba57b6da2b85cccd8f189c9d02eb4a9a4177f3c","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700\u0026ver=6.3.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.099Z","timestamp":1697875277099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:32:05 GMT","end":"Thu, 21 Dec 2023 05:32:04 GMT"},"fingerprint":{"sha1":"28:23:2B:8B:2D:09:6C:BB:06:7A:35:80:95:BB:F8:03:41:C8:99:2C","sha256":"84:B5:C2:9E:13:5D:AF:67:E5:86:DD:EA:3D:0D:5C:8D:81:5F:64:DB:C2:55:00:32:19:5F:B5:64:5A:59:FD:A5"}}},"request":{"raw":"GET /css?family=Open+Sans%3A100%2C300%2C400%2C700\u0026ver=6.3.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Oct 2023 08:01:16 GMT\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8256,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8472), with no line terminators","md5":"3f5613f7160c3b6638dbbe32b93f8e97","sha1":"62d3566bc0e2a74456c2bebb6d280be511402791","sha256":"5d5d0961816e9953501ec925709e8c23de9e3add0dd57ccbc3f4402a0f53207c","sha512":"d7946ad371cf379db0030f3e1e149faea51f3ec1fc2a0af2ed37737a78ee9193f96ce39d9599d0f61db7701ea1c896c363555218617d6f77b9cccbb4d15637d6","ssdeep":"96:pto5P/FZoJZ7PWgGFeBsVc+o8KNotoGP/FZfJm7YWg5FxBsVc+orKNrto9P/FZ8L:sCC8QqO6aM","tlshash":"bc0287859413586462430fe977ef3930aa0fbf25606091326ffa58ee8edbd25237075e","first_seen":"2023-09-15T02:33:11Z","last_seen":"2023-12-14T14:02:24Z","times_seen":485,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":413,"dns":5,"connect":12,"send":0,"wait":20,"receive":0,"ssl":397},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.702Z","timestamp":1697875277702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=7XZvXZ4gMha%2F8UYqo3aoTSM58k7c0tulpRV0GpUdE989hOT%2BRmxtpFnWhYdFHLkgRQbgKRAP4v3K56QNG8LIgB3f7JCHIQRvDIi7SvdOlmPspEgtmdU1%2BRsEN3k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c10dd856bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6206,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6303), with no line terminators","md5":"f9853427f0beb8a283ac3cdabe910ad6","sha1":"8fcd5776a89dbe61bde8c23df7abd40148d0a336","sha256":"1d280a7d6bcd1ea74968f32131f53c6a7b39468f6d7f9a21543fef8525b405ca","sha512":"6a5b9d0403311038358b626113835b389ba0dc7d7ab51c860a4c5ddb40db61b206338155dacb6770b9ed01bc2d7ae813d9f3d96d5f5057771c0bff2d6ad00803","ssdeep":"192:Z4wRLpgDyLw66cl1BSkVptrraji2boWgk4Rw:TRtuyLsOtab1gkiw","tlshash":"2bd1a2f878cee16042e856e4046b38d871b33695d00d9584b2f394db7973caeaf26b1c","first_seen":"2023-09-23T16:46:34Z","last_seen":"2023-10-29T19:39:39Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.729Z","timestamp":1697875277729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-27T19:17:49.305532Z","times_seen":858261,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1697025199/2d40d0fc/39033877.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.739Z","timestamp":1697875279739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1697025199/2d40d0fc/39033877.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 70673\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Wed, 11 Oct 2023 11:53:19 GMT\r\nETag: \"65268caf-11411\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"c9578ce1b30a7957a4f58916181545c1","sha1":"5edd16bdbdd4c4caacd7ba9408b15b01bbb765fe","sha256":"881c108606af7bdf549477962370e9b2e17f1473a875354f37a09c634e34d492","sha512":"d28bb3b17e6756b67b054a063d67b1a15e6e13f24e370ef82d96087eb34dbfa5d4635cc7dd9a216ef640c00fe906e22c424c9298885834b1f026d6b0b0258fbc","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":6,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":106,"dns":40,"connect":27,"send":0,"wait":51,"receive":32,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696606849/450212ed/39028293.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"78.24.223.39","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.749Z","timestamp":1697875279749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696606849/450212ed/39028293.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 85525\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Fri, 06 Oct 2023 15:40:49 GMT\r\nETag: \"65202a81-14e15\"\r\nExpires: Mon, 20 Nov 2023 08:01:19 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"f31e59ed8b4014e8c240b752b138ca58","sha1":"92fe10034473f9c1939631c2c50642bfa521bf0f","sha256":"2e559285efef0bb13f7cb134710ea244f456a76074859562fff2cd86952aed87","sha512":"bde01149df96c8085e91408180fd1d38e8779001bf9cbaad5b74c19c20fe4c97aa235ff07d264782978991131538594129a9440ba820e5be27ca0aef8a792951","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":7,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":104,"dns":32,"connect":31,"send":0,"wait":58,"receive":62,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/hooks.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.717Z","timestamp":1697875277717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4627,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4704), with no line terminators","md5":"414c8462f6209b4905f767c8ba5c787d","sha1":"a80b8b79908e6cdf11648f810e707a75c859cda3","sha256":"007c3734a3f7737d74061ab5b96905dcb14ba1f88e7a6df55364b9d9573e3ce1","sha512":"3020c2e824981f80b0065c6607681696d108d9c8bb441e0a77a7adbe750c19e80ddb19ec7e3474ef3e97083559e3a804aa4dc4aa71244b31a5466dea553a38fd","ssdeep":"96:en5ggxcq5Va/rqXCgcfT19cJ3rAgNWNSt5s8G07AajUR1rvgdH4+TtW0K:e5hcqXmrHfB9cxEkt2WAM60K","tlshash":"eaa156c474c3b430d2637063a07f549ab63a69e5782dd080e25d90d67d73a8de077a6d","first_seen":"2023-08-09T03:39:55Z","last_seen":"2025-04-06T21:49:55.60576Z","times_seen":5551,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.274Z","timestamp":1697875277274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Oct 2023 11:32:23 GMT\r\netag: W/\"652d1f47-302c\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=4XgWdCU4ec7GPTN71%2FyLDmSDNNYvAyPFnPdgHZ7P6pAAPtbLqKYOhnWIHxxKCC%2BfEuuuTcfKv6thNgAxKuHfj2%2Fys%2BYIDi3Doweb6W%2Fxs37f%2F1IJZxXMW0CxaZ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8bddb5b56bf-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Mon, 23 Oct 2023 08:01:16 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-27T19:16:38.740845Z","times_seen":116703,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.695Z","timestamp":1697875277695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=DA8fxiB3oR0SPNJsP98Q76Pr6sBVRgyQKZjyYswK0LG991ncvZ8J7%2Bg8kvsI0wLuGBRGQcHUs4ylPrLhhOxHpNL7b8LwziVbkUlgc0xWE%2FkfRVpHf4rTe2IbUFs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0edbb56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":880,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (965), with no line terminators","md5":"fa7fe6b99dd294598a44154cb2f424b7","sha1":"78a909d97e5dfeffa1e1311e2c7ad8633d768960","sha256":"9600c505b5d0d438a661c90d7b6ef5c6098024ff4e16e58a3577d5d0c837237f","sha512":"fbc6df3824019e3289d860ffef8f574d311f0e39042c4a1b97a12662417cec3d8db2c43ec770cb232dec24be2323009eefe52c270cf20b1c0ca926f3bab453fd","ssdeep":"","tlshash":"811199ab7234577c0d9a7b9b0e9f164878ab2c81b811a50bb45c7849432cf56c27ff78","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-03-28T10:26:25.865144Z","times_seen":37,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:18.459Z","timestamp":1697875278459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:26:20 GMT","end":"Thu, 21 Dec 2023 05:26:19 GMT"},"fingerprint":{"sha1":"81:B9:A4:E4:E4:84:05:A7:F6:52:4F:E2:74:27:36:05:0D:74:15:89","sha256":"BF:65:05:97:11:62:1C:0A:F5:44:E0:12:95:5F:87:62:0B:A7:91:BE:8B:EA:52:FB:C4:0D:05:93:22:9B:A8:47"}}},"request":{"raw":"GET /gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Oct 2023 08:01:17 GMT\r\nexpires: Sat, 21 Oct 2023 08:01:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 77353\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":214598,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"3df08b577f9316760bce2839503a1ab6","sha1":"0e31b3601310d0dbbb56a3d8ca63ece87bc86a92","sha256":"cf738c56ad6b49abc628b69178c2872f3a2cba5f6a44a136855924cc1cbffd73","sha512":"4924a70b2a2548ce290ecd7229e060729f68d205cf47f4526feaeda3a415fb351ca2fdbc777513cb9330057c16baf09684e1f802a360c0159fd38f6df39224ce","ssdeep":"3072:C4T0tIl3G9DDDy8uhjnbhFo03U20MuY6eOiF8W6M5LDKQVishagQxKQw+H:XP3aDDDy1vq0SDeOiF81QvKQVisA9PH","tlshash":"9624f7d9b393706a82a7b479503f010ba17b6d92f84cccd8e189c5d42eb4a99517bf3c","first_seen":"2023-10-21T10:01:34Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.408Z","timestamp":1697875279408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697875278.1.0.1697875278.0.0.0; _ga=GA1.1.1692317278.1697875279; _ga_HS5Y0K7QPG=GS1.1.1697875278.1.0.1697875278.0.0.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40790\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ncPe9ApbNa4%2BmyTRDpWUsc2Cydsb88ltDAP7ip9SAVI%2BYSqzrA0jV9wdoKtT0D7NK1H0SPGfsoQ1FG7JvRRq%2BVZQ7Hyz4XNuBmTpG3mnW2D51SlFw9mjQPsFQBw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8cbaed256bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79073,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.629Z","timestamp":1697875277629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:14 GMT\r\ncf-cache-status: HIT\r\nage: 40788\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=WBRH6Ve8%2Bo%2FKE3rrvgo13dS9kaeYEdmkQ7ulBlx1I7rsQO4jO1zOIpr%2Fls6r8ZRoLvgP5sCs8nbbLpmW3TD3bX97Tj6WWdTw4z15Mq813WmNINsPYx784RAcDE4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8c0ad8856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"169a5dd1261e0d434162d1af68acbbcd","sha1":"c18d59ed069049b012a61a8e6b958bfb25bc1b71","sha256":"82b3dabc6615507ef352f36aa08a805d409e883f8024fd01fda43175b6b67b38","sha512":"92328fe0d3e85e7eefecc85f4b6e2882c6cd15981bb75d877ae00def78c6b6d3e54b0151322fa04a579c7ddf02a90186860f37a9c7f0594130dc12c014297002","ssdeep":"","tlshash":"d77000c080a2802888200280830a3b2030082300880e00083080000820202838c880c2","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.383123Z","times_seen":24,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.631Z","timestamp":1697875277631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=112\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=WnP%2FP1oeON83anCaivwbuzKP7RQQ7wEAGbq7tyx1%2Fgusm8CR6G82IFGqI6sGbt6FeQv5t%2F9Ew3gR7peEMCW4dRmnmBE%2BrvEXRUd3QHQITuEwZSn3cFJc6rhyZAo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8197f8c0ad8956bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"70cd599fb1a952f67216cc82829f9ada","sha1":"74cfae7f053f69abf2dce9cb74c962a83b8ba8bf","sha256":"1fa8347df53b4287898f910b10e189b287e5610aa9d6cd322fb53d487b37a56d","sha512":"d603eeaba928c38cd588ffde87eda640ba93f4fe713813ef980864a2452e7ffcdf695d11d5c46cfa0db688baade3a5f67df9ec4b90c7d29a0fc1ae34ac29681d","ssdeep":"","tlshash":"cdb01214352f1311c11c68cb24bce7e839f4606d36611204addd993de5d9da217a5db1","first_seen":"2023-05-07T18:42:49Z","last_seen":"2024-10-12T13:50:15.100139Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doruffleton.com/tag.min.js","fqdn":"doruffleton.com","domain":"doruffleton.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.232Z","timestamp":1697875279232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"doruffleton.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:17:50 GMT","end":"Fri, 05 Jan 2024 07:17:49 GMT"},"fingerprint":{"sha1":"8D:99:65:BD:FF:22:4C:6B:41:72:27:BC:29:02:01:7C:6F:06:33:89","sha256":"69:7A:09:28:AA:CA:CC:34:D2:F2:EA:93:4D:16:07:BA:F9:BA:0B:F4:99:73:D8:C8:69:64:1D:02:D2:39:F9:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: doruffleton.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 25495\r\ncontent-encoding: br\r\nx-trace-id: 8992916997cece46d4b4f4d85394902b\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Oct 2023 10:49:02 GMT\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80790,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c433b3a7bd223a09d253bc43a4b0e1b","sha1":"6b4d75928278e355515d83228c12b33a7054ec08","sha256":"09f60ff073f52f912ab3522789cf0379dc3846f444566af619d2af5f1af459b8","sha512":"1693a95e5848c3c85f68dca8f8a914f3002a2f7e1b5b566dcc767328b3e579681d478657c4dd31aba07946af90e737c368f51612af138bb203849d49547c4e65","ssdeep":"1536:u84Cioj+QZ6p1cZzUUkqtus603frOhtcsNHa6fGBR:wo/DcqtP3fqffW","tlshash":"3a83735a709070b01a33e457572b222a96b75931f93b9030645ebb9e3836c2df72efd4","first_seen":"2023-10-20T12:59:20Z","last_seen":"2023-10-24T20:11:50Z","times_seen":144,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":185,"dns":9,"connect":37,"send":0,"wait":49,"receive":19,"ssl":140},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"doruffleton.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.115Z","timestamp":1697875277115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40789\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=X899czGoxTnwzkZk%2F839ZNJ8sUC2uWxAelYcPSKWM991nn91Y0XWuAacx0GYxPxRh%2FNtYYkg6dzbfgq7abGK5npj6ed3nHW7wtkv6v0Etm7%2Fg9nVV6KX%2BSi6lmY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8bd4b0d56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147784,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.core.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.693Z","timestamp":1697875277693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/foundation/js/foundation.core.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Ja7C%2BSzsgUY6NeVbqVePAnhGFCAmZ47HxYpYvsTpZOa5as0%2BkbLpiS2TdR2vRf%2FewrVAsG%2FKbY5kSGdQOUxwusg79AXERk8lr6h0Y028J0%2FyX6rI%2BNYeww1HTq4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0edba56bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13696,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0e78b1db7d662e95ae8c3506146b080a","sha1":"9f1675c87a306e4dd45f84d0b7ac484ae506245e","sha256":"6e79424f448b401656e2384514c9332a4baa6ab4d458ba048655e01f4b1c60f2","sha512":"5daaf41da784eddf054ce3456a5518ff17c0159ee7950f08fa7285adf10175b5e93f9804bb7e0f6aa418e1995c333650f3b5447a65fcf762bac11cee2f05b71d","ssdeep":"192:qsW5PVf0d6j7ZC9wgg/Pr7SFAiigPNECtLBulCqiR5DN0gB53RNHRkhg9lteAyd1:oGAjpTehEhOcQmANHk97ecaSpMqgGJ","tlshash":"4752204d2aef2163443b3079039f1094b17c96ab6619dd507c6da3a41fa593583b3fec","first_seen":"2023-03-08T15:39:55Z","last_seen":"2026-05-31T19:38:37.930064Z","times_seen":62,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.727Z","timestamp":1697875277727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 18 Jan 2023 11:16:33 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8171,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8365), with no line terminators","md5":"08e6714eaf3cfe8f3c7839f22d90ba4e","sha1":"94fdad68854d0d3482b877aef7ba7c2eb265c621","sha256":"e424039d5a737a1bda8a5ded60919e5067085729310762eebb09c20e07d249c8","sha512":"a6eb0122f56c5706e1757696f1191905d67dd9a2d4c2a2ac62649c4ce08052adc4a984e591eaff2c7dadef8a32503a9bc36500ef8937823704e92d0ce195a1e3","ssdeep":"192:sFRv/5sAwj4ZsHA3nc9f9dIfssIombo9MXGL:aRXBtncdIYaM0","tlshash":"5a0221a83719b93358cba0a6607b170326232027584a54687738dcefcdfcea91573fb5","first_seen":"2023-04-05T08:09:08Z","last_seen":"2025-04-06T21:49:55.632889Z","times_seen":10374,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.130","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.378Z","timestamp":1697875279378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 28 Sep 2023 05:26:19 GMT","end":"Thu, 21 Dec 2023 05:26:18 GMT"},"fingerprint":{"sha1":"A4:04:A4:CD:74:4A:5D:D5:E5:B7:37:26:D7:25:FC:00:CC:C5:4A:4F","sha256":"64:5B:78:C4:BB:6D:85:64:51:33:66:39:47:60:20:67:F7:42:7B:BE:46:B3:84:F8:16:54:45:AA:36:67:B7:B0"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Oct 2023 08:01:18 GMT\r\nexpires: Sat, 21 Oct 2023 08:01:18 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 11389023952349986819\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 50981\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147522,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3968)","md5":"a3312559d459e0e42277a4e01477657d","sha1":"7c1d2efa8286295df4c8c2c7ea1922629d91e392","sha256":"9c07e19d6062957e779c57f54d47fc9f11440053911faeb3883b771fe9f7393e","sha512":"563bab0f74cc8c9b54979acf0993e1ae12e917ffe10d8ffc3957e6d2119216bb990eac37855b811a46cdf6ebbb9294ccf4de85b610c7a08a97a79b93f05a0d30","ssdeep":"3072:t2d7W3s9+2mVPqM5krI3QfvsxcKwId8W+NcwVwsOkvJrx1SpWZ7l0IqLVTiURady:tC7W3s9BmVP35krI3Qfvsxjb8NcwVwO6","tlshash":"a5e3199a72a2bcb38b6395d6006f0107b52d9863f40cc8b0f1ccddd97d249aa5277b6d","first_seen":"2023-10-21T10:01:35Z","last_seen":"2023-10-21T10:01:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":110,"dns":1,"connect":10,"send":0,"wait":42,"receive":10,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/ehn7s3j8/dmlqt.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.094Z","timestamp":1697875277094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/ehn7s3j8/dmlqt.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 03 Sep 2023 08:56:51 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40789\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CXtWewYZPirrF5onWRVo7hAw1hxJlz4ws6WOEdtrPDGJ5%2BwbyFM%2B7JIFWhM3fX%2FB%2Bl0%2BWQz%2BK%2BOJ3mTgvaa5o3O80xerRVv%2FuA0VhB1EAckPOdvf843jwHUlvj4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8bd3b0456bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6817)","md5":"1fee9d9ba9d8cc17b88610f753052dd1","sha1":"b8608a7bcb05bcca68814671bb114871f2c97f0e","sha256":"f50cc3d3d3714cc7aae738eb19b41f70b1eec94c290f8985af4dcd36dcfad0dd","sha512":"199d3c0372d8bfe21e6bad2e3f2b5301336b84e79d1d69218ee7936fd2d9aa70ebfa3e692b2de58438ee5cb60029df699112a38ff65b1a0a48597f1ce57d5184","ssdeep":"384:lxsYEGsuVvDZIoq+/KJFH82/PpkjoJkDfzDN3j:lxtFlIW/KJFHT/PpkjoJkDfzDJj","tlshash":"7462b66295901d04a237892db9d6b7352b7d8223ab0617bff5a5d120c7cfd3902b3b4d","first_seen":"2023-06-26T20:11:28Z","last_seen":"2023-10-24T04:13:23Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.700Z","timestamp":1697875277700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fveFNd%2FMzpYGqDo%2F9PnbEJQEYchyh7T3Zqli1annja6dhk4xqfwIRyaKiYfUgHgtn8RUJYE3VN0KQHKQg9mPKHa7Cahfsy1kxamM8P6YIyvRICGdi2tQhcvbBIM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0fdd456bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":701,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727), with no line terminators","md5":"e8b1dbb3b1a9bc1b59010bd6f7035465","sha1":"c9d0ec84d9184c72ea6335c67193d25a90e003af","sha256":"18c991e1cdc15a5c427215cf20569d60a7aa9bc32f1f7a2382640782a6e5bfe7","sha512":"4024c87a8d1e6d6ea50fb2e93f03260a89047ef7579c32f6c207936c049091f1b7f5c9f4b6eb543fc759f97f6f474eb40b7e3cc5b64e1e8fedc8dea715e7c70f","ssdeep":"","tlshash":"03014c3a77042b3208c6e263a87e73957d2760363a4658b8291cfca6cc51d561175da9","first_seen":"2023-05-10T12:45:09Z","last_seen":"2025-04-04T07:06:30.457542Z","times_seen":983,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/p/jetpack/12.7/css/jetpack.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.118Z","timestamp":1697875277118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /p/jetpack/12.7/css/jetpack.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Oct 2023 19:16:20 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 20 Oct 2024 08:01:16 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 1\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100602,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":104,"dns":6,"connect":9,"send":0,"wait":12,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/q8eepl4d/dmlqt.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.271Z","timestamp":1697875277271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/q8eepl4d/dmlqt.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 03 Sep 2023 08:56:51 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40789\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=nNYb2mFLQ3aAh0eILalX5KmMeyKB4zM6TGJMOs2Z8tUDrPmd1b1XPFPbHwyf69HQk%2BGeP3hhxxk8cz8jIER6nMNBFD%2BZuNnvwPbiLPgERUWV9ThlcQ9wODvmnjs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8bddb5956bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8143,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8145), with no line terminators","md5":"734068ce5268bc23a7506f3e9e9f5d41","sha1":"acf53910826dc6702a5fb8f2bf6aab44b17f4886","sha256":"2dd5b45b7df3d954548b70324f5730bf593bcdab6dac3632cc19ac119e8912a8","sha512":"34c86d47fb70e3baacea268cd1cf9d13698389887b315c697c353623060d9527b6f7b9f6ac3bc594cc239a11b98c79403dafeb9c2c627733227c85604b2ed61d","ssdeep":"96:u0ZI7tTgobQ5YWjTQRSouZ+YRXNlVGigAH/FtkSP5C9XMnM8MyMwjEY/e:/5YGTQMj1Xr/HoSxC9cMHxwjEY/e","tlshash":"aef1573345502c5ee6bfd16956c3766e1498f0a3bd3e07cec8269a3cc2cf5de6526148","first_seen":"2023-04-06T17:19:00Z","last_seen":"2025-03-25T19:45:27.378561Z","times_seen":94,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"172.67.150.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:17.691Z","timestamp":1697875277691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Oct 2023 08:01:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:31:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40788\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=q1q4bD8pQYWU8k7E%2FHXuoRpCk%2F6YYrnYzUrZQz2x5x68fYt0chu0qbvRNjFgf%2F1hWKlLa47LL6aj%2Fo%2FD6ibWLUXcOSPjZnXIpavwETad1DFSTjClpmfHNO5Gxrk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8197f8c0edb756bf-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4857), with no line terminators","md5":"3c05b4818fda400788cc5c2f60d87ea4","sha1":"01e544e8461be8bb14a13fb8be13cc1e8259858e","sha256":"db8170cdde3c954a075a4c1cfe836be73fc450ee8a298978470ca6a110284a08","sha512":"7d35abce59e5ecdcec8d96c94ed565e41ff43e90439c3224f31abbb0bb2d2291f74f5093e23649e94df508546fe701c9f10095167725fa4f667e91e90edde5f1","ssdeep":"96:4VdwhZhc31ZAph+87FLccnPOaB+FLPlkXLGLp:/QnApTxDB+xPlkbcp","tlshash":"f8a1cca4f0c4ee8702f60bfe26e6145117291863973d162035de806ddcb8e8442fabbd","first_seen":"2023-04-05T15:06:00Z","last_seen":"2025-03-27T22:09:40.53513Z","times_seen":100,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"overcrummythrift.com/watch.554176852134.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=8787e4ad-373a-416a-b5a3-9fd8a0395a58%3A3%3A1","fqdn":"overcrummythrift.com","domain":"overcrummythrift.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-21T08:01:19.521Z","timestamp":1697875279521,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"overcrummythrift.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Oct 2023 08:21:33 GMT","end":"Mon, 08 Jan 2024 08:21:32 GMT"},"fingerprint":{"sha1":"C5:DE:2C:A4:57:98:D8:44:14:FB:0C:82:17:99:DA:E5:AB:8C:7D:C8","sha256":"C1:BD:8E:48:E1:83:2A:58:95:8A:21:CB:A8:07:E8:DC:06:5A:42:B7:75:2F:7D:E5:C7:79:CA:91:02:0F:53:4A"}}},"request":{"raw":"GET /watch.554176852134.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=8787e4ad-373a-416a-b5a3-9fd8a0395a58%3A3%3A1 HTTP/1.1\r\nHost: overcrummythrift.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 21 Oct 2023 08:01:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nCustom-Referer: https://nsw2u.com\r\nAccess-Control-Allow-Origin: https://nsw2u.com\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://overcrummythrift.com/watch.554176852134.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=8787e4ad-373a-416a-b5a3-9fd8a0395a58%3A3%3A1\u0026shu=0f88ab52672ecd5a23615d10de272b6711ffb319fd29331a97a49cd190afa6c8fdc3e9b999e891fe3d76e46cfd62690ff627759e3339c50ffb9130c1ddd884acdd8d10201ea999b7ba46c8dc4a55f0ad9e47a3135afc1101baeeb0f46d7f94\u0026pst=1697875339\u0026rmtc=t\r\nSet-Cookie: u_pl=19067264; expires=Sun, 22 Oct 2023 08:01:19 GMT; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiJ9.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.whvp_sQpIdUSm4SK7_ZQxkz-uJBivC_dFSr-vXd5VZ4; expires=Sat, 21 Oct 2023 08:02:19 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 42ab00a2c3caa9e0302b32bbf50ae1a5\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":3496,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":368,"dns":1,"connect":118,"send":0,"wait":133,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-21","alert":"Sinkholed","trigger":"overcrummythrift.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}